Adding new subnet to organisation

Posted on 2008-11-06
Last Modified: 2012-06-21

We are running Windows 2003 Active directory.

We have 4 subnets, each subnet is a site in AD and has a DC.

We are going to add a new subnet to one of the sites....this subnet won't have a DC, it will be used for app servers only. Do we still need to add it to AD sites and services?
Question by:kam_uk
    LVL 95

    Assisted Solution

    by:Lee W, MVP
    I don't know how practical it is to create one site per subnet... to me, a site is a physical location, not a network subnet.

    That said, I would add the subnet to the site that you want it to primarily authenticate with.
    LVL 15

    Accepted Solution

    As leew says sites and subnets are physical structures that help map the physical network structure, to facilitate network communications and to set physical boundaries around network resources.

    A site is a group of computers in one or more IP subnets. You use sites to map the physical structure of your network. Sites mappings are independent from logical domain structures, and because of this there's no necessary relationship between a network's physical structure and its logical domain structure. With Active Directory, you can create multiple sites within a single domain or create a single site that serves multiple domains. There is also no connection between the IP address ranges used by a site and the domain namespace.

    Computers are assigned to sites based on their location in a subnet or a set of subnets. If computers in subnets can communicate efficiently with each other over the network, they're said to be well connected. Ideally, sites consist of subnets and computers that are all well connected.

    When clients log on to a domain, the authentication process first searches for domain controllers that are in the same site as the client. This means local domain controllers are used first, if possible, which localizes network traffic and can speed up the authentication process.

    It probably wont make much difference adding the subnet to AD at this moment in time but it is good practice and should be done.

    More information can be viewed here:

    LVL 18

    Assisted Solution

    To answer your question, it is not required to add and define your new physical subnet to the AD DS. If you don't you could and very likely would have problem such as slow response or performance for your domain client and possibly getting NETLOGON Event ID 5807 error etc. Therefore you should add and define your newly added subnet to one of the existing site in AD.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    As network administrators; we know how hard it is to track user’s login/logout using security event log (BTW it is harder now in windows 2008 because user name is always “N/A” in the grid), and most of us either get 3rd party tools, or just make our…
    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now