DCPromo over a VPN...

[Marc H]

Has anyone here managed to do a DCpromo over a VPN connection...we are
opening an office overseas and need to have a local DC out there yet
we need to have them in our Exchange system and be able to share
files...I was wondering if anyone out there has done a DCPromo over a
VPN connection (Hardware VPN, and figure T1 speeds)

Or is it more feasable to create a completely separate domain/forest
out there and just setup a trust? (Can I setup a trust for 2 domains
that are not in the same forest?,,,would Exchange be a problem between
the domains?)

Thanks!
<M>

 

[Chriss3]

Hello Marc

I have done DCPromo over VPN a few times. this link was 512 DSL and
everything was fine.

I'm not sure but I think exchange must be in same forest in your case. but I
leave that question to some one who is 100% sure. I'm al most sure.

Make sure you understand Active Directory Sites before you start this
project.

Step-by-Step Guide to Active Directory Sites and Services:
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/adsites.asp

Happy New Year

 

[Shawn Rabourn \(MS\)]

A couple of gotchas when running a DC over a VPN to look out for are MTU and
Kerberos maxpacketsize

826159 HOW TO: Change the Default Maximum Transmission Unit (MTU) Size
Settings
http://support.microsoft.com/?id=826159

244474 How to Force Kerberos to Use TCP Instead of UDP
http://support.microsoft.com/?id=244474

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.

 

[Marc H]

Great thanks! I was worried that the latency from coming overseas
would cause problems. I am planning on setting up replication
schedules to minimize traffic.

Thanks again!