Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Subject: [ActiveDir] RODC and Site Links
Prev Next
You are not authorized to post a reply.

AuthorMessages
robertsingersUser is Offline

Posts:143

08/05/2008 7:05 PM  
Do sites containing only a Read-Only Domain Controller have any bearing
on site link design? There doesn't seem to be anything about it in the
documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89
-44b6-a998-c23a923b26891033.mspx?mfr=true .

#############################################################################################
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal.
##############################################################################################

############################################################
PLEASE NOTE:

The information contained in this email message and any
attached files may be confidential and subject to privilege.
Any opinions expressed in this message are not necessarily
those of the Department of Building and Housing. All technical
opinions are offered on a ?no-liability? basis. This message
and any files transmitted with it are confidential and solely
for the use of the intended recipient. If you are not the
intended recipient, you are notified that any use, disclosure
or copying of this email is unauthorised. If you have received
this email in error, please notify us immediately by reply email
and delete the original and any attachment(s). Thank you.
############################################################

mschrisranUser is Offline

Posts:15

08/05/2008 9:29 PM  
Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).


Chris Ransom
Senior Premier Field Engineer - Active Directory
South Central District - San Antonio
US Central Premier Field Engineering
Email: chrisran@microsoft.com<mailto:chrisran@microsoft.com>
Cell: 210.482.0157
Fax: 425.708.5237
Blog: http://mschrisran.spaces.live.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links

Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .
________________________________
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal
________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

bpuhlUser is Offline

Posts:11

08/05/2008 10:45 PM  
Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT


________________________________
From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).


Chris Ransom
Senior Premier Field Engineer - Active Directory
South Central District - San Antonio
US Central Premier Field Engineering
Email: chrisran@microsoft.com<mailto:chrisran@microsoft.com>
Cell: 210.482.0157
Fax: 425.708.5237
Blog: http://mschrisran.spaces.live.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links

Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .
________________________________
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal
________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a ‘no-liability’ basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

robertsingersUser is Offline

Posts:143

08/05/2008 11:21 PM  
The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B
DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff online, trying to
work out whether I just have a site link Site A + Site B + Site C, or
whether to do Site A + Site B and Site A + Site C and Site B + Site C.
But I fear that I have the dumb and can not brain today.


________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links


Though site topology stays the same, you should consider it in your DC
placement strategy wrt RODCs, since they do still generally need access
to a full DC.

So while its not true "site topology" in terms of sites, links, etc...
We usually look at the topology (among other things) when figuring out
whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT



________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links



Site links should still be configured the same way, and should have the
same rules as a full DC (Costing, Intervals, Change Notification, etc),
the only difference will be one sided connection objects (Connection
Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com <mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing
on site link design? There doesn't seem to be anything about it in the
documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89
-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and cleared by NetIQ
MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files
may be confidential and subject to privilege. Any opinions expressed in
this message are not necessarily those of the Department of Building and
Housing. All technical opinions are offered on a 'no-liability' basis.
This message and any files transmitted with it are confidential and
solely for the use of the intended recipient. If you are not the
intended recipient, you are notified that any use, disclosure or copying
of this email is unauthorised. If you have received this email in
error, please notify us immediately by reply email and delete the
original and any attachment(s). Thank you.

________________________________


############################################################
PLEASE NOTE:

The information contained in this email message and any
attached files may be confidential and subject to privilege.
Any opinions expressed in this message are not necessarily
those of the Department of Building and Housing. All technical
opinions are offered on a ?no-liability? basis. This message
and any files transmitted with it are confidential and solely
for the use of the intended recipient. If you are not the
intended recipient, you are notified that any use, disclosure
or copying of this email is unauthorised. If you have received
this email in error, please notify us immediately by reply email
and delete the original and any attachment(s). Thank you.
############################################################

bdesmondUser is Offline

Posts:347

08/05/2008 11:27 PM  
OK so where is Site C connected? Is it a single domain?

A site link to whichever site it is connected to physically is sufficient so
long as there is a Windows Server 2008 RWDC in that site.

The 4th Ed of the Active Directory title you have will cover this. Should be
out in November.


Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132


On Tue, Aug 5, 2008 at 10:17 PM, Robert Singers
<robert.singers@dbh.govt.nz>wrote:

