Multi-site domain

Posted on 2012-03-28
Last Modified: 2012-07-17
I have a global multi-site domain. When running windows 2003 AD I have a DC in every main site ( 20 people or more) Totaling 12 sites. I have recently upgarded Central Site to windows 2008 and would like to reduce the AC replication traffic throughout the network by reducing the number of DC's. Perhaps only at the 4 main sites with over 50 people.
DOes anyone have a MS guide or can offer advice on which sites should qualify for a DC.
Question by:Rbauckham69
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
LVL 57

Expert Comment

by:Mike Kline
ID: 37777148
You can look at the branch office guide

I haven't looked at it recently and don't have time to go through it right now (work meeting soon) but it gives you some ideas.

How big is your ntds.dit, intersite replication is compressed and shouldn't cause that much churn in a smaller environment like yours.

However reducing DCs is a good thing (less to maintain and worry about).  What are you link speeds between the remote sites and the 4 main sites.  How reliable is the link.

The main thing you get with a local DC is the ability to login if the WAN is down.  If it is down they could also still login with cached credentials.



Expert Comment

ID: 37777168
Will you be upgrading your remote sites to 2008 in the immediate future?

Replication traffic should be fairly minimal once the initial replication SysVol replication takes place.  Only changes to objects are replicated, not the entire object.  For example, a phone number on a user object is changed.  Replication will only take place for the phone number, not the user object.

An option would be to replace some of your DC's with Read-Only DC's.  That will reduce your replication traffic and increase your security at the same time.

If you don't have a DC at each site, you will actually increase your WAN traffic instead of reducing it.  Without a local DC, all authentication traffic will need to be transported across the WAN.  This will degrade performance as well.  Note: Authentication traffic is much more than just user logon.

Author Comment

ID: 37777685
Thanks I'll have a read through. Are there many significant differences with 2008 compared to 2003?
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why


Accepted Solution

awaggoner earned 500 total points
ID: 37777734
There are quite a few really nice improvements from 2003 to 2008R2.



These are just for Active Directory.  There are more changes for the server itself.
LVL 57

Expert Comment

by:Mike Kline
ID: 37777781
There are new features and improvements but if you know your way around 2003 you should be able to get around 2008 without a lot of issues.

There is a bigger learning curve from 2003/2008 to Windows 8



Author Closing Comment

ID: 38193898

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
need assistance with a VBscript 3 32
Domain User is unable to see any drives in her "My Computer" 9 43
controlling email signatures 3 17
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question