Active Directory Implementation

Hi Friends,

I have a one server in Singapore which is "Windows Server 2008 Standard R2" with AD installed in it. It is PDC and the only server in the environment.

Now,  we have opened another office in Dubai and got the server installed with "Windows Server 2008 Standard R2".

What is want is that to configure the dubai's server as site in Singapor AD. So that any users  from Singapore can login to their roaming profile while they are at Dubai and vice a versa.

i have a created a VPN connectivity between both the location. However, i want to start installing AD in Dubai location.

Could some of you can help me to guide that how i should start with, what and how i should install first.. If anyone can provide me the proper link for that please, which have enough information to proceed with it.

Regards,

Vicky
LVL 6
Vikas ShahCurrently Seeking OpportunitiesAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

davorinCommented:
0
Krzysztof PytkoSenior Active Directory EngineerCommented:
So, if you have VPN connectivity between locations, you may wish to follow an article on my blog for that at
http://kpytko.wordpress.com/2011/09/05/adding-additional-domain-controller/

If you have additional questions, do not hesitate to ask

Regards,
Krzysztof
0
wolfcamelCommented:
bear in mind that a roaming profile will inflict a lot of traffic across the site to site vpn.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

satishpetaCommented:
Implement DFS for roaming profiles which should take care of bandwidth issues.
0
Vikas ShahCurrently Seeking OpportunitiesAuthor Commented:
Hi,

Thanks davorin & iSiek for the informative links.
Thanks wolfcamel & satishpeta for comments.

Let me just add one more piece of information about the infrastructure.

PDC is at Singapore and the IP Range of the singapore is 10.0.1.x.
New sever to be installed is at Dubai and the IP range of Dubai is 10.0.2.x.

i am able to ping both the networks from both the ends. Now. as per the article, I have checked the Domain Function level is server 2003. I have a Server 2008 R2 Std as a PDC and New server at Dubai location is also the same. Hence, Do i need to raise the DFL or will it ok if i proceed with it with the Server 2003 as DFL.


After reading the articles provided on both links. Bellow mentioned are the steps i am going to take now..  please correct me if i am wrong somewhere before i start the installation.

I will keep the DFL same as server 2003 in a PDC and Start installing AD on the new server(Dubai Location) as a ADC in the existing forest.

Now, the biggest question is that How would i add the Dubai location as a site in AD... and how to setup a replication between both the sites and do i have to keep the different DNS server for both the locations.

Awaiting Reply,

Regards,

Vicky
0
Vikas ShahCurrently Seeking OpportunitiesAuthor Commented:
Also,
Do i have to run

ADPREP
or/and
ADPREP /FORESTPREP

on PDC before i setup ADC.

Becuase, when i started installing AD on test server to add a server as ADC, at the time of Installation, i have received an error saying :

A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server. If you are integrating with an existing DNS infrastructure, you should manually create a delegation to this DNS server in the parent zone to ensure reliable name resolution from outside the domain “FQDN”. Otherwise, no action is required.


Please advice me what to do..

Awaiting Reply,


Regards,

Vicky
0
satishpetaCommented:
Hi Vikas

2003 DFL does support 2008 R2.
You need to run adprep /forestprep and adprep /domainprep and has to be executed on schema role holder.
adprep32 if its 32-bit or adprep.exe (64-bit) for 64-bit.
Check the article by petri
http://www.petri.co.il/prepare-for-server-2008-r2-domain-controller.htm

The error message that you posted can be ignored, click Yes. Find the same said by MS:
http://technet.microsoft.com/en-us/library/cc754463(WS.10).aspx

Site can be created after the DC is installed or while running dcpromo.
0
davorinCommented:
In Dubai it will be your SECOND Windows 2008 R2 server, so you don't need to prepare again your domain and forest (or rise domain functional level). Everything was prepared when the first W2008 R2 server was installed in Singapore. You don't need to run ADPREP.
When you will promote Dubai server it will automatically installed also DNS server on that server. Anything you have to care is that when you set IP address for the second server be sure that you put IP address of server on the Singapore site as DNS server. Otherwise the second server would not know how to find the domain (server) you are trying to connect. The replication it will work by itself.
At the end it would be nice to set local DC primary DNS server and remote DC as secondary DNS.
0
davorinCommented:
Sorry, lots of typos...
I meant:
it will automatically install also DNS server
and
to set local DC as primary DNS server and remote DC as secondary DNS server.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
satishpetaCommented:
Davorin is right...if you already have a DC with 2k8, you dont have to run adpreps. Sorry if my post created any confusion.
0
Vikas ShahCurrently Seeking OpportunitiesAuthor Commented:
Hi,

Sorry for delayed response, but due to some issues we kept that aside. I have followed the steps per the instruction of davorin and setup the AD and i have tested the replication and it works perfectly fine now. But the problem is now that  i have a IP range of 192.168.1.x in Singapore and IP range of 192.168.2.x in Dubai. When i tried adding the first machine in the domain, it got added but in the default Computers container and the user account is in this Defauly User Container.

Actually, i have created a OU with the name called "Dubai Office". The reason behind that is to have the separate GPO's and Policies for both the office. but the moment that machine added to the domain and logged in for the first time, it got the policy of Singapore office. and it is not going in the Dubai Office container.

is it the default behavior or have i missed anything???

Regards,

Vicky
0
davorinCommented:
New users and computers are always created in default user and computer container.
To what OU do you apply Singapore policy?
It is good to leave default domain policies as they are and link new policies to new OUs. I suggest that you prepare also "Singapore office" under computers and/or users OU and link it to Singapore computers/users policy. So when you create a new user/computer it has no additional policies applied until the object is moved to appropriate folder. You will need to apply a policy to a problematic computer that reverts settings that were applied it by Singapore office policy.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.