Solved

I want to add a second domain controller (global catalog) Beta 10.2.0.0 /16 on a different subnet for fail over

Posted on 2011-02-15
10
664 Views
Last Modified: 2012-05-11
I have domain controller Alpha (global catalog) on 10.1.0.0 /16

I want to add a second domain controller (global catalog) Beta 10.2.0.0 /16 on a different subnet for fail over  

I want all users to connect to Alpha, and only connect to Beta if Alpha is missing, or hard down.

I have switching on the network, so Alpha and ping Beta and vice versa

I have DCPROMO Beta

i'm just not sure about Sites and Services.  Do I create two sites, do I make a site link.
I need some help with this part of the setup



0
Comment
Question by:13years
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
10 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 34901427
i'm just not sure about Sites and Services.  Do I create two sites, do I make a site link.
I need some help with this part of the setup


you have it right


Take a look at the steps in my comment about halfway down here

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_24109142.html

You associate 10.1.0.0 /16 with alpha and 10.2.0.0 /16 with beta

Also make beta a DNS server if you are running AD Integrated DNS.

Really in your situation I'd just put them both in the same site (just have one site), no problem having both DCs authenticating users.  

Thanks

Mike
0
 

Author Comment

by:13years
ID: 34901556
I'm reading, post back in a second.  

Neither Alpha or Beta is running DNS.   That is on a seperate server.  

 I guess guy I work for just wants this as a "Back up" of the AD.  In case something happens to Alpha, Beta can be used.  
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34901584
ok then don't worry about DNS

So if you put them in the same site the same scenario happens.  If A goes down then B will still service clients.

The benefit of putting them in the same site is that you get much faster replication using intrasite replication versus intersite replication.

Are you 13 years old?  If that is the case AWESOME!!  If you are 13 are you also on twitter...you would be the second young person I've encountered working with AD in the community over the last week. (wondering if it is the same person)

Thanks

Mike
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:13years
ID: 34901882
Good info.  So I create two subnets and associate 10.1 .0.0 to Alpha  and 10.2.0.0 to Beta

Under Inter-Site Transpports IP
I deleted the default site link and created a new one.  I added both servers to the list

Do I need to do anything with the prefered transport for a bridge head server?
When I go under server and select NTDS Settings, I have a Transport choice.  IP?

Is there a way to make ALL users whatever subnet always connect to Alpha, and only Beta if things are FUBAR?
0
 

Author Comment

by:13years
ID: 34901896
I stole it from most of the user aggreements that say "you must be exactly 13years of age" or older to post here.
0
 

Author Comment

by:13years
ID: 34901912
Ok, same site, and then I would not need subnets.   That make sense.

I assume there some sort of cost check that tells an AD account which DC to use.  
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34901949
Well still associate the subnets but just all to that one site.   You can weight the DCs if want one DC to handle more of the load

http://technet.microsoft.com/en-us/library/cc816793(WS.10).aspx

I wouldn't worry about that in your situation.
0
 

Author Comment

by:13years
ID: 34902068
hmm AD is replicating.   Maybe I am wayyyy over thinking this.    

Gosh darn thank you for a solid answer.  
0
 

Author Closing Comment

by:13years
ID: 34902074
AewsomeO
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 34903049
No problem, glad to help
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question