Solved

Active directory install at remote site

Posted on 2009-04-09
4
505 Views
Last Modified: 2012-05-06
I have a client with one location running SBS 2008 premium at their main site.  Currently there is one other site connected by a VPN with a DC. I am adding another site with a VPN connection and I am installing a DC there also.
Question 1) Are there any limits on DC in SBS 2008
Question 2) Would it be best to install Active Directory on the server at the main site and then ship it to the remote location or should I just add AD at the remote location? I have seen problems with SBS networks when a domain controller is not accessible, therefore I would think it is best to install it at the remote location.
0
Comment
Question by:ajdratch
  • 2
4 Comments
 
LVL 6

Expert Comment

by:mickeyfan
ID: 24111608
It is by far best to install AD locally and then ship it. The SBS server has to be the GC no matter what.
0
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24111650

To answer your questions directly,

>> Are there any limits on DC in SBS 2008

No limits whatsoever. You can install as many servers into an SBS domain as you wish, and make them DCs/GCs/DNS Servers, PROVIDED they are Server 2003/2008 Standard/Enterprise Servers. You CANNOT install more than one SBS into any domain at a time.

>> Would it be best to install Active Directory on the server at the main site and then ship it to the remote location or should I just add AD at the remote location? I have seen problems with SBS networks when a domain controller is not accessible, therefore I would think it is best to install it at the remote location.

It doesn't matter either way. If you install at the remote site, simply verify connectivity is available to the rest of the network beforehand by way of a box-to-box VPN, and also verify all the appropriate ports are opened through the VPN tunnel: http://technet.microsoft.com/en-us/library/bb727063.aspx.

-Matt
0
 

Author Comment

by:ajdratch
ID: 24111837
I'd prefer to install AD locally and then ship it. I will make it a GC. I have just had problems with SBS networks when a DC in not accessible, it seems nothing works right. I'd hate to have problems for the one week when the server is being shipped.
0
 
LVL 58

Assisted Solution

by:tigermatt
tigermatt earned 500 total points
ID: 24112057

You are correct; you may have issues if you promote the DC locally while it is disconnected from the network and being shipped. This is purely because the DC will register as a DC in Active Directory and machines will think it is present and working as a DC, when it will in fact not be contactable.

Either way, though, it doesn't really matter where you install Active Directory. The point is that you can do it either way - and there won't be any breach of the SBS EULA presuming it is Standard/Enterprise Edition of Server 2003/2008 which you installed.

-Matt
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now