> The site design I'm currently running with is
>
> Site A
> DC (WINS + DNS + DHCP + FSMO)
> DC (DNS + GC)
> Exchange 2007 (mail boxes)
>
> Site B
> DC (WINS + DNS + DHCP)
> DC (DNS + GC)
> Exchange 2007 (DR server)
>
> There will be 2 x 10mb connections between sites A & B
>
> Site C
> RODC + print server
>
> I've been reading through joe's book and the stuff online, trying to work
> out whether I just have a site link Site A + Site B + Site C, or whether to
> do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that
> I have the dumb and can not brain today.
>
>
> ------------------------------
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brian Puhl
> *Sent:* Wednesday, 6 August 2008 2:43 p.m.
> *To:* ActiveDir@mail.activedir.org
> *Subject:* RE: [ActiveDir] RODC and Site Links
>
> Though site topology stays the same, you should consider it in your DC
> placement strategy wrt RODCs, since they do still generally need access to a
> full DC.
>
> So while its not true "site topology" in terms of sites, links, etc... We
> usually look at the topology (among other things) when figuring out whether
> and what kind of servers go in which site.
>
> Brian Puhl
> Microsoft IT
>
>
> ------------------------------
> From: Chris Ransom <chrisran@microsoft.com>
> Sent: Tuesday, August 05, 2008 6:27 PM
> To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
> Subject: RE: [ActiveDir] RODC and Site Links
>
> Site links should still be configured the same way, and should have the
> same rules as a full DC (Costing, Intervals, Change Notification, etc), the
> only difference will be one sided connection objects (Connection Object from
> Hub to Branch).
>
>
>
>
>
> *Chris Ransom***
>
> Senior Premier Field Engineer - Active Directory
>
> South Central District - San Antonio
>
> US Central Premier Field Engineering
>
> Email: chrisran@microsoft.com
>
> Cell: 210.482.0157
>
> Fax: 425.708.5237
>
> Blog: http://mschrisran.spaces.live.com
>
>
>
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Robert Singers
> *Sent:* Wednesday, August 06, 2008 7:01 AM
> *To:* ActiveDir@mail.activedir.org
> *Subject:* [ActiveDir] RODC and Site Links
>
>
>
> Do sites containing only a Read-Only Domain Controller have any bearing on
> site link design? There doesn't seem to be anything about it in the
> documentation
> http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true
> .
> ------------------------------
>
> This e-mail message has been scanned for Viruses and cleared by *NetIQ
> MailMarshal *
> ------------------------------
> ------------------------------
>
> *Please Note: *
>
> The information contained in this email message and any attached files may
> be confidential and subject to privilege. Any opinions expressed in this
> message are not necessarily those of the Department of Building and Housing.
> All technical opinions are offered on a 'no-liability' basis. This message
> and any files transmitted with it are confidential and solely for the use of
> the intended recipient. If you are not the intended recipient, you are
> notified that any use, disclosure or copying of this email is unauthorised.
> If you have received this email in error, please notify us immediately by
> reply email and delete the original and any attachment(s). Thank you.
> ------------------------------
>
> ------------------------------
> *Please Note: *
>
> The information contained in this email message and any attached files may
> be confidential and subject to privilege. Any opinions expressed in this
> message are not necessarily those of the Department of Building and Housing.
> All technical opinions are offered on a 'no-liability' basis. This message
> and any files transmitted with it are confidential and solely for the use of
> the intended recipient. If you are not the intended recipient, you are
> notified that any use, disclosure or copying of this email is unauthorised.
> If you have received this email in error, please notify us immediately by
> reply email and delete the original and any attachment(s). Thank you.
> ------------------------------
>
>

robertsingersUser is Offline

Posts:143

08/05/2008 11:33 PM  
It's a dual hubbed network. Currently out of Site A & Site C, however
that should change to Site A & Site B. Both these links should be 10mb.
It's a single domain.

________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
Sent: Wednesday, 6 August 2008 3:24 p.m.
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] RODC and Site Links


OK so where is Site C connected? Is it a single domain?

A site link to whichever site it is connected to physically is
sufficient so long as there is a Windows Server 2008 RWDC in that site.

The 4th Ed of the Active Directory title you have will cover this.
Should be out in November.


Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132



On Tue, Aug 5, 2008 at 10:17 PM, Robert Singers
<robert.singers@dbh.govt.nz> wrote:


The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B

DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff online,
trying to work out whether I just have a site link Site A + Site B +
Site C, or whether to do Site A + Site B and Site A + Site C and Site B
+ Site C. But I fear that I have the dumb and can not brain today.


________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.

To: ActiveDir@mail.activedir.org

Subject: RE: [ActiveDir] RODC and Site Links


Though site topology stays the same, you should consider it in
your DC placement strategy wrt RODCs, since they do still generally need
access to a full DC.

So while its not true "site topology" in terms of sites, links,
etc... We usually look at the topology (among other things) when
figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT



________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links



Site links should still be configured the same way, and should
have the same rules as a full DC (Costing, Intervals, Change
Notification, etc), the only difference will be one sided connection
objects (Connection Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com <mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com
<http://mschrisran.spaces.live.com/>



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any
bearing on site link design? There doesn't seem to be anything about it
in the documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89
-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and cleared by
NetIQ MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any attached
files may be confidential and subject to privilege. Any opinions
expressed in this message are not necessarily those of the Department of
Building and Housing. All technical opinions are offered on a
'no-liability' basis. This message and any files transmitted with it are
confidential and solely for the use of the intended recipient. If you
are not the intended recipient, you are notified that any use,
disclosure or copying of this email is unauthorised. If you have
received this email in error, please notify us immediately by reply
email and delete the original and any attachment(s). Thank you.

