Authentication Server

[Connie Lopez]

I have a single domain but 2 physical sites and two IP
ranges. Currently Site A is the main site and Site B has to
authenticate with Site A before accessing the database
that's in Site B.

How do I make the domain controller in Site B an
authentication server so that my users in Site B can work
independently even if Site A goes down??

Any help or guidance would be great...

Thanks...

CL

 

[Steven L Umbach]

If everything is configured correctly, users and computers will authenticate to
whatever domain controller is available. So if your main one goes down they should
use the second domain controller. I would however make sure that all your domain
computers have the site B domain controller listed in their dns preferred properties
along with the main domain controller. You may have to configure your dhcp scope or
scopes to do such. Note that you can also configure "sites" in AD Users and Computers
so that users/computers will use the domain controller in their site to authenticate
[at least for first try]. Sites will slow down replication a bit though if that is a
concern. I think 15 minutes is the minimum replication period for domain controllers
between sites. --- Steve

http://www.microsoft.com/technet/pr...irectory/maintain/opsguide/part1/adogd06.mspx -
- info on configuring sites.

 

[Connie Lopez]

Steve,

The sites thing is the information that I have found so
far. I'm just not sure if I'm setting it up correctly.
Is there any pointers or steps that you can give so I can
make sure that I'm doing this right???

Thank you... I appreciate your time in my learning
stage...

CL

-----Original Message-----
If everything is configured correctly, users and computers will authenticate to
whatever domain controller is available. So if your main one goes down they should
use the second domain controller. I would however make sure that all your domain
computers have the site B domain controller listed in their dns preferred properties
along with the main domain controller. You may have to configure your dhcp scope or
scopes to do such. Note that you can also

configure "sites" in AD Users and Computers

so that users/computers will use the domain controller in their site to authenticate
[at least for first try]. Sites will slow down

replication a bit though if that is a

concern. I think 15 minutes is the minimum replication period for domain controllers
between sites. --- Steve

http://www.microsoft.com/technet/prodtechnol/windows2000s

erv/technologies/activedirectory/maintain/opsguide/part1/a
dogd06.mspx -

 

[Steven L Umbach]

You don't have to use sites. Sites are best where the link between them is slow
versus the regular lan. The KB article link below is the stripped down version of how
to configure sites in AD using Active Directory Sites and Services to set up your
subnets in different sites. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;318480

Steve,

The sites thing is the information that I have found so
far. I'm just not sure if I'm setting it up correctly.
Is there any pointers or steps that you can give so I can
make sure that I'm doing this right???

Thank you... I appreciate your time in my learning
stage...

CL

-----Original Message-----
If everything is configured correctly, users and computers will authenticate to
whatever domain controller is available. So if your main one goes down they should
use the second domain controller. I would however make sure that all your domain
computers have the site B domain controller listed in their dns preferred properties
along with the main domain controller. You may have to configure your dhcp scope or
scopes to do such. Note that you can also

configure "sites" in AD Users and Computers

so that users/computers will use the domain controller in their site to authenticate
[at least for first try]. Sites will slow down

replication a bit though if that is a

concern. I think 15 minutes is the minimum replication period for domain controllers
between sites. --- Steve

http://www.microsoft.com/technet/prodtechnol/windows2000s

erv/technologies/activedirectory/maintain/opsguide/part1/a
dogd06.mspx -

- info on configuring sites.




.