Solved

Windows Domain Across 2 Subnets

Posted on 2013-11-05
1
315 Views
Last Modified: 2013-11-26
For a while our entire company has been in a single location.  We have two Windows 2003 domain controllers and about 30 computers running either XP or Windows 7.  We've recently moved 4 of those computers across town to an office about 1/4 of a mile away.  Both sites have a high speed internet connections and are connected via VPN. We feel that the speed of the connection through the VPN is fine.  The computers at the remote site can ping the DC and can UNC into it via\\serveraneme\sharename and can copy and move files back and forth.  It works great from that standpoint.

But they can't log in to the domain with their regular usernames and passwords.  When they connect to the DC via\\servername\sharename they are prompted for credentials the first time they connect.  They enter them and then after that they have access to the share without any more credential requests until they reboot.

But I want them to log on to the domain when they start their computers just like they did when they were at the main location. At the remote location they are in a different subnet.  I've read that in order to do what I want to do I have to go into AD Sites and Services and create a new site. Our existing site is FIRST DEFAULT SITE so I would have to create a second site called DOWNTOWN.  Then I would have to create a subnet object, the subnet of our existing site, and associate it with FIRST DEFAULT SITE.  Then I would have to create a second subnet object and associate it the the DOWNTOWN site. Then I would need to put another DC in the DOWNTOWN site and then create a SITE LINK object to connect the two sites.

Do I really have to go through all this?  It's only four computers.  The budget really isn't there to put a DC downtown.  We could do it if we had to but I'd rather not.

Any advise would be greatly appreciated regarding an easier way and regarding whether or not I have the procedure correct.  Thanks.
0
Comment
Question by:sswmoore
1 Comment
 
LVL 15

Accepted Solution

by:
Skyler Kincaid earned 500 total points
ID: 39626286
Why don't you just setup routing between the two subnets? This can be done on your router.

You should still have the other computers setup with their DNS server being your servers.

As long as your are able to route between the subnets, which it sounds like you are able to you should not have any problems leaving the computers on the domain at the other site. You just need to make sure they have the proper default gateway and that gateway has a route to your office.

That way when they send request for the subnet at your main office they have no problem reaching it. You need to make sure that the DNS servers are set correctly so when they query the domain controller they are able to access it. You also need to make sure that the VPN and firewall are setup correctly to allow all the required traffic between the two subnets.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now