Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

VPN Branch office connectivity with domain / AD access

Posted on 2013-02-06
1
Medium Priority
?
694 Views
Last Modified: 2013-03-10
hi all,

I've perused many branch office threads but most seem to have some assumptions i may not quite understand so they haven't quite helped so please bear with me.

I have a client with a small head office with six PCs and a SBS2011 server set up in a pretty standard way - server is domain controller, DHCP, file share, exchange.

There is a branch office 1000kms or so away with a couple of PCs but will be growing to be around the same size.

Both offices have an ADSL2 connection.

Due to some recent outages (caused by major flooding across large areas of Queensland) the boss wants a server in the branch office which basically syncs the head office server.  Ie. runs AD for the same domain and syncs the file shares.  

I am thinking of setting it up in the following way:

hardware based site to site VPN
set up branch office server (server 2008) in head office with DFS and do inital file sync
set up branch office server as a second domain controller
take to branch office and configure network settings to talk across VPN to SBS DC

Broadly, is that an ok solution?  

Specifically, what network and AD configuration is required for the branch office server to communicate over the VPN so DFS works and it does AD updates?  Presumably i would need a new site entry in AD and add DNS servers fore each site as secondary of the other?  

cheers
nathan
0
Comment
Question by:natrat22
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 19

Accepted Solution

by:
Kash earned 2000 total points
ID: 38858948
you have got most of it covered. Using hardware VPN is the best approach.

What I would do it configure and get the secondary server working in your office and have everything up and running on it i.e: DFS, AD services etc and yes you are right in thinking so, you will have to have relevant DNS entries in place, it is so that in case of a disaster you can then promote that server to be a master.

I do hope the users do not have big roaming profiles. Make sure you have folder redirection in place for the personal documents and advise them to regularly back it up on the server .
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question