Domain site configuration

Posted on 2007-08-01
Last Modified: 2010-08-05
As of now i am setting up our first DC in what would be called another site.  Right now I have DC1 at one location and DC2 in another location.  These two locations are seperated by many many miles.  What i want to do is create two sites.  Each DC will be in its own site where computers and each location will use the correct DC so i can reduce the load on our WAN.  Both sites are in the same domain, same forest, same subnet.  The only thing that is different about them is that one site uses the 10.1.x.x  IP and the other site usies 10.5.x.x.  What is the best way to create 2 sites to help keep things organized?
Question by:dave_mcdowell
    LVL 4

    Expert Comment

    HOw are you planning to route or forward the traffic in between them as well as from the main office to these two spokes?
    Are you planning to have two separate VPNs from your main office to these DCs?
    Any plans of using any firewalls?

    LVL 23

    Accepted Solution

    You can create SITES in AD Sites & Services. For example you can create SiteA and SiteB and move the relevent DC under its belonging site. Ensure you set up Replication in NTDS Settings.

    Open DNS and expand Forward Lookup Zone > Domain > _sites. You should be able to see the two sites here. Each site should have their _kerbros and _ldap record pointing to its own DC.
    LVL 70

    Assisted Solution

    So you actually have two subnets 10.1.x.x  and 10.5.x.x!
    Good you need at least one subnet on each site to do the next bit properly

    Firstly you need to create the subnet information in Active Directory Sites and Services and then you create the sites and assign each subnet to a site.

    Ideally each site should have its own DC, Global Catalog, DNS and DHCP server to provide redundancy and to avoid unnecessary intersite traffic.

    The clients should have the address of their local DNS server set as the preferred DNS server and the remote DNS server as the alternate DNS server.

    Author Comment

    How do i setup NTDS settings.  Do i assume that when i setup the site and put the Ip address in i can put the address as and mask of for site one and for site 2 put the addrses of with a mask of  Also, the 2nd site will be a DC, GC and DNS but wont have a DHCP.  is that a problem on the DHCP part?  Also, in site one i have 3 other locations that i dont want to be part of another site  and be part of site 1 which are 10.2.x.x, 10.3.x.x and 10.4.x.x.



    Author Comment

    I configured two sites, one site that has everybody else but the 10.5.x.x.  the other side is created with the correct DC's in the correct site.  the IP link is between both sites.  However, i am still seeing computer from the other site still logging on to the DC's from the wrong site.  What can i do to fix this.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now