Need for Domain Controller / DNS Server Branch Office

Posted on 2006-06-06
Last Modified: 2008-01-09
Need for Domain Controller / DNS Server Branch Office

I need help in putting together a justification for having a Domain Controller and a DNS server in our office. We are a state agency and with about 300 users. Our main office will be moving and merging with another office, we will have 100 users in this site and we will have 10 servers 3 of which are we servers (we currently have 60 users). The 5 regional offices connect back to use to access proprietary SQL applications. Currently we are part of a Win 2003 AD domain, we are in a building with other state agencies and we do not have a Domain Controller or DNS server, it is housed in another agency. We will be moving to a stand alone building connected back to the main site with a T1 line. I feel we should have our own Domain Controller and DNS server. Am I right? I’m thinking it would cut down on traffic if logon authentication and DNS name resolution happened in house rather than going over the T1 back to the main office. Also if the T1 goes down then we would not be able to login at all and could not print or access networked apps or files.
Question by:TimSharpe02118
    LVL 23

    Accepted Solution

    You definitely should have one, even if it becomes as necessary as building a workstation as a DC with DNS.

    If the T1 is down without one the user may still be able to login locally using cached information, but no network access would be available to the local servers unless you had local user accounts on the server for each user to access it with.

    Further DNS would be offline, so you would have to resolve any local servers via IP address or cached DNS information.

    Having a DC at each site also cuts down on WAN traffic, because authentication is done locally at the site, and will speed up login times and authentication requests to servers/Exchange, etc. because the Kerberos tickets will be localized.
    LVL 74

    Assisted Solution

    by:Jeffrey Kane - TechSoEasy
    You don't have to reinvent the wheel here... Microsoft has recently put together a number of valuable resources to help you determine the best solution for your situation.  While adding your own DC and DNS server can be helpful... it's possible that using other technologies such as Distributed File System can offer you better performance as well.  

    Take a look at what they have put together:

    And a good third-party analysis of their Branch Office Solutions:


    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    This article is in response to a question ( here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
    The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now