I see nothing absolutely wrong at first blush. I think you are confusing
domain structure and site structure.
You left some important parts out:
1. Are the two offices set up as two different AD sites? (I suspect not
from your problem description).
2. Is each of the DCs a GC as well?
A couple o
A couple of questions to fill out the picture:
How many clients at each site?
What kinds of clients (ME/98, NT4, W2K, XP, etc)
Do you have any idea of how much _available_ bandwidth there is on the link?
Where is the PDC emulator? I'm guessing it is in office A where the first DC
lives.
-gil
---
ain.
Hope this fills thing out.
-Original Message-
From: Gil Kirkpatrick [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 2:24 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
A couple of questions to fill out the picture:
How many clients at each
Also,
Do you have your Sites and Subnets setup correctly?
How are your FSMO Roles divided?
Where are your GC's?
Chuck
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Friese, Casey
Sent: Friday, February 28, 2003 2:00 PM
To: [EMAIL PROTECTED]
Subject: [Act
-Original Message-
From: Chuck Robinson [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 01, 2003 2:51 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
Also,
Do you have your Sites and Subnets setup correctly?
How are your FSMO Roles divided?
Where are your GC's?
ECTED] On Behalf Of Gil Kirkpatrick
Sent: Friday, February 28, 2003 2:24 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
A couple of questions to fill out the picture:
How many clients at each site?
What kinds of clients (ME/98, NT4, W2K, XP, etc)
Do you have any i
twork Engineer
Greenwich Technology Partners
- Original Message -
From: "Friese, Casey" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 28, 2003 2:34 PM
Subject: RE: [ActiveDir] AD Design Guidance
Gil, thanks for the questions, here are the ans
lient end with regards to accessing resources.
-Original Message-
From: Marc Zukerman [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 3:20 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] AD Design Guidance
Another few questions Casey:
1. Are the different locations set up as separ
rvers
-Original Message-
From: Ken Cornetet [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 2:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
I see nothing absolutely wrong at first blush. I think you are confusing
domain structure and site structure.
You left
ly bogged down from the client end with regards to accessing
resources.
-Original Message-
From: Marc Zukerman [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 3:20 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] AD Design Guidance
Another few questions Casey:
1. Are the di
s message I sent 4 others that still haven't arrived...
-Original Message-
From: Chuck Robinson [mailto:[EMAIL PROTECTED]
Sent: Saturday, March 01, 2003 3:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
A few more items to check..
Is Antivirus running on the
Friday, February 28, 2003 3:59 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
Well, the first thing to do would be to clean up DNS... Ain't nobody happy
until DNS is happy :)
Usually piggy authentication is due to clients authenticating with
inappropriate DCs,
L PROTECTED] On Behalf Of Friese, Casey
Sent: Friday, February 28, 2003 3:01 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
Chuck,
Both sites are subnetted uniquely:
Site A being 10.64.x.x - 255.255.0.0
Site B bring 10.128.x.x - 255.255.0.0
As far as as I know the FSMO role il
: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
Chuck,
Both sites are subnetted uniquely:
Site A being 10.64.x.x - 255.255.0.0
Site B bring 10.128.x.x - 255.255.0.0
As far as as I know the FSMO role ilies solely with the server in Office A
Office A, the HQ, is of course a GC and there
performance problems.
>
> Chuck
>
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Friese, Casey
> Sent: Friday, February 28, 2003 3:01 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
&g
Title: RE: [ActiveDir] AD Design Guidance
> If you have more than one DC, the GC should not be on the
> same server as the Infrastructure Master.
> This can cause replication problems.
More correctly - if you have more than one DOMAIN. If you have multiple DCs in a single do
bject: RE: [ActiveDir] AD Design Guidance
I see nothing absolutely wrong at first blush. I think you are confusing
domain structure and site structure.
You left some important parts out:
1. Are the two offices set up as two different AD sites? (I suspect not
from your problem description).
2. Is
Title: RE: [ActiveDir] AD Design Guidance
Given that you only have a 256kb connection between sites and DCs, and where the FSMO roles are located, I'd back down your replication times. It seems apparent that much of your problem is due to over utilization of the WAN segment, an
28, 2003 3:31 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> Marc,
>
> 1. Yes, both locations are setup as separate sites
>
> 2. The DNS Event log on the DC in Office B reports 5509
> events often, received an invalid DNS updat
Inovis Inc.