________________________________


________________________________

Please Note:




The information contained in this email message and any attached
files may be confidential and subject to privilege. Any opinions
expressed in this message are not necessarily those of the Department of
Building and Housing. All technical opinions are offered on a
'no-liability' basis. This message and any files transmitted with it are
confidential and solely for the use of the intended recipient. If you
are not the intended recipient, you are notified that any use,
disclosure or copying of this email is unauthorised. If you have
received this email in error, please notify us immediately by reply
email and delete the original and any attachment(s). Thank you.
________________________________












bdesmondUser is Offline

Posts:347

08/05/2008 11:52 PM  
You can make a connection to just A or B, a connection to each, or you could
include all three sites in the site link. It shouldn't matter.

Note that is dependent on you not having unchecked "Bridge All Site Links".


Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132


On Tue, Aug 5, 2008 at 10:29 PM, Robert Singers
<robert.singers@dbh.govt.nz>wrote:

> It's a dual hubbed network. Currently out of Site A & Site C, however
> that should change to Site A & Site B. Both these links should be 10mb.
> It's a single domain.
>
> ------------------------------
> *From:* ActiveDir-owner@mail.activedir.org [mailto:
> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brian Desmond
> *Sent:* Wednesday, 6 August 2008 3:24 p.m.
> *To:* ActiveDir@mail.activedir.org
> *Subject:* Re: [ActiveDir] RODC and Site Links
>
> OK so where is Site C connected? Is it a single domain?
>
> A site link to whichever site it is connected to physically is sufficient
> so long as there is a Windows Server 2008 RWDC in that site.
>
> The 4th Ed of the Active Directory title you have will cover this. Should
> be out in November.
>
>
> Thanks,
> Brian Desmond
> brian@briandesmond.com
>
> c - 312.731.3132
>
>
> On Tue, Aug 5, 2008 at 10:17 PM, Robert Singers <
> robert.singers@dbh.govt.nz> wrote:
>
>> The site design I'm currently running with is
>>
>> Site A
>> DC (WINS + DNS + DHCP + FSMO)
>> DC (DNS + GC)
>> Exchange 2007 (mail boxes)
>>
>> Site B
>> DC (WINS + DNS + DHCP)
>> DC (DNS + GC)
>> Exchange 2007 (DR server)
>>
>> There will be 2 x 10mb connections between sites A & B
>>
>> Site C
>> RODC + print server
>>
>> I've been reading through joe's book and the stuff online, trying to work
>> out whether I just have a site link Site A + Site B + Site C, or whether to
>> do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that
>> I have the dumb and can not brain today.
>>
>>
>> ------------------------------
>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brian Puhl
>> *Sent:* Wednesday, 6 August 2008 2:43 p.m.
>> *To:* ActiveDir@mail.activedir.org
>> *Subject:* RE: [ActiveDir] RODC and Site Links
>>
>> Though site topology stays the same, you should consider it in your DC
>> placement strategy wrt RODCs, since they do still generally need access to a
>> full DC.
>>
>> So while its not true "site topology" in terms of sites, links, etc... We
>> usually look at the topology (among other things) when figuring out whether
>> and what kind of servers go in which site.
>>
>> Brian Puhl
>> Microsoft IT
>>
>>
>> ------------------------------
>> From: Chris Ransom <chrisran@microsoft.com>
>> Sent: Tuesday, August 05, 2008 6:27 PM
>> To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
>> Subject: RE: [ActiveDir] RODC and Site Links
>>
>> Site links should still be configured the same way, and should have the
>> same rules as a full DC (Costing, Intervals, Change Notification, etc), the
>> only difference will be one sided connection objects (Connection Object from
>> Hub to Branch).
>>
>>
>>
>>
>>
>> *Chris Ransom***
>>
>> Senior Premier Field Engineer - Active Directory
>>
>> South Central District - San Antonio
>>
>> US Central Premier Field Engineering
>>
>> Email: chrisran@microsoft.com
>>
>> Cell: 210.482.0157
>>
>> Fax: 425.708.5237
>>
>> Blog: http://mschrisran.spaces.live.com
>>
>>
>>
>> *From:* ActiveDir-owner@mail.activedir.org [mailto:
>> ActiveDir-owner@mail.activedir.org] *On Behalf Of *Robert Singers
>> *Sent:* Wednesday, August 06, 2008 7:01 AM
>> *To:* ActiveDir@mail.activedir.org
>> *Subject:* [ActiveDir] RODC and Site Links
>>
>>
>>
>> Do sites containing only a Read-Only Domain Controller have any bearing on
>> site link design? There doesn't seem to be anything about it in the
>> documentation
>> http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true
>> .
>> ------------------------------
>>
>> This e-mail message has been scanned for Viruses and cleared by *NetIQ
>> MailMarshal *
>> ------------------------------
>> ------------------------------
>>
>> *Please Note: *
>>
>> The information contained in this email message and any attached files may
>> be confidential and subject to privilege. Any opinions expressed in this
>> message are not necessarily those of the Department of Building and Housing.
>> All technical opinions are offered on a 'no-liability' basis. This message
>> and any files transmitted with it are confidential and solely for the use of
>> the intended recipient. If you are not the intended recipient, you are
>> notified that any use, disclosure or copying of this email is unauthorised.
>> If you have received this email in error, please notify us immediately by
>> reply email and delete the original and any attachment(s). Thank you.
>> ------------------------------
>>
>> ------------------------------
>> *Please Note: *
>>
>> The information contained in this email message and any attached files may
>> be confidential and subject to privilege. Any opinions expressed in this
>> message are not necessarily those of the Department of Building and Housing.
>> All technical opinions are offered on a 'no-liability' basis. This message
>> and any files transmitted with it are confidential and solely for the use of
>> the intended recipient. If you are not the intended recipient, you are
>> notified that any use, disclosure or copying of this email is unauthorised.
>> If you have received this email in error, please notify us immediately by
>> reply email and delete the original and any attachment(s). Thank you.
>> ------------------------------
>>
>>
>

