Avatar of amaraa12
amaraa12

asked on 

How to switch 2 ADs

We have 2 AD locating in geographical other location.
This is image http://img235.imageshack.us/img235/8561/adsil5.jpg
Sometimes we have trouble with power outage location1 and location2. AD1, AD2 is same DC and including same AD information replicating about 30 minutes.
My question is if happens power outage in location1 how to point users to connect AD2.
Active Directory

Avatar of undefined
Last Comment
amaraa12
Avatar of mren08
mren08
Flag of Australia image

All this comes down to Sites.. and GC placement.. you should have a GC in each site.

The KCC determines the users closest Domain Controller for intra-site replication.. When you define another site in AD you create a Site Link to control Replication... How have you defined your Sites in AD?

Some more reading: http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/activedirectory/stepbystep/adsrv.mspx

Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

Your description is a bit confusing - I assume that this is the same domain on two sites with at least one DC in each site.

If that is the case then you need to make sure that at least one machine on each site is a Global Catalog Server - to check and/or set, go to Administrative Tools, Active Directory Sites and Services, Expand, Sites, Default first site and Servers. Right click on the new server and select properties and tick the"Global Catalog" checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)

You also need to make sure that a machine on each site is a DNS server. You can install DNS if necessary using the "configure my server wizard" or you can use You can do this through Add/Remove Programs->Windows Components->Networking Services->DHCP.

Assuming that you are using Active Directory Integrated DNS on the first Domain Controller, DNS will automatically replicate to the new domain controller along with Active Directory. Set up forwarders as detailed at http://www.petri.co.il/configure_dns_forwarding.htm to allow external resolution

You then need to configure all the machines on each site to use the DC on their own site as the preferred DNS server, and the DC on the other site as their alternate DNS server.

Both Domain Controllers by this point will have Active Directory, Global Catalog, DNS and the domain could function for a while at least should any one of them fail.

If you are using DHCP you may also want to put a DHCP server on each site, with non-overlapping scopes.

Avatar of amaraa12
amaraa12

ASKER

These two server are connecting via Fiber Optic.
IP address is 10.10.10.10, 10.10.11.10. All users taking IP addres from firewall. These 2 servers Domain Controller, and DNS servers.
Avatar of NoEvil
NoEvil
Flag of United States of America image

If the Active Directory Domain contains 2 DCs in Different Sites, and Active Directory Sites and Services is configured correctly with Subnet Information, then if 1 DC goes down at location1 the computers @ location1 will automatically connect to a DC in location2 if they have network access to it.
Here is how XP finds a DC to connect to: http://support.microsoft.com/kb/314861

If you are still having a problem with this, here is a link on how to force workstations to use a specific DC.  http://windowsitpro.com/article/articleid/13535/how-can-i-force-a-client-to-validate-its-logon-against-a-specific-domain-controller.html

Note: If the DC that is running FMSO roles becomes unavailable new objects will not be able to be created in AD until it is back online.

Hope this points you in the right direction.
Avatar of Brian Pierce
Brian Pierce
Flag of United Kingdom of Great Britain and Northern Ireland image

With the setup you describe there should be no issues - just follow the instructions I gave earlier. If you have defined the subnets in AD Sites and Services and associated them with a site then clients will first attempt to authenticate with the DC in their own site and only use the other if there is a problem. However you still need to provide DNS and GC on both sites and configure the clients to use the local DNS server in preference.
ASKER CERTIFIED SOLUTION
Avatar of NoEvil
NoEvil
Flag of United States of America image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of amaraa12
amaraa12

ASKER

OK i will Test it today and i will tell you guys.
Avatar of amaraa12
amaraa12

ASKER

Problem was DNS settings.
AD1 and AD2 is DNS servers.
For Network Bridge Configuration: for both connections:
TCP/IP properties->General Tab:

Location1
Preferred DNS server AD1 DNS
Alternate DNS server AD2 DNS
Location2
Preferred DNS server AD2 DNS
Alternate DNS server AD1 DNS
Avatar of amaraa12
amaraa12

ASKER

Thanks you guys helping for special thanks for NoEvil.
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo