Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 191
  • Last Modified:

Textbook Active Directory setup for remote sites

AD Newbie sorry :-(

I am ready to deploy 12 servers to my remote locations. Can someone give me the textbook setup for AD for these locations. Currently I have 1 domain setup test.local and have all users in that domain in the users folder. What do I need to do to the remote servers so that they replicate only the users for that facility? I am also running exchange under that domain. Can create an OU for each facility and place those users for that facility in the correct OU and replicate only that OU to the remote server?
0
ccosner
Asked:
ccosner
  • 3
  • 3
1 Solution
 
buddholeCommented:
Microsoft etxt: http://technet.microsoft.com/en-us/library/cc787284.aspx
There are several options designing your ad and sites. Easiest way is to have one domain with several sites configured. All DC's replicate their AD databases, including users with each other. The sites must be connected to a main site with a VPN or other connection.
If you're doing 12 sites and you're an AD newbie be careful ! It's important to read much more about this issue to design a correct AD and site topology. Maybe hiring a consultant with practica experience is an option ? You cannot learn the ins and outs of AD design in on EE thread.
0
 
Joseph DalyCommented:
I think you may be off a little bit. By default AD will replicate the entire contents of your main DC to all of the remote sites. It must do this in order to function properly. That is what the DCPROMO does it makes each new DC a replica of the original DC.

Once you have  your 12 new DC's configured you would configure which site points to which DC in active directory sites and services. This way users will authenticate to the closest DC to their site and fail over to a remote DC in the event of a failure of their site DC.

You can create different OU's for the users at the different sites but this is more for ease of management, delegation of duties, and group policy settings than AD replication.

I hope this helps a little bit. Anything else just ask.
0
 
Joseph DalyCommented:
I agree with BUDDHOLE active directory is defintely not something that can be learned over an EE post
0
Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

 
ccosnerAuthor Commented:
xxdcmast-

I was just thinking that I could replicate a small amount of the domain to cut down on the data being transfered over a slow link. Is this not correct?

0
 
buddholeCommented:
That is not possible, you replicate all or nothing. If you want to limit the amount of replication data you have to create child domains.
0
 
buddholeCommented:
You might consider using smtp site links, more about setting up links is found here: http://codeidol.com/active-directory/actdir/Configuring-Sites-and-Managing-Replication/Lesson3.Configuring-Intersite-Replication/
 
0
 
Joseph DalyCommented:
If the amount of data being transferred is really an issue for you I would reccomend doing the DCPROMO in your main office and then shipping the servers. Once the initial replication is complete there is much less data to keep it up to date.

And as BUDDHOLE mentioned replication is an all or nothing deal. One other thing to note is that you should ensure that every one of your 12 sites can communicate with each other. Active directory does not like it when it can not talk to all the domain controllers. If you do not have links enabled between all the sites you will get alot of error and warning messages in your event viewer about repication.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now