robertsingersUser is Offline

Posts:143

08/06/2008 12:16 AM  
Cool thats basically what I thought. I wasn't sure what the site link
bridging would do with a RODC in the mix.

________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond
Sent: Wednesday, 6 August 2008 3:50 p.m.
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] RODC and Site Links


You can make a connection to just A or B, a connection to each, or you
could include all three sites in the site link. It shouldn't matter.

Note that is dependent on you not having unchecked "Bridge All Site
Links".


Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132



On Tue, Aug 5, 2008 at 10:29 PM, Robert Singers
<robert.singers@dbh.govt.nz> wrote:


It's a dual hubbed network. Currently out of Site A & Site C,
however that should change to Site A & Site B. Both these links should
be 10mb. It's a single domain.

________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Desmond

Sent: Wednesday, 6 August 2008 3:24 p.m.
To: ActiveDir@mail.activedir.org

Subject: Re: [ActiveDir] RODC and Site Links


OK so where is Site C connected? Is it a single domain?

A site link to whichever site it is connected to physically is
sufficient so long as there is a Windows Server 2008 RWDC in that site.

The 4th Ed of the Active Directory title you have will cover
this. Should be out in November.


Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132



On Tue, Aug 5, 2008 at 10:17 PM, Robert Singers
<robert.singers@dbh.govt.nz> wrote:


The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B

DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff
online, trying to work out whether I just have a site link Site A + Site
B + Site C, or whether to do Site A + Site B and Site A + Site C and
Site B + Site C. But I fear that I have the dumb and can not brain
today.


________________________________

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.

To: ActiveDir@mail.activedir.org

Subject: RE: [ActiveDir] RODC and Site Links


Though site topology stays the same, you should consider
it in your DC placement strategy wrt RODCs, since they do still
generally need access to a full DC.

So while its not true "site topology" in terms of sites,
links, etc... We usually look at the topology (among other things) when
figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT



________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org
<ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links



Site links should still be configured the same way, and
should have the same rules as a full DC (Costing, Intervals, Change
Notification, etc), the only difference will be one sided connection
objects (Connection Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com
<mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com
<http://mschrisran.spaces.live.com/>



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller
have any bearing on site link design? There doesn't seem to be anything
about it in the documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89
-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and
cleared by NetIQ MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any
attached files may be confidential and subject to privilege. Any
opinions expressed in this message are not necessarily those of the
Department of Building and Housing. All technical opinions are offered
on a 'no-liability' basis. This message and any files transmitted with
it are confidential and solely for the use of the intended recipient. If
you are not the intended recipient, you are notified that any use,
disclosure or copying of this email is unauthorised. If you have
received this email in error, please notify us immediately by reply
email and delete the original and any attachment(s). Thank you.

________________________________


________________________________

Please Note:




The information contained in this email message and any
attached files may be confidential and subject to privilege. Any
opinions expressed in this message are not necessarily those of the
Department of Building and Housing. All technical opinions are offered
on a 'no-liability' basis. This message and any files transmitted with
it are confidential and solely for the use of the intended recipient. If
you are not the intended recipient, you are notified that any use,
disclosure or copying of this email is unauthorised. If you have
received this email in error, please notify us immediately by reply
email and delete the original and any attachment(s). Thank you.
________________________________





















ZJORZUser is Offline

Posts:100

08/17/2008 1:29 PM  
Single domain? Why aren't both DCs in Site A & B a GC?



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com <blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The site design I'm currently running with is



Site A

DC (WINS + DNS + DHCP + FSMO)

DC (DNS + GC)

Exchange 2007 (mail boxes)



Site B

DC (WINS + DNS + DHCP)

DC (DNS + GC)

Exchange 2007 (DR server)



There will be 2 x 10mb connections between sites A & B



Site C

RODC + print server



I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.





________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT



________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com <mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________


robertsingersUser is Offline

Posts:143

08/17/2008 5:05 PM  
At this stage the design is sitting like that until I get a chance to read up on what FSMO roles can and can't go on a GC, and whether the rules would change if the single domain grew into a forest.

________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



Single domain? Why aren't both DCs in Site A & B a GC?



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com <blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The site design I'm currently running with is



Site A

DC (WINS + DNS + DHCP + FSMO)

DC (DNS + GC)

Exchange 2007 (mail boxes)



Site B

DC (WINS + DNS + DHCP)

DC (DNS + GC)

Exchange 2007 (DR server)



There will be 2 x 10mb connections between sites A & B



Site C

RODC + print server



I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.





________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT



________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com <mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________


bdesmondUser is Offline

Posts:347

08/17/2008 5:11 PM  
Unless your forest has multiple domains and all the DCs are *not* GCs, then it's irrelevant. I'd aim for simplicity and have a single domain forest.

Thanks,
Brian Desmond
brian@briandesmond.com

c - 312.731.3132

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 4:01 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

At this stage the design is sitting like that until I get a chance to read up on what FSMO roles can and can't go on a GC, and whether the rules would change if the single domain grew into a forest.

________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Single domain? Why aren't both DCs in Site A & B a GC?

Met vriendelijke groeten / Kind regards,

Ing. Jorge de Almeida Pinto
Senior Technical Consultant
MVP Identity & Access - Directory Services

Oxford Computer Group Benelux | *: +31 (0)6 26.26.62.80 | *: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | *: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com<blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management
________________________________________________________________
MVP Profile --> https://mvp.support.microsoft.com/profile/jorge1
MVP Home Site --> https://mvp.support.microsoft.com/
MVP Overview --> https://mvp.support.microsoft.com/mvpexecsum
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
________________________________________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B
DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.


________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT
________________________________
From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links
Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).


Chris Ransom
Senior Premier Field Engineer - Active Directory
South Central District - San Antonio
US Central Premier Field Engineering
Email: chrisran@microsoft.com<mailto:chrisran@microsoft.com>
Cell: 210.482.0157
Fax: 425.708.5237
Blog: http://mschrisran.spaces.live.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links

Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .
________________________________
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal
________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

ZJORZUser is Offline

Posts:100

08/17/2008 5:15 PM  
If you have a single domain, make sure ALL DCs are GCs! Just do it.



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com <blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 23:01
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



At this stage the design is sitting like that until I get a chance to read up on what FSMO roles can and can't go on a GC, and whether the rules would change if the single domain grew into a forest.



________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Single domain? Why aren't both DCs in Site A & B a GC?



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com <blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The site design I'm currently running with is



Site A

DC (WINS + DNS + DHCP + FSMO)

DC (DNS + GC)

Exchange 2007 (mail boxes)



Site B

DC (WINS + DNS + DHCP)

DC (DNS + GC)

Exchange 2007 (DR server)



There will be 2 x 10mb connections between sites A & B



Site C

RODC + print server



I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.





________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT

________________________________

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: chrisran@microsoft.com <mailto:chrisran@microsoft.com>

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .

________________________________

This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

________________________________

Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________


ChuckRobinsonUser is Offline

Posts:6

08/17/2008 6:28 PM  
Unless all DC's in the entire forest are GG's.

Chuck Robinson
_______________
Senior Practice Consultant
MCSE: Messaging
EMC Consulting
Phone: 732-321-3644 | Mobile: 973-865-0394
chuck.robinson@emc.com<mailto:chuck.robinson@emc.com>
www.emc.com/consulting<http://www.emc.com/consulting>

Transforming Information Into Business Results

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Sunday, August 17, 2008 5:16 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

The FSMO placement "issue" with GCs only applies to the IM FSMO in a certain scenario. If you have multiple domains, the IM of a *certain* domain cannot sit on a GC IF there exists ANOTHER DC in the same domain that is not a GC. I'm saying certain domain, so this needs to be evaluated for every domain in the forest

Met vriendelijke groeten / Kind regards,

Ing. Jorge de Almeida Pinto
Senior Technical Consultant
MVP Identity & Access - Directory Services

Oxford Computer Group Benelux | *: +31 (0)6 26.26.62.80 | *: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | *: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com<blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management
________________________________________________________________
MVP Profile --> https://mvp.support.microsoft.com/profile/jorge1
MVP Home Site --> https://mvp.support.microsoft.com/
MVP Overview --> https://mvp.support.microsoft.com/mvpexecsum
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
________________________________________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 23:01
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

At this stage the design is sitting like that until I get a chance to read up on what FSMO roles can and can't go on a GC, and whether the rules would change if the single domain grew into a forest.

