Avatar of GSI Guy
GSI GuyFlag for Canada

asked on 

Is Active Directory Sites and Services required and how to set up in Win 2008 R2?

Hello,

     We have a situation where we need to add a server to a remote office... right away...which previously has just been relying on access over VPN to the main office, for services. Besides the file server role that this new (remote office) server will fulfill, I feel the remote office would benefit from a DC being there.

- The main and remote offices are on different subnets
- The two offices are connected by SonicWall VPN tunnels and its pretty much open access between them, for most protocols
- Windows 2008 R2 DC's
- If it matters, Exchange 2007 SP3 is running at the main office (on a Win 2008 server which is not a DC.)

At first, I would like to know if setting up Active Directory Sites and Service is even necessary in every situation, of remote offices and different subnets... are those the requirements, right there?
Despite the fact that I and the people with me on my team have decent knowledge in a number of areas, we just haven't had the need to ever use Sites and Services (and probably have basically ignored it in any study.) Does anyone know of any good step-by-step links for setting it up on Windows 2008 R2 domain?

Thanks a lot!
Windows Server 2008Active Directory

Avatar of undefined
Last Comment
GSI Guy
Avatar of serchlop
serchlop
Flag of Mexico image

Sites and services are used to config ad in every subnet to use the server in the same subnet. If you don't use it, even in your main office or branch, any machine could try to authenticated to any server, not the dc in the same subnet.

A good idea for some branch offices, are use read only dcs. You can create it almost the same way a normal dc, but these server allow you to auth users and computer in branch offices, without the need to query the central ad every time. Only the first time the main server is query and the following times the rodc server uses it cache.
Avatar of GSI Guy
GSI Guy
Flag of Canada image

ASKER

I imagine the Exchange server would also use Sites and Services to check in with DC's in its subnet, rather than foreign subnets... care to confirm that? (If so, then that's another benefit.)

Seems like the main benefit is helping the network to run efficiently. Good benefit.

I have been under the impression that RODC is for when you have concerns of keeping tight security on the remote office. No one can make changes there... is there really any other reason. If it is, then some office may find it completely unnecessary...  thoughts?

Seems to me that RODC is no-return. You can't make it a full DC later... so if there are no security concerns, then it might be better to keep open the potential for having a full DC, if it is ever needed. Feel free to comment.

Your comments are appreciated.
Any step-by-step link known for setting up Windows 2008 R2 Sites and Services?
ASKER CERTIFIED SOLUTION
Avatar of serchlop
serchlop
Flag of Mexico image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
SOLUTION
Avatar of ashutoshsapre
ashutoshsapre
Flag of India image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Avatar of GSI Guy
GSI Guy
Flag of Canada image

ASKER

Seemed to go really well. Thanks.
Windows Server 2008
Windows Server 2008

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo