Multiple Sites, DCs, WAN...Your Opinion needed...

Posted on 2006-06-30
Last Modified: 2010-03-19
I have about 12 sites connected throughout the city by frame relay. We run 2000/2003 mixed mode. Currently, we have a DC at every site we have. Apparently, the thinking was that "if there is no DC there, and the link goes down, they will still be able to log on".

However, I'm thinking that if the link is down, the only reason that they wouldn't be able to log on would be if they are a brand new user, or they are logging on to a machine they haven't used before. In addition, if the link is down (which is almost never is), they won't be able to do much at all, able to log on or not...

So, I'm considering simplifying the network some and demoting all the branch office DCs. I still have two at our hub site. I may keep another across one of the WAN links on our second largest site just so I will have another outside this building.

Am I missing anything I should consider?
Question by:hotcam
  • 2

Expert Comment

ID: 17017167
If there is no DC at the remote office, and the link goes down, then the users would not be able to logon, however they will be able to log on with "cached credentials". Basically they can logon to their PC's but will obviously have no access to other server's over the internet. They can function with local resources, such as printers on the local network, database's on the local network.
A good solution is to place at least 1 domain controller at the remote site "if it's within your budget", and this will handle all logon's. When the link goes down, the users will be able to logon fine and have access to the domain, and when the link is back up the domain will replicate with the other domain controllers.
You will need to make the domain controller at the remote site a Global Catalogue, this will handle logon requests.

This setup has many advantages eg, quicker logon time because it doesn't send the request over the internet VPN or WAN, and also it saves WAN bandwidth.

Hopes this helps

Author Comment

ID: 17017183
That is the way it's set up right now, so yes. If the WAN link goes down, they can't get to the internet. These are not VPN links, they are frame. All the net traffic "flows" through hub site for filterning, etc.

I'm thinking it's a waste to have this config, because a lot of those sites only have 3 users or so... So auth traffic I would imagine would be minimal...
LVL 95

Accepted Solution

Lee W, MVP earned 300 total points
ID: 17017644
From a different perspective... why do you want to remove DC functionality?  Is there a problem?  Is the replication taking too long?  What happens if you decide to push applications via group policy.  Wouldn't it be better to then have the DC in place so you could utilize sites and services to ensure that when you push applications you're not doing it 3+ times (one for each system there) and instead are only doing it once - to the DC.

Your wording suggests you are planning on doing this unless someone can convince you otherwise.

If you didn't have servers at the sites, then for three users I probably don't implement them.  But since you already do, then you might as well use them.  Ultimately, if the sites don't need servers at all (3 users need a server?) then you should start retiring them as you'll save on electric costs, licensing costs, and maintainance costs.  But if they need the servers anyway, leave them be.

Author Comment

ID: 17017674
Ah hah! Great point about software distribution. That's not something we are doing at the moment, but we will be.

Yes, I was unless there was a compelling reason to keep them.

There are rare FRS troubles... cleared up some of that when I came on here.


Featured Post

Save on storage to protect fatherhood memories

You're the dad who has everything. This Father's Day, make sure your family memories are protected. My Passport Ultra has automatic backup and password protection to keep your cherished photos and videos safe. With up to 3TB, you have plenty of room to hold the adventures ahead.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now