________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Single domain? Why aren't both DCs in Site A & B a GC?

Met vriendelijke groeten / Kind regards,

Ing. Jorge de Almeida Pinto
Senior Technical Consultant
MVP Identity & Access - Directory Services

Oxford Computer Group Benelux | *: +31 (0)6 26.26.62.80 | *: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | *: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com<blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management
________________________________________________________________
MVP Profile --> https://mvp.support.microsoft.com/profile/jorge1
MVP Home Site --> https://mvp.support.microsoft.com/
MVP Overview --> https://mvp.support.microsoft.com/mvpexecsum
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
________________________________________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B
DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.


________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT
________________________________
From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links
Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).


Chris Ransom
Senior Premier Field Engineer - Active Directory
South Central District - San Antonio
US Central Premier Field Engineering
Email: chrisran@microsoft.com<mailto:chrisran@microsoft.com>
Cell: 210.482.0157
Fax: 425.708.5237
Blog: http://mschrisran.spaces.live.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links

Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .
________________________________
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal
________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

dwellsUser is Offline

Posts:39

08/17/2008 6:46 PM  
Nod, almost … but that particular caveat is per-domain, i.e. if all DCs
within a particular domain are GCs à the placement of the IM within that
domain is for the most part irrelevant.

--
Dean Wells
* Email: limeypride@gmail.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robinson, Chuck
Sent: Sunday, August 17, 2008 6:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



Unless all DC’s in the entire forest are GG’s.



Chuck Robinson

_______________
Senior Practice Consultant

MCSE: Messaging

EMC Consulting

Phone: 732-321-3644 | Mobile: 973-865-0394
chuck.robinson@emc.com

www.emc.com/consulting



Transforming Information Into Business Results



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida
Pinto
Sent: Sunday, August 17, 2008 5:16 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The FSMO placement “issue” with GCs only applies to the IM FSMO in a certain
scenario. If you have multiple domains, the IM of a *certain* domain cannot
sit on a GC IF there exists ANOTHER DC in the same domain that is not a GC.
I’m saying certain domain, so this needs to be evaluated for every domain in
the forest



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33
454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort,
The Netherlands
<blocked::blocked::http://www.oxfordcomputergroup.com/>
www.oxfordcomputergroup.com | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 23:01
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



At this stage the design is sitting like that until I get a chance to read
up on what FSMO roles can and can't go on a GC, and whether the rules would
change if the single domain grew into a forest.



_____

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida
Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Single domain? Why aren’t both DCs in Site A & B a GC?



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33
454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort,
The Netherlands
<blocked::blocked::http://www.oxfordcomputergroup.com/>
www.oxfordcomputergroup.com | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The site design I'm currently running with is



Site A

DC (WINS + DNS + DHCP + FSMO)

DC (DNS + GC)

Exchange 2007 (mail boxes)



Site B

DC (WINS + DNS + DHCP)

DC (DNS + GC)

Exchange 2007 (DR server)



There will be 2 x 10mb connections between sites A & B



Site C

RODC + print server



I've been reading through joe's book and the stuff online, trying to work
out whether I just have a site link Site A + Site B + Site C, or whether to
do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that
I have the dumb and can not brain today.





_____

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Though site topology stays the same, you should consider it in your DC
placement strategy wrt RODCs, since they do still generally need access to a
full DC.

So while its not true "site topology" in terms of sites, links, etc... We
usually look at the topology (among other things) when figuring out whether
and what kind of servers go in which site.

Brian Puhl
Microsoft IT

_____

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same
rules as a full DC (Costing, Intervals, Change Notification, etc), the only
difference will be one sided connection objects (Connection Object from Hub
to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: <mailto:chrisran@microsoft.com> chrisran@microsoft.com

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing on
site link design? There doesn't seem to be anything about it in the
documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b
6-a998-c23a923b26891033.mspx?mfr=true .

_____

This e-mail message has been scanned for Viruses and cleared by NetIQ
MailMarshal

_____

_____

Please Note:

The information contained in this email message and any attached files may
be confidential and subject to privilege. Any opinions expressed in this
message are not necessarily those of the Department of Building and Housing.
All technical opinions are offered on a ‘no-liability’ basis. This message
and any files transmitted with it are confidential and solely for the use of
the intended recipient. If you are not the intended recipient, you are
notified that any use, disclosure or copying of this email is unauthorised.
If you have received this email in error, please notify us immediately by
reply email and delete the original and any attachment(s). Thank you.

_____

_____

Please Note:

The information contained in this email message and any attached files may
be confidential and subject to privilege. Any opinions expressed in this
message are not necessarily those of the Department of Building and Housing.
All technical opinions are offered on a ‘no-liability’ basis. This message
and any files transmitted with it are confidential and solely for the use of
the intended recipient. If you are not the intended recipient, you are
notified that any use, disclosure or copying of this email is unauthorised.
If you have received this email in error, please notify us immediately by
reply email and delete the original and any attachment(s). Thank you.

