<div>
I agree that RODC is a much better idea. 
</div>


<div>
If You Have 15 to 20 Users and You want Secure way of replication then RODC is best<br />
<br />
<br />
Install RODC in Server Core :<br />
<br />
<a href="http://technet.microsoft.com/en-us/library/cc754629(v=ws.10).aspx#bkmk_installSrvFound" rel="ugc">http://technet.microsoft.com/en-us/library/cc754629(v=ws.10).aspx#bkmk_installSrvFound</a><br />
<br />
<br />
Hope it Helps<br />
<br />
<br />
Regards,<br />
<br />
Osama Mansoor
</div>


If You Have 15 to 20 Users and You want Secure way of replication then RODC is best


Install RODC in Server Core :

http://technet.microsoft.com/en-us/library/cc754629(v=ws.10).aspx#bkmk_installSrvFound [http://technet.microsoft.com/en-us/library/cc754629(v=ws.10).aspx#bkmk_installSrvFound]


Hope it Helps


Regards,

Osama Mansoor

<div>
Excellent - totally overlooked RODC - thanks :)
</div>


Excellent - totally overlooked RODC - thanks :)

<div>
You're welcome :)<br />
<br />
Krzysztof
</div>


<div>
<div class="content wysiwyg-content">
HI,<br />
<br />
I am setting up a new remote office in Hong Kong, and would like it to be as secure as possible ( as it is China ) and not have all current AD information replicated to the Hong Kong office, so was wonder if a child domain would be the best solution?<br />
<br />
Hong Kong office will be using the current Exchane 2010 server in the parent domain and some resorces in the parent domain.<br />
<br />
So the main purpose would be security to prevent head office user accounts residing on a Hong Kong server.<br />
<br />
Thanks,<br />
<br />
Brett<br />
<br />

</div>
</div>


HI,

I am setting up a new remote office in Hong Kong, and would like it to be as secure as possible ( as it is China ) and not have all current AD information replicated to the Hong Kong office, so was wonder if a child domain would be the best solution?

Hong Kong office will be using the current Exchane 2010 server in the parent domain and some resorces in the parent domain.

So the main purpose would be security to prevent head office user accounts residing on a Hong Kong server.

Thanks,

Brett



New DC or child domain

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.