Computing.Net > Forums > Windows Server 2003 > Active Directory project

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.

Active Directory project

Reply to Message Icon

Name: nseawater
Date: December 27, 2005 at 15:19:22 Pacific
OS: Windows 2003 Server Stand
CPU/Ram: 3.0ghz XEON
Comment:

I’d like to setup an active directory.

Hardware,
2 identical systems P4’s that will serve as my AD root, files and folders, and 3 printers.

Object,
I’d like to set it up so that both the 2 P4’s will be running as AD root – so if one fails, the other one will run while I restore the other one.

Could I use clustering for my AD structure? Is it worth it? Is there other ways for me to setup if I wanted 2 machines replicating user accounts, Printer queues, and files and folders?




Sponsored Link
Ads by Google

Response Number 1
Name: heropsycho2177
Date: December 27, 2005 at 18:21:47 Pacific
Reply:

AD is multimaster. You do not need clustering. Make both DC's Global Catalogs.

"Christmas and the New Year are actually two holidays.... I suppose you could say 'Merry Christmas' and 'Happy New Year,' but you probably have sh!t to do." --Jon Stewart, on saying "Happy Holidays"


0

Response Number 2
Name: nseawater
Date: December 28, 2005 at 07:57:22 Pacific
Reply:

If I make both of them as DC's - will both authenticate the user's log in? And will both servers have the files and folders for user access? If a user access and modify's a file, will both of the servers have the updated modified files or will it replicate?


0

Response Number 3
Name: heropsycho2177
Date: December 28, 2005 at 08:03:35 Pacific
Reply:

File storage has nothing to do with DC's. That is a file server role.

Yes, both can authenticate the user.

Please help survivors of Hurricane Katrina.

www.redcross.org


0

Response Number 4
Name: lachances
Date: December 28, 2005 at 09:39:41 Pacific
Reply:

I would suggest using the 2 servers as AD one being a global catalog with most of the master roles on one and the infrastructure master on the second box. The infrastructure master should not be in a global catalog server, microsoft recommendation. Also take a look at DFS (distributed files system) in windows 2003 server and set up replication so the files will be replicated across the servers. In my experience the easiest thing for printer server redundancy is to install the printers onto both servers (network printers i am assuming). Than on the client side install both printers from each server and the users can change over if a server goes down manually. A lot easier to setup than clustering and less resource intensive on the server hardware.


0

Response Number 5
Name: heropsycho2177
Date: December 28, 2005 at 10:24:53 Pacific
Reply:

"I would suggest using the 2 servers as AD one being a global catalog with most of the master roles on one and the infrastructure master on the second box. The infrastructure master should not be in a global catalog server, microsoft recommendation."

Per Microsoft recommendation, infrastructure masters should not be GC's with two exceptions:

A. All DC's are GC's. If the user has two DC's, with both as GC's, he meets this exception.
B. There is only one domain in the forest. This user has only one domain. He also meets this exception.

http://support.microsoft.com/kb/223346/EN-US/

Without the second as a GC, the user does not have full redundancy. Therefore, both should be GC's in this situation.

As for FSMO role holders, the fastest of the two DC's should be the PDC and RID master. The other should be the schema, infrastructure, and domain naming master.

However, the user should be aware of issues with the infrastructure master as a GC issue. Should the user ever move to a multidomain environment, he must make sure all his DC's are GC's, or move the infrastructure master role to a DC that isn't a GC.

Please help survivors of Hurricane Katrina.

www.redcross.org


0

Related Posts

See More



Response Number 6
Name: nseawater
Date: December 28, 2005 at 10:30:41 Pacific
Reply:

Thanks for all the great reconmendation / information... I will read up on it and see how I can put it into our AD structure.

Thanks again.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Shares stop responding SBS 2003 and networking



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: Active Directory project

Active Directory w/o FQDN www.computing.net/answers/windows-2003/active-directory-wo-fqdn-/5976.html

Active Directory www.computing.net/answers/windows-2003/active-directory/5762.html

install active directory administra www.computing.net/answers/windows-2003/install-active-directory-administra/2523.html