إضغط لتفاصيل الإعلانات



Results 1 to 3 of 3
Share
  1. #1
    Join Date
    Aug 2008
    Location
    Egypt
    Posts
    30
    Rep Power
    0

    Default Best Practice Domain controller

    i need to know what is best oractice for domain controler and it's additional or up DC , also for branches
    Best Regards,
    Sayed Qurany ALi
    Senior System administator
    Egyptian Group Co. S.A.E
    P.O Box Sheraton Heliopolis, Cairo 11799 Egypt
    Tel. (+202) 2687712- 13 ext 666
    Rais Your Self To Help Man Kind
    Fax (+202) 2687714

    من مواضيع sydqa_chm :



  2. Facebook Comments - تعليقـك على الفيس بوك يسعدنا ويطور مجهوداتنـا


  3. Forum Ads:

  4. Forum Ads:

    اضفط هنا لمعرفة تفاصيل الإعلانات بالموقع


  5. Forum Ads:

    -->

  6. #2
    Join Date
    Nov 2007
    Location
    Arab world!
    Posts
    6,169
    Blog Entries
    4
    Rep Power
    10

  7. #3

    Default

    As Mohamed mentioned it depends on your infra.
    for small to medium infra, I'd have two DCs, Maybe one of them with WSUS. Even small organizations benefit from WSUS, particularly as it reduces the amount of download traffic.

    I would never make a terminal server a DC because of the security risk. Each DC would be a global catalog and have DNS, DHCP and WINS configured. DHCP scopes and configuration would be identical, but leases would be from non-overlapping pools.

    Make sure you configure the time service. See http://blogs.bdnet.co.uk/steve/archi...e-Service.aspx.

    I also would not use roaming profiles as it puts requirements on the client hardware.

    Two DCs are needed for disaster recovery and reliability. Doing it with a single DC is crazy. It makes recovery so much harder. A cheap server will do for a second DC.

    I recommend all servers have hardware RAID. A small server would be two disks in a RAID 1 configuration. A larger server might have RAID1 for O/S and RAID 5 for data, or just a RAID 10 configuration. Hard disks fail, and software RAID won't save you for O/S partitions. Small businesses lose money when they can't operate, just like everyone else!

    hereunder some recommendations

    Best Practices for Adding Domain Controllers in Remote Sites
    http://technet.microsoft.com/en-us/l...8WS.10%29.aspx

    Active Directory Best practices
    http://technet.microsoft.com/en-us/l...8WS.10%29.aspx

    http://support.microsoft.com/kb/216899
    http://support.microsoft.com/kb/822158

    http://support.microsoft.com/kb/555381/en-us
    http://support.microsoft.com/kb/306602/en-us
    http://support.microsoft.com/kb/200498/en-us
    http://support.microsoft.com/kb/241515/en-us

    Another nice reading:
    http://iase.disa.mil/stigs/checklist...6-20070730.pdf

    Active Directory virtualization best practices
    http://blogs.techrepublic.com.com/networking/?p=2433

    Best practices for securing domain controllers at the branch office
    http://searchsystemschannel.techtarg...339346,00.html

  8. Forum Ads:

Similar Threads

  1. Replies: 0
    Last Post: 27-05-2010, 01:27 PM
  2. Replies: 0
    Last Post: 28-04-2010, 03:40 AM
  3. Oxford Practice Grammar
    By hopy_braya in forum Programs & Maintenance
    Replies: 9
    Last Post: 02-06-2009, 04:05 PM
  4. Domain.Local VS. Domain.com question
    By Mohamed Fouad in forum Microsoft
    Replies: 8
    Last Post: 08-02-2009, 01:02 PM
  5. The Practice of System and Network Administration
    By Mohamed Fouad in forum Microsoft Certifications
    Replies: 2
    Last Post: 21-10-2008, 10:05 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

أقسام المنتدى

الروابط النصية

تابع جروبنا على الفيس بوك

صفحة Egypt Engineers على الفيس بوك

تابعنا على linkedin

جروبنا على الياهو جروب