Should I put a DC at a datacenter with Exchange or just go over VPN? Concerns with adding another over there.

We have a datacenter with a lot of stuff and a domain over there. We have a different domain at our corporate office and Exchange. We are considering moving Exchange to the datancenter which is fine and it could find a DC over the VPN.

My concern is when people at corporate log in I never want them to authenticate over the VPN. I also would want Exchange to check the local DC first then go over the VPN if needed. I know this could be done with sites but I am not comfortable with setting that up.
LVL 10
ThorinOAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

iedenCommented:
If you have a datacenter and Enterprise licensing and VMWare or some other virtualization software, a DC is a good way to assist users logging in. Of corse you would like to build a DC for your datacenter. If for the fact alone to decrease VPN traffic for the existing servers already in your datacenter.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mike KlineCommented:
I'd setup another DC, and you hit the nail on the head with sites.  What are you not comfortable with (in regards to site)

The client will always try to use the DC in its AD site first.

Thanks

Mike
0
MegaNuk3Commented:
Definitely install a GC in the datacenter, Exchange needs a GC in close proximity to work well.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

ThorinOAuthor Commented:
Well in sites and services there are subnets, my current site, and transports. Do I just add another site, and move that DC into that site? Do I have to worry about site links, subnets, or anything else?

I do have VMware and Server 2008 datacenter licensing.
0
Mike KlineCommented:
Is there already a site created for this remote site.  Sites can have DCs from multiple domains.

but yes you setup a site, associate the subnet and create a site link for the two sites.

Thanks

Mike
0
MegaNuk3Commented:
Have you installed the other DC already? Is it also GC?

Yes create a new site, define a subnet for it, then move the new GC to it, reboot the GC for good measure after the move then open a command prompt and do "nltest /dsgetsite" on it and ensure that it shows as being in the new site.

Any machines that are in that subnet will be in that site and will always try and use the in-site DC/GC first
0
ThorinOAuthor Commented:
I have not created the DC yet, just in the planning stages.

In terms of availability lets say the DC(s) in a particular site are unavailable for whatever reason will they then try the DCs in the other site?
0
MegaNuk3Commented:
Yes, exchange will failover to using the other DC/GC and users will too.
0
ThorinOAuthor Commented:
Think it would be worthwhile to create 2 DCs at the datacenter just do have redundancy over there incase I need to do maintenance or whatever?
0
iedenCommented:
Yes, users in other sites will use the DC if the COST associated in your DefaultIPSitelink or other links established for communications throughout your subnets is attractive. AD Sites and Services allows for that kind of "cover your assets" protection when multiple sites and DC's are available.
0
MegaNuk3Commented:
Yes, 2 GCs are recommended for high availability but not totally necessary
0
Mike KlineCommented:
I always try and make every DC a GC...especially after seeing Eric speak a few years ago, see bullet 1

http://adisfun.blogspot.com/2009/04/lessons-learned-from-eric-fleischman.html

Thanks

Mike
0
iedenCommented:
I have 7 DC's each is a GC. Small domain but very hardy :-)
0
Lee_YCPCommented:
If 2008 and you are apprehensive about physically placing a DC there, maybe look at doing just a RDOC.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.