New remote domain

Posted on 2006-04-18
Last Modified: 2010-04-13
512K VPN line to connect  2 remote offices, they have own DCs.  We just transfer file or PC remote through these VPN lines.

                 Domain A  ------- 512K VPN --------- Domain B
            512K VPN
          Domain C

Now we will setup new office again, but my BOSS asks me that we can centralize account management in Head Office with new remote site?

1. Move Additional Domain Controller of Domain A (w/ Global Catalog) to new site D ?
2. Build up Child domain on new site D ?
3. Just linked up by 512K thin VPN tunnel, is it enough to support frequent replication for 1 or 2 ?
4. Or Seperate Domain (DCs) like as Domain B and Domain C ?

Can tell me which one is the best solution please ? (why?)

Thanks !

Question by:rhinoceros
    LVL 48

    Expert Comment

    Hi rhinoceros,

    you need to look at what you need in a domain.....

    do you need to have a separate directory structure for the new site? It is much better to build your new site with a secondary domain controller which will link the AD Database together and replicate just fine through your VPN tunnel

    unless you specifically need separate domains there is no point you just create more work and a less effective way or working

    LVL 3

    Expert Comment

    R -

    I agree - there is no compelling reason here for anything but a flat, single domain -
    If you have separate domains now, we can pick a strategy to migrate the accounts if you want to simplify - or create a forest structure if you don't.

    Your real configuration focus needs to be on Active Directory Sites:  Sites are used to manage authentication and replication traffic.
    With them, you can set frequency of site-to-site replication and other traffic-shaping options.

    You may also want to look at DFS (Distributed File Services) - with which you can create & maintain replicated shares at each Site.

    Some considerations for the above:
    How much traffic is there over these lines?
    What volume of file changes are there each day?
    What volume of files are accessed remotely?
    Also -
    Are you running any server-based Database applications?
    Are you running an Exchange server at any of these locations?

    Where there's a will, there's a way!
    LVL 13

    Author Comment

    Indeed, I really want to know what the main consideration is when we decide to run "Secondary Domain Controller" or "Separate Domain” on new site except the VPN (bandwidth).

    Thanks a lot !

    LVL 3

    Accepted Solution

    The primary considerations are consistency & administration

    The advantage of a 2nd DC over a separate domain is centralized
    administration & security. (single set of users & groups, etc)

    Having a 2nd DC @ the other site adds very little traffic, which can be controlled further using AD Sites.

    Does that help?

    LVL 48

    Assisted Solution

    well do you want a single point of admin or do you want to separate AD databases that you have to administer

    this means - 2 lots of GPO, 2 lots of security Groups, 2 lots of users etc,

    unless you have two business/companies/child companies etc, stick with a single Domain, your administration is cut in half, you are following best practices, and you are adding redundancy with your additional DC
    LVL 3

    Expert Comment


    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    Join & Write a Comment

    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    I've been asked to discuss some of the UX activities that I'm using with my team. Here I will share some details about how we approach UX projects.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now