best practice guide for satellite office domain controller

Posted on 2011-05-03
Last Modified: 2012-05-11
I am looking for a best practice guide for a w2k8 domain controller to be put in a satellite office of ours that is linked to our DC at the main office, again another w2k8 DC
Question by:mmercaldi
    LVL 12

    Expert Comment

    please see link below:

    happy reading :)
    LVL 13

    Expert Comment

    are there going to be administrators there ?

    you could consider installing a windows 2008 RODC (Read only domain controller) on a windows core installtion using the install from media option to get pass the initial AD replication.

    Author Comment

    nope there will be no onsite administrators

    Also that technet article from xmlmagician does not really help

    I will be more specific in what I am looking for.

    I have built PDC and BDC on the main site, I need to know for a satellite office for the dc over there, which will not be a child domain, just an additional dc, if I need to build it simply with a secondary DC setup like I would for the main office?
    Also what is the best way to setup dns for the users?  meaning should their primary dns be the main office dns or should the satellite office dns be the primary dns on both the computers and the server?
    LVL 24

    Expert Comment

    LVL 13

    Accepted Solution

    well since there would be no admins there i suggest you secure it by installing a server core RODC DC .. and ofcourse you need to install it with the install from media option unless its okay for you to download huge data according to your AD database size
    as for which dns should your satallite site users should use , diffenetly install the DNS role on that server and let it be there primary dns server

    Author Comment

    Gotchya thanks alot M-Manakhly so I should do the RODC, but that part will be out of my hands for certain reasons, but the DNS server role should be installed on the satellite office DC and have that primary DNS for all equipment

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Shouldn't all users have the same email signature?

    You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now