DC or no DC
I have two branch locations, each has 5 employees, 6-7 computers, 2 network printers, and now 5 IP phones. One has a server with AD (DC Controller). The other does not. I am trying to decide if I really need one at either location. It seems to be more maintenance for me than anything else. Is there a real reason to have them with such little offices?
notacomputergeek
Do you have a main office with DCs? If so, implement routers that you can set up static VPN tunnels and join their computers to the main office domain.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The IP phones may be the crunch point, what are they using to log in to them?
ASKER
I do have a main office, where I am and I have 2 DC's. The branch locations do Site to Site VPN through an ASA. Each is on its own subnet and has a router accordingly. I do have file and print server in this location. Their main application does require the domain but it requires internet more. They RDP to an app here for the majority of their work. So no domain doesn't matter if no connection.
So far I have had no problems with the IP phones. They are assigned IP addresses and fall under the branches subnet.
Right now one office (Wisconsin) has one and the other (Phoenix) does not. I am seriously considering not building one for the Phoenix location and just removing the one in Wisconsin.
So far I have had no problems with the IP phones. They are assigned IP addresses and fall under the branches subnet.
Right now one office (Wisconsin) has one and the other (Phoenix) does not. I am seriously considering not building one for the Phoenix location and just removing the one in Wisconsin.
Have you considered the opportunity to deploy a RODC in your branch sites?
Here we go with a step by step tutorial and explanation/impact in your AD environment:
http://serverfault.com/questions/61302/whats-a-read-only-domain-controller-actually-useful-for
https://mizitechinfo.wordpress.com/2013/08/11/step-by-step-installing-and-configuring-a-rodc-in-windows-server-2012-r2/
Let me know your thoughts......
Here we go with a step by step tutorial and explanation/impact in your AD environment:
http://serverfault.com/questions/61302/whats-a-read-only-domain-controller-actually-useful-for
https://mizitechinfo.wordpress.com/2013/08/11/step-by-step-installing-and-configuring-a-rodc-in-windows-server-2012-r2/
Let me know your thoughts......
ASKER
Thanks Alessandro however I believe this defeats the purpose of my question. I am trying to decide if I want to have equipment there for a DC, not what kind of DC to have.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
No problem Alessandro. I went ahead and selected most comments since this was really about getting opinions versus needing a solution. I have decided to eliminate my DC in the one branch and not put one in the other. I am just going to go with the two I have in the main office.