Solved

linking multiple sites  - all using Active directory

Posted on 2011-09-27
6
129 Views
Last Modified: 2012-05-12
I have just started supporting an organisation that is split over 5 sites. All the sites link back to a 6th central location for internet access via 10mb links.

Some of the sites already have DCs. We are considering implementing Googls Apps across the organisation too.

Users may spend 6 months at one location and then move to another.

Currently the sites are set up as 6 independent entities.

We would like to make it easier for users to move between sites by allowing them to use the same login details at the five sites.

What is the best way to proceed, Can I link the sites together somehow or do I need to implement a master DC at the 6th central site.

Also what about file storage. Currently files are stored on the DC at the respective sites. Do i need to create storage at the 6th or is there a better way.

Any advice would be appreciated.

0
Comment
Question by:roy_batty
  • 3
  • 3
6 Comments
 
LVL 10

Accepted Solution

by:
WayneATaylor earned 500 total points
ID: 36708930
Depending on the sizes of the sites I would normally configure a single domain acros all the sites, and have DC's confgured as "global catalogs" at each site.  The last part is needed as that allows the GC server to actually service AD requests rather than just having the AD data.

The important thing also is that DNS is configured correct so that all DCs can see each other for correct AD replication.

If this is all configured correct, asll users AD data will be automaticlaly replicated across all DC servers and then allow a single login from any site.

Wayne
0
 
LVL 1

Author Comment

by:roy_batty
ID: 36709081
Would I need a central DC at the 6th site for this to work?
0
 
LVL 10

Expert Comment

by:WayneATaylor
ID: 36709098
No necessary, if that is a small site you could just point the clients at the 6th site to the other serevrs by DNS, so make their DNS point to one of the other remote servers.  Although of course if the link is down, they won't be able to authentictate!

Wayne


0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 1

Author Comment

by:roy_batty
ID: 36709711
When you say

"The important thing also is that DNS is configured correct so that all DCs can see each other for correct AD replication."

Can you give me some more detail about this.
0
 
LVL 10

Expert Comment

by:WayneATaylor
ID: 36709730
Yes it's bsically that all servers must be able to talk to a DNS server that will register their address.  What I would do is have the primary DNS server set the same for all of the servers, i.e. one of the sites and the second address one of the other sites.  That way, all of the serves will be able to talk to address to any other server.

That is needed for the AD replication as in effect every DC server will need to talk to each other DC server.

Wayne




0
 
LVL 1

Author Comment

by:roy_batty
ID: 36709929
Do you have a link to any guides of how to do this is more detail?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After having deployed hundreds of thousands of Terminal Services seats worldwide, I still see all the time people asking me that same old question: "If TS/RDS is that reliable why are you telling me I should reboot it that often? My DC/SQL/Exchange/…
On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now