PDA

View Full Version : SITES and SERVICES - ED or Coach - General Questions

flipper
07-12-2009, 02:39 PM
Let's say I have the network which is listed below. This network is totally made up I just want to get a good understanding of how to setup all correctly. I do understand a lot of this is bases on what I am looking to do but in general from a realistic point of view if this were your network.

1) First is the below network setup in the most proper fashion using DNS, GC, and UGMC for each of the domain controllers and member servers, etc?

2) Should the roles be setup differently? For example, would I be best to use a Global Catalog (GC) instead of the Universal Group Membership Cashing (UGMC) for the EXCH1? If so, why or why not in your opinion?

3) I think I know the answer to this one but when I setup the sites in Sites and Services, and then create the domain controller, I would assume I want to put say all the NY machines in the NewYork site and ALT in the Atlanta sites, etc.? If not what would be the best way. Now doing so, I am guessing even though they have the same IP scheme this would help with replication?

4) Speaking of IP, as you can see, all of these sites are using the same 192.168.230.x subnet. Would it be better if I had a different IP setup for say NY, ATL, etc.?

For example, would it better if I had Atlanta using say 192.168.100.x and Florida using say 192.168.110.x? Or should I keep them in the .230 subnet because they will all be seen under the same EXAMPLE.COM domain in ACUC.

5) Would I want to setup DHCP on NY, Atlanta and Florida or just under NY is fine since it is all under the example.com domain. If I setup only 1 DHCP server under NY and did use a different IP scheme I would just add more scopes correct? NewYork by the way I am figuring is the main office.

6) Next thing I am curious about it let's say I want the NewYork, Atlanta and Florida domains to show up in Active Directory Users and computers (ADUC) I would have them all under the example.com domain structure?

7) However, if I want Dallas and Detroit since they are technically satellite offices to be in their separate ACUC structure and not show up in NY, ATL and FL I would make them child domains? Should I make those Global Catalogs or keep them UGMC. Let's just say they are running DSL and all the others NY, etc.. are running T1 lines.

SITES:

Atlanta
Dallas
Detroit
NewYork
Florida

DOMAIN CONTROLLERS: EXAMPLE.COM
New York - 192.168.230.5 (DNS, DHCP, GC) NY-DC1-2K8
NewYork - 192.168.230.6 (DNS, GC) NY-DC2-2K8
NewYork - 192.168.230.7 (DNS, UGMC) NY-EXCH1-2K8
NewYork - 192.168.230.8 Member Server NY-FS1-2K8
140 CLIENT PC(s) XP, VISTA, Windows 7
DHCP SCOPE: 192.168.230.1 - 192.168.230.250

Atlanta - 192.168.230.10 (DNS, GC) ALT-DC1-2K8
Atlanta - 192.168.230.11 (DNS, GC) ALT-DC2-2K8

Florida - 192.168.230.12 (DNS, GC) FL-DC1-2K8
Florida - 192.168.230.13 (DNS, GC) FL-DC1-2K8

CHILD DOMAINS: satellite.example.com
25 users at each site for Dallas and Detroit

Dallas - 192.168.230.15 (DNS, UGMC) DAL-DC1-K8

Detroit - 192.168.230.16 (DNS, UGMC) DAL-DC1-K8
Lisa
07-14-2009, 02:31 PM
Flipper,

First of all I want to think you again for actually trying to help out and answer other posters questions. The point of a forum is for members to help each other out and you get that.

At this time I am sorry to say that both Coach and Ed are super busy working on some new training courses and can’t spend as much time participating in forum discussions as they would like. If you have any questions specifically about our training I may be able to tear them away, but for this particular post let’s call on the masses for help:

Are there any other forum members out there that can help out has Flipper has done for others?
gabi_cavaller
02-09-2010, 06:35 PM
It's a shame there has been no answer on here as of yet.

This is an example of an excellent question which could clarify a lot of information for most people and the questions are very valid.

Let's see if we get an answer sometime soon.

Hi Lisa :D

Thanks,

Gabi.
asirep
02-09-2010, 11:06 PM
I'm by no means an expert but i am studdying for the 83-640 exam at the moment so i will attempt to answer what i can. I have added links which may help as well.