_____


ChuckRobinsonUser is Offline

Posts:6

08/17/2008 7:24 PM  
Picky-picky.

Chuck Robinson
_______________
Senior Practice Consultant
MCSE: Messaging
EMC Consulting
Phone: 732-321-3644 | Mobile: 973-865-0394
chuck.robinson@emc.com<mailto:chuck.robinson@emc.com>
www.emc.com/consulting<http://www.emc.com/consulting>

Transforming Information Into Business Results

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells
Sent: Sunday, August 17, 2008 6:44 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Nod, almost ... but that particular caveat is per-domain, i.e. if all DCs within a particular domain are GCs --> the placement of the IM within that domain is for the most part irrelevant.
--
Dean Wells
* Email: limeypride@gmail.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robinson, Chuck
Sent: Sunday, August 17, 2008 6:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Unless all DC's in the entire forest are GG's.

Chuck Robinson
_______________
Senior Practice Consultant
MCSE: Messaging
EMC Consulting
Phone: 732-321-3644 | Mobile: 973-865-0394
chuck.robinson@emc.com<mailto:chuck.robinson@emc.com>
www.emc.com/consulting<http://www.emc.com/consulting>

Transforming Information Into Business Results

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Sunday, August 17, 2008 5:16 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

The FSMO placement "issue" with GCs only applies to the IM FSMO in a certain scenario. If you have multiple domains, the IM of a *certain* domain cannot sit on a GC IF there exists ANOTHER DC in the same domain that is not a GC. I'm saying certain domain, so this needs to be evaluated for every domain in the forest

Met vriendelijke groeten / Kind regards,

Ing. Jorge de Almeida Pinto
Senior Technical Consultant
MVP Identity & Access - Directory Services

Oxford Computer Group Benelux | *: +31 (0)6 26.26.62.80 | *: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | *: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com<blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management
________________________________________________________________
MVP Profile --> https://mvp.support.microsoft.com/profile/jorge1
MVP Home Site --> https://mvp.support.microsoft.com/
MVP Overview --> https://mvp.support.microsoft.com/mvpexecsum
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
________________________________________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 23:01
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

At this stage the design is sitting like that until I get a chance to read up on what FSMO roles can and can't go on a GC, and whether the rules would change if the single domain grew into a forest.

________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Single domain? Why aren't both DCs in Site A & B a GC?

Met vriendelijke groeten / Kind regards,

Ing. Jorge de Almeida Pinto
Senior Technical Consultant
MVP Identity & Access - Directory Services

Oxford Computer Group Benelux | *: +31 (0)6 26.26.62.80 | *: +31 (0)33 454.69.50 | 7: +31 (0)33 454.66.66 | *: Hardwareweg 4, 3821BM Amersfoort, The Netherlands
www.oxfordcomputergroup.com<blocked::blocked::http://www.oxfordcomputergroup.com/> | Expertise in Identity & Access Management
________________________________________________________________
MVP Profile --> https://mvp.support.microsoft.com/profile/jorge1
MVP Home Site --> https://mvp.support.microsoft.com/
MVP Overview --> https://mvp.support.microsoft.com/mvpexecsum
BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
________________________________________________________________

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

The site design I'm currently running with is

Site A
DC (WINS + DNS + DHCP + FSMO)
DC (DNS + GC)
Exchange 2007 (mail boxes)

Site B
DC (WINS + DNS + DHCP)
DC (DNS + GC)
Exchange 2007 (DR server)

There will be 2 x 10mb connections between sites A & B

Site C
RODC + print server

I've been reading through joe's book and the stuff online, trying to work out whether I just have a site link Site A + Site B + Site C, or whether to do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that I have the dumb and can not brain today.


________________________________
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links
Though site topology stays the same, you should consider it in your DC placement strategy wrt RODCs, since they do still generally need access to a full DC.

So while its not true "site topology" in terms of sites, links, etc... We usually look at the topology (among other things) when figuring out whether and what kind of servers go in which site.

Brian Puhl
Microsoft IT
________________________________
From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links
Site links should still be configured the same way, and should have the same rules as a full DC (Costing, Intervals, Change Notification, etc), the only difference will be one sided connection objects (Connection Object from Hub to Branch).


Chris Ransom
Senior Premier Field Engineer - Active Directory
South Central District - San Antonio
US Central Premier Field Engineering
Email: chrisran@microsoft.com<mailto:chrisran@microsoft.com>
Cell: 210.482.0157
Fax: 425.708.5237
Blog: http://mschrisran.spaces.live.com

From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links

Do sites containing only a Read-Only Domain Controller have any bearing on site link design? There doesn't seem to be anything about it in the documentation http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b6-a998-c23a923b26891033.mspx?mfr=true .
________________________________
This e-mail message has been scanned for Viruses and cleared by NetIQ MailMarshal
________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________
________________________________
Please Note:

The information contained in this email message and any attached files may be confidential and subject to privilege. Any opinions expressed in this message are not necessarily those of the Department of Building and Housing. All technical opinions are offered on a 'no-liability' basis. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient, you are notified that any use, disclosure or copying of this email is unauthorised. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.