> -Original Message-
> From: Chuck Robinson [mailto:[EMAIL PROTECTED]
> Sent: Saturday, March 01, 2003 6:28 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> If you have more than one DC, the GC should not be on the
> sam
ary 28, 2003 9:46 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> Chuck,
>
> Not as big of a long shot as you might imagine. Shortly
> after I joined the company I'm currently with, I was looking
> at a performance problem si
Hi Roger,
Each DC is also the DNS server for the domain. So, each points to the other and
themself as well.
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 10:42 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Desig
--
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis Inc.
> -Original Message-
> From: Friese, Casey [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 03, 2003 11:58 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> Hi Roger,
&
Title: RE: [ActiveDir] AD Design Guidance
Thanks
Rick,
This
is my thought as well. If the powers that be refuse to up the bandwidth on
the WAN line, is there a problem with relocating the master in Office A to
Office B with the other DC?
-Original Message-From: Rick Kingslan
track of each
other.
--
Roger D. Seielstad - MCSE
Sr. Systems Administrator
Inovis Inc.
> -Original Message-
> From: Friese, Casey [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 03, 2003 11:58 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
ED]
> Sent: Monday, March 03, 2003 12:26 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> Hmm...
>
> Open up a command prompt on one of them and type "ipconfig /all"
>
> Make sure they are still pointing at th
, March 03, 2003 12:31 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
I'd bet you have replication issues.
The problem when they point only to themselves, and you have scavenging
enabled, is that it is possible for the DC records to fall out of DNS. Its
no
Thanks Roger, that makes sense. I've changed them both to point to each other for
primary
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 2:31 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
I
Title: RE: [ActiveDir] AD Design Guidance
Rick,
Following what you are saying, where do I change the replication
times? From what I can find, there are two places: At the site level in
NTDS settings and at the Inter-Site Transport
level.
Thanks,
Casey
-Original Message-From
From: Ken Cornetet [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 2:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
I see nothing absolutely wrong at first blush. I think you are confusing
domain structure and site structure.
You left some important parts out:
1. A
03 2:54 PM
> To: '[EMAIL PROTECTED]'
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> Hi Roger,
>
> How do the DC records get scavenged? NETLOGON refreshes them
> periodically, so I would think they would never be subject to
> scavenging (unless of course
d use another
for secondary.
Linton
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 4:56 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
I'm trying to remember the specifics, but in a nutshell DC's tha
sage-
From: Linton Smith (WBTQ) [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 4:19 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
Hi Roger,
What you describe is discussed in the Branch Office Planning Guide.
However, it pertains to DCs in the root doma
From: Rick Kingslan
[mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 9:19
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Given that you only have a 256kb connection between sites
and DCs, and where the FSMO roles are located, I'd back down your
re
Thanks...
-g
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 2:56 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
I'm trying to remember the specifics, but in a nutshell DC's that point to
t
ould fit I suppose.
-gil
-Original Message-
From: Fugleberg, David A [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 3:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
The issue described by both Roger and Linton is called the 'island problem',
an
-Original Message-
> From: Fugleberg, David A [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 03, 2003 5:46 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> The issue described by both Roger and Linton is called the
> 'islan
ssing. Obviously the 256kbps shared line
isn't adequate for us.
-Original Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 6:28
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Casey,
I
don't truly see th
domain.com routine.
Just not sure if we lost that train of thought or not.
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Monday, March 03, 2003 6:58 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Design Guidance
That's not an entirely true st
al Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 6:28
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Casey,
I
don't truly see that moving where the roles are is going to have a huge
impact. Yes, moving the P
-
> From: Friese, Casey [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 03, 2003 8:18 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] AD Design Guidance
>
>
> I'm learning a lot about ad integrated DNS with this part of
> the thread but let's not forget
riginal Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 10:55
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Casey,
It
would clearly resolve the replication issue. But, it's only going to
cause issues with the clien
yeah Roger, I was just giving the others a reminder because it sounded to me like you
were on the right page :)
-Original Message-
From: Roger Seielstad [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 04, 2003 7:16 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] AD Desig
Title: Message
-Original Message-From: Rick Kingslan
[mailto:[EMAIL PROTECTED]Sent: Monday, March 03, 2003 10:55
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Casey,
It
would clearly resolve the replication issue. But, it's only goi
: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Rick,
There are around 25 clients in Office A where the head server is
located.
