Active Directory Design Help

Posted on 2007-10-03
Last Modified: 2010-08-05

We are planning to install AD across two sites and require some assistance with the second site.

Site A will consist of:
Server 1 - Domain Controller - Global catalog server - DNS
Server 2 - Exchange 07 - member domain server
Server 3 - SQL Server, backup DNS

Site B will have a primary file server but we are not sure what the best way to configure this is.  Do we create one domain with two sites or the other way round?

We are unsure what the best way to create the AD for the second site.  We would like users from site 1 to be able to login at site 2.  we would also like to put in a second global catalog server, could we put this at site 2 or does this have to be at site 1.  how much load would this put on the link between the sites.
The two sites will be connected by a 2mb leased line.
Question by:bains1000
    LVL 26

    Accepted Solution

    One domain, two sites. A DC at each site, with the infrastructure master NOT being a global catalog server.


    LVL 4

    Assisted Solution

    Personally I would create a single domain, configure up 2 sites.  Add a DC into Site 2, configure this as a GCS, & DNS server.  This way users will use local resources for name resolution, and logon.  Depending on how stable your AD config is  (i.e. number of changes made)  I would schedule AD replication to run overnight to reduce the load on your network.  However a 2Mb leased line should be sufficent to handle your requirements.

    Just my tup'pence
    LVL 70

    Assisted Solution

    You only need two domains if you want a degree of seperation, different security boundaries and different password/account policies. In this case I dont think that applies so a single domain would be preferred.

    As you have two physical sites it woulls make sense to have two sites in Active Directory also. To give some resilliance and to reduce intersite traffic then two domain controllers, one on each site with both configured with AD Integrated DNS and both holding a copy of the global catalog would be best.

    Alternatively you could consider a terminal server solution for the second site.
    LVL 18

    Assisted Solution

    by:Jeremy Weisinger
    I agree Dean and MidnightOne.

    " ...with the infrastructure master NOT being a global catalog... "
    I just want to add that this is only applicable in a multi domain environment. If there's just one domain then there's no harm in having the IM on a GC.
    LVL 18

    Expert Comment

    by:Jeremy Weisinger
    Oh, I also agree with KCTS. (didn't see your comments)

    Author Comment

    thanks for your comments.  Our thoughts were heading down the right route.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Join & Write a Comment

    Learn about cloud computing and its benefits for small business owners.
    Synchronize a new Active Directory domain with an existing Office 365 tenant
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now