Replicating users between sites

[Jim Easley]

Hi There,

I am setting up a new domain with 3 sites. At the main site is the
GC, and the 2 branch offices are setup as child domains.

Is it possible to manage all users from the GC at the main office, and
have that information replicate down to the DC's at the branch
offices? This is a Real Estate company so users are frequently going
from office to office.

Thanks for the help

 

[Tim Hines [MSFT]]

I'm not sure what you are asking but you can manage a DC remotely. Just
open AD users and computers and select the domain that you want to
administer, you can also select a specific DC to connect to. In changes
that you make to objects in the domain will replicate to the other domain
controllers within its domain. Any changes to user accounts will cause the
change to replicate to the other DCs within that domain.

--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[JB]

This was hammered into my head at an AD class that I
took. A site is created to connect offices together over
slower, less reliable connections. It plays no part in
permissions, but will cause delays in replication. The
reason to go with multiple domains is security. If you
intend on having local administrators at each office,
each office should have its own domain. In your case it
probably would have been best to have a single domain
since you want centralized management. But you aren't
stuck. You can still administer everything from the
parent domain. Just understand that you will have to
give permissions to each domain. You won't need
additional user objects for each domain, but will need to
go into each domain and assign permissions for those who
need access. As far as replication is concerned, the KCC
should take care of that for you. You can look at what
it did for you by opening AD Sites and Services. I also
suggest using replmon to ensure everything is replicating
normally.