New remote domain

512K VPN line to connect  2 remote offices, they have own DCs.  We just transfer file or PC remote through these VPN lines.

                 Domain A  ------- 512K VPN --------- Domain B
               /
              /
            512K VPN
            /
           /
          Domain C



Now we will setup new office again, but my BOSS asks me that we can centralize account management in Head Office with new remote site?

1. Move Additional Domain Controller of Domain A (w/ Global Catalog) to new site D ?
2. Build up Child domain on new site D ?
3. Just linked up by 512K thin VPN tunnel, is it enough to support frequent replication for 1 or 2 ?
4. Or Seperate Domain (DCs) like as Domain B and Domain C ?


Can tell me which one is the best solution please ? (why?)


Thanks !


LVL 13
rhinocerosAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jay_Jay70Commented:
Hi rhinoceros,

you need to look at what you need in a domain.....

do you need to have a separate directory structure for the new site? It is much better to build your new site with a secondary domain controller which will link the AD Database together and replicate just fine through your VPN tunnel

unless you specifically need separate domains there is no point you just create more work and a less effective way or working


Cheers!
0
artthegeekCommented:
R -

I agree - there is no compelling reason here for anything but a flat, single domain -
If you have separate domains now, we can pick a strategy to migrate the accounts if you want to simplify - or create a forest structure if you don't.

Your real configuration focus needs to be on Active Directory Sites:  Sites are used to manage authentication and replication traffic.
With them, you can set frequency of site-to-site replication and other traffic-shaping options.

You may also want to look at DFS (Distributed File Services) - with which you can create & maintain replicated shares at each Site.


Some considerations for the above:
How much traffic is there over these lines?
What volume of file changes are there each day?
What volume of files are accessed remotely?
Also -
Are you running any server-based Database applications?
Are you running an Exchange server at any of these locations?

Where there's a will, there's a way!
0
rhinocerosAuthor Commented:
Indeed, I really want to know what the main consideration is when we decide to run "Secondary Domain Controller" or "Separate Domain” on new site except the VPN (bandwidth).


Thanks a lot !

0
Cloud Class® Course: Microsoft Windows 7 Basic

This introductory course to Windows 7 environment will teach you about working with the Windows operating system. You will learn about basic functions including start menu; the desktop; managing files, folders, and libraries.

artthegeekCommented:
The primary considerations are consistency & administration


The advantage of a 2nd DC over a separate domain is centralized
administration & security. (single set of users & groups, etc)

Having a 2nd DC @ the other site adds very little traffic, which can be controlled further using AD Sites.

Does that help?

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jay_Jay70Commented:
well do you want a single point of admin or do you want to separate AD databases that you have to administer

this means - 2 lots of GPO, 2 lots of security Groups, 2 lots of users etc,

unless you have two business/companies/child companies etc, stick with a single Domain, your administration is cut in half, you are following best practices, and you are adding redundancy with your additional DC
0
artthegeekCommented:
Exactly.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.