Ideally I would like to increase the bandwidth on the line but failing
that, if we would move the DC that is there now back to our
n though about a subdomain for 25 people.
-Original Message-From: Roger Seielstad
[mailto:[EMAIL PROTECTED]Sent: Tuesday, March 04, 2003
9:03 AMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] AD Design Guidance
I
would avoid using a subdomain, especially for 25 people.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 8:16
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Rick,
There are around 25 clients in Office A where the head server is
located.
uesday, March 04, 2003 8:16
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Rick,
There are around 25 clients in Office A where the head server is
located.
Ideally I would like to increase the bandwidth on the line but
failing that, if we wo
MCSE Sr. Systems Administrator Inovis Inc.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 9:16
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Refreshing your minds...
2
sites:
Office A = 25 cl
it
fsmo maintenance: Quit
ntdsutil: Quit
Disconnecting from pa-file-02...
-Original Message-
From: Ken Cornetet [mailto:[EMAIL PROTECTED]
Sent: Friday, February 28, 2003 2:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] AD Design Guidance
I see nothing absolutely wrong at fir
2003 9:32
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Roger,
I do
agree that avoiding a domain for 25 people is a good practice. But, if
the replication traffic is the biggest contributor, then it might be an option
(though not a top one). He clearly has
ation in between. Thanks.
Damian ScolesSenior Technical
AnalystMCSE+I, CCNP
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Tuesday, March 04, 2003 8:27
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
I&#x
PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Damian,
Indeed, the servers are connected directly to the switch. I'm
going to dive in and have a look.
-Original Message-From: Scoles, Damian
[mailto:[EMAIL PROTECTED]Sent: Tuesday, March 04, 2003
11:30
[mailto:[EMAIL PROTECTED]Sent: Friday, March 07, 2003 9:24
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Casey,
Have you had a chance to look into this? If so, any
results yet? Thanks.
Damian ScolesSenior Technical
AnalystMCSE+I, CCNP
s Inc.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 10:33
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Damian,
I'm
contacting HP today with regards to our switches because I'm finding tons of
CRC
Title: Message
fabulous networking team...
-Original Message-From: Roger Seielstad
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003
10:15 AMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] AD Design Guidance
That's a port speed and/or duplex mismatc
Title: Message
Exactly Mike. It's a joy inheriting a mess.
-Original Message-From: Hutchins, Mike
[mailto:[EMAIL PROTECTED]Sent: Friday, March 07, 2003 12:36
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
fabulous networking
- MCSE Sr. Systems Administrator Inovis Inc.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 10:33
AMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Damian,
I'm contacting HP today wit
Inovis Inc.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 12:46
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Exactly Mike. It's a joy inheriting a mess.
-Original Message-From: Hutchins, Mi
PMTo: '[EMAIL PROTECTED]'Subject: RE:
[ActiveDir] AD Design Guidance
That's a port speed and/or duplex mismatch. Set both the port and the
NIC to the same speed and duplex settings and that will stop.
--
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 1:12
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
You'd think a network team would be able to figure that out.
;-)
Damian ScolesSenior Technical
AnalystMCSE+I, CCNP
-Original Me
PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Roger,
The
problem is appearing with the fiber modules in the switch and it's not just
CRC errors. I apologize for miss informing everyone.
The
majority of the errors are excessive late collision errors
Late colli
th looking into also is the NIC driver for
updates.
Mike
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Hutchins, MikeSent: Friday, March 07, 2003
12:36 PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
fabulous
Casey
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 12:46
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Exactly Mike. It's a joy inheriting a mess.
-Original Message-From: Hutchins, Mike
[mailto:[EMAIL PROTECTED]Sent:
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 12:19
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
A
certain un-named company's (don't want their lawyers on my
doorstep) teamed NIC's have a problem in that they show one setting in
the GU
inistrator Inovis Inc.
-Original Message-From: Friese, Casey
[mailto:[EMAIL PROTECTED] Sent: Friday, March 07, 2003 1:16
PMTo: [EMAIL PROTECTED]Subject: RE:
[ActiveDir] AD Design Guidance
Roger,
The
problem is appearing with the fiber modules in the switch and it&
66 matches
Mail list logo