1) First is the below network setup in the most proper fashion using DNS, GC, and UGMC for each of the domain controllers and member servers, etc?
No. This probably answers Q4 as well but you need to probably put these on seperate subnets if they are in different locations

2) Should the roles be setup differently? For example, would I be best to use a Global Catalog (GC) instead of the Universal Group Membership Cashing (UGMC) for the EXCH1? If so, why or why not in your opinion?
You generally put a global catalog in a location where:

1. You have more than 100 users
2. The WAN link is good
3. The location has roaming users
4. The location has an app that needs a global catalog like Exchange which you are using

If a site doesnt meet the above criteria then you use UGMC.

http://technet.microsoft.com/en-us/library/cc728188%28WS.10%29.aspx
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/ActiveDirectory/Whentouseandnotuseuniversalgroupmembershipcaching. html
http://technet.microsoft.com/en-us/library/cc732877%28WS.10%29.aspx

3) I think I know the answer to this one but when I setup the sites in Sites and Services, and then create the domain controller, I would assume I want to put say all the NY machines in the NewYork site and ALT in the Atlanta sites, etc.? If not what would be the best way. Now doing so, I am guessing even though they have the same IP scheme this would help with replication?
Site are areas of "good connectivity" Generally if you have 2 offices (NY and CHI) seperated by say a 256K link then you would create a site for NY and a site for CHI and place the NY DCs in the NY site and the CHI DCs in the CHI site. You would then set up a site link to configure the replication between the 2 sites.

http://technet.microsoft.com/en-us/library/cc754697.aspx

4) Speaking of IP, as you can see, all of these sites are using the same 192.168.230.x subnet. Would it be better if I had a different IP setup for say NY, ATL, etc.?

For example, would it better if I had Atlanta using say 192.168.100.x and Florida using say 192.168.110.x? Or should I keep them in the .230 subnet because they will all be seen under the same EXAMPLE.COM domain in ACUC.
It doesnt sound like you are across IP addressing. I would recommend looking at this link on how subnets work.

http://www.learntosubnet.com/
http://learn-networking.com/network-design/how-to-subnet-a-network
5) Would I want to setup DHCP on NY, Atlanta and Florida or just under NY is fine since it is all under the example.com domain. If I setup only 1 DHCP server under NY and did use a different IP scheme I would just add more scopes correct? NewYork by the way I am figuring is the main office.
You would again need to look into how DHCP works. You either have a DHCP server for each subnet or each office if you will. Because machines send out a broadcast when they are looking for an IP address, these broadcasts will generally be blocked by routers (unless they are RFC 1542 compliant). You could set up a DHCP relay agent which would intercept these broadcasts and pass them over routers that block them to a DHCP server. But a simple example is that if you have an office in NY and an Office in CHI you would have a DHCP server in each office.

http://www.comptechdoc.org/independent/networking/guide/netdhcp.html
http://technet.microsoft.com/en-us/library/cc780760%28WS.10%29.aspx

6) Next thing I am curious about it let's say I want the NewYork, Atlanta and Florida domains to show up in Active Directory Users and computers (ADUC) I would have them all under the example.com domain structure?

You should have access to all of these if you are creating a contiguous name space however all depends on permissions. A domain administrator in child.example.com would only be able to modify that domain. Same goes for example.com. A domain admin can only modify that domain and not example.com. You would need to be an enterprise admin to have access to the whole forest. Looking at your example i would keep it simple and just have 1 domain. You generally create child domains for geographical reasons or that domain needs a certain password policy applied (Windows 2008 can overcome this with Fine grain password policies) or for administration reasons

7) However, if I want Dallas and Detroit since they are technically satellite offices to be in their separate ACUC structure and not show up in NY, ATL and FL I would make them child domains? Should I make those Global Catalogs or keep them UGMC. Let's just say they are running DSL and all the others NY, etc.. are running T1 lines.

Again i would keep it simple. If there is no reason for creating a child domain as i have mentioned then don't create one as it can add too much complexity. But obviously you need to sit down and plan and ask why am i actually creating a child domain?