?
Solved

What is the optimal domain controller to users ratio for a site using Windows Server 2008 R2?

Posted on 2010-11-18
2
Medium Priority
?
1,405 Views
Last Modified: 2013-11-25
We currently have around 160 users with 2 domain controllers at a site. We have some monitoring software running and it is showing over 60 LDAP connections to the each server. I am going to add another domain controller to the site but I was wondering what the correct ratio of domain controllers to users is. We are going to implement some network intensive applications so I'm assuming the LDAP connections will only get higher after that.
0
Comment
Question by:pphm
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
thiagotietze earned 500 total points
ID: 34170326
Hi,

Here is some documentation about this:
http://technet.microsoft.com/en-us/library/cc728303%28WS.10%29.aspx

As a quick answer I would tell you that, you don't need to care much about the number of Domain Controllers, with Windows Server 2008 R2 this is more realistic then ever was...
I said that because the number of "connections" and requests have increased a lot, with the usage of 64 bit Operating system.

If I were you, I would re-think the possibility of placing a new Domain controller.
I think it is just a waste of hardware :-)

As you can see in the document, things start to go "critical" wjen you reach 3000 users... based on ONE domain controller.


And yes, you NEED to have 2 Domain controllers, in any number of users you have in a site. It is secure, and it wort the cost.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34170597
You can also enable field engineering logging http://support.microsoft.com/kb/314980  to log expensive and inefficient searches

I'm with thia, you probably don't need another.  The main reason for two DCs in any size domain (even 10 users).  Is for fault tolerance/uptime.

You only have one DC and that goes down hard and you have downtime/problems for users.  You have at least two and one goes down and the users shouldn't even notice.

Thanks

Mike
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses
Course of the Month9 days, 13 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question