Desktop

Ask something
Question Locked

Windows domains

0 helpful
2 replies

by rajumani2006

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

Thanks in advance.

Summary-Situation
-----------------
Installing windows 2003 Std version in two machines to setup the primary domain and backup domain controllers. The objective is to enable a fail over setup. Load balancing is not demanding but would be fine if can be achieved.

Situation in detail
-------------------
There would be about 50 user accounts created in a domain which would act as primary domain. In case of failing primary domain, in worst case if the machine goes off, the back up domain which would also be up and running (live) should take care the responsibility of user logins and net work controls with no manual intervention. Also, when the primary will come back, it should get his roll back.

Proposed model -1
----------------------
A parent domain supported with child domain.

Doubts
1) If a domain named ?cochin.sud-chemie-india.com? created under child domain where all user accounts would also be hosted. What if the child goes off? Will the parent domain would back the users and network responsibilities?

Proposed model -2
----------------------
A parent domain supported with an additional domain.

Doubts
1) If a domain named sud-chemie-india.com is created in the parent domain which is replicated with an additional domain (AD would only be replicated), while establishing a site to site connection with another site of similar configuration, would it be possible to see the computers under each site name?
For e.g.
Site 1 ? Cochin
Having a domain sud-chemie-india.com replicated with an additional domain controller.
Site 2 Baroda.
Having a domain sud-chemie-india.com replicated with an additional domain controller.

While connecting Site 1 with Site 2 ? How the computers would be listed?

Assumption-1
Sud-chemie-india.com
Computer1-Cochin
Computer2-Baroda
Computer3-Cochin
Computer4-Baroda

Would it be mixed up?

Can we have a method of listing as follows?
Sud-chemie-india.com
Cochin
Computer1
Computer3
Baroda
Computer2
Computer4

Thanks

2 replies

by bfilmfan

First, there is no such thing as a backup domain controller in Active Directory. What distinguishes one domain controllers from another is whether it is a global catalog, which allows LDAP searches which are required for most AD-aware appplications such as Exchange to function; and, does the domain controller hold a Flexible Single Master Operations role.

Depending on how the "child" domain is configured, it would either be a true child domain or a peer of the root of the forest. Peers of the root of the forest will not authenticate users if the "child" domain is not functioning.

There is no such thing as "auto-failover" with FSMO roles. You must manually move them. The Schema Master and Domain Naming Master roles cannot be held by any domain controller which is not a member of the top-level domain. Unless you are modifying the schema of AD or adding a domain, you can limp along without those roles in the forest, but I do not recommend it.

Not only would AD, but WINS and DNS zones would have to be replicated.

The domain name which you listed is externally published on the Internet. You are going to have some interesting security work ahead if you decide to use that domain name.

Frankly, you need to tell Dr. Hans J?rgen Wernicke that you are not qualified or experienced enough to be attempting to perform this level of AD design work and that an expert needs to be brought in to perform the work.

If they do choose to proceed, please note that my hourly rate for International work is $500 (US) an hour with a minimum of 3 months in advance, plus first-class airfare to and from the work site, all expenses associated with permforming the work, as well as, a $10,000 (US) contract acceptance fee.

Maybe I should just head over to http://sud-chemie-india.com/contact.asp and offer my services?

This discussion is closed to new replies.