________________________________

dwellsUser is Offline

Posts:39

08/17/2008 7:49 PM  
Depends on the UI … NTDSTUIL à no … MMC snap-ins à I’m pretty sure they do.

--
Dean Wells
* Email: limeypride@gmail.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 7:33 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



Is there a dialog that pops up when you seize roles that warns you about
placing the IM on a GC?



My memory is that I couldn't move it to a GC when I last had to shift roles.
But I could have been mistaken.



_____

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells
Sent: Monday, 18 August 2008 10:44 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Nod, almost … but that particular caveat is per-domain, i.e. if all DCs
within a particular domain are GCs à the placement of the IM within that
domain is for the most part irrelevant.

--
Dean Wells
* Email: limeypride@gmail.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robinson, Chuck
Sent: Sunday, August 17, 2008 6:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



Unless all DC’s in the entire forest are GG’s.



Chuck Robinson

_______________
Senior Practice Consultant

MCSE: Messaging

EMC Consulting

Phone: 732-321-3644 | Mobile: 973-865-0394
chuck.robinson@emc.com

www.emc.com/consulting



Transforming Information Into Business Results



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida
Pinto
Sent: Sunday, August 17, 2008 5:16 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The FSMO placement “issue” with GCs only applies to the IM FSMO in a certain
scenario. If you have multiple domains, the IM of a *certain* domain cannot
sit on a GC IF there exists ANOTHER DC in the same domain that is not a GC.
I’m saying certain domain, so this needs to be evaluated for every domain in
the forest



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33
454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort,
The Netherlands
<blocked::blocked::http://www.oxfordcomputergroup.com/>
www.oxfordcomputergroup.com | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Sunday, August 17, 2008 23:01
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



At this stage the design is sitting like that until I get a chance to read
up on what FSMO roles can and can't go on a GC, and whether the rules would
change if the single domain grew into a forest.



_____

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Jorge de Almeida
Pinto
Sent: Monday, 18 August 2008 5:25 a.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Single domain? Why aren’t both DCs in Site A & B a GC?



Met vriendelijke groeten / Kind regards,



Ing. Jorge de Almeida Pinto

Senior Technical Consultant

MVP Identity & Access - Directory Services



Oxford Computer Group Benelux | (: +31 (0)6 26.26.62.80 | (: +31 (0)33
454.69.50 | 7: +31 (0)33 454.66.66 | -: Hardwareweg 4, 3821BM Amersfoort,
The Netherlands
<blocked::blocked::http://www.oxfordcomputergroup.com/>
www.oxfordcomputergroup.com | Expertise in Identity & Access Management

________________________________________________________________

MVP Profile à https://mvp.support.microsoft.com/profile/jorge1

MVP Home Site à https://mvp.support.microsoft.com/

MVP Overview à https://mvp.support.microsoft.com/mvpexecsum

BLOG à http://blogs.dirteam.com/blogs/jorge/default.aspx

________________________________________________________________



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 05:18
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links



The site design I'm currently running with is



Site A

DC (WINS + DNS + DHCP + FSMO)

DC (DNS + GC)

Exchange 2007 (mail boxes)



Site B

DC (WINS + DNS + DHCP)

DC (DNS + GC)

Exchange 2007 (DR server)



There will be 2 x 10mb connections between sites A & B



Site C

RODC + print server



I've been reading through joe's book and the stuff online, trying to work
out whether I just have a site link Site A + Site B + Site C, or whether to
do Site A + Site B and Site A + Site C and Site B + Site C. But I fear that
I have the dumb and can not brain today.





_____

From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brian Puhl
Sent: Wednesday, 6 August 2008 2:43 p.m.
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] RODC and Site Links

Though site topology stays the same, you should consider it in your DC
placement strategy wrt RODCs, since they do still generally need access to a
full DC.

So while its not true "site topology" in terms of sites, links, etc... We
usually look at the topology (among other things) when figuring out whether
and what kind of servers go in which site.

Brian Puhl
Microsoft IT

_____

From: Chris Ransom <chrisran@microsoft.com>
Sent: Tuesday, August 05, 2008 6:27 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: RE: [ActiveDir] RODC and Site Links

Site links should still be configured the same way, and should have the same
rules as a full DC (Costing, Intervals, Change Notification, etc), the only
difference will be one sided connection objects (Connection Object from Hub
to Branch).





Chris Ransom

Senior Premier Field Engineer - Active Directory

South Central District - San Antonio

US Central Premier Field Engineering

Email: <mailto:chrisran@microsoft.com> chrisran@microsoft.com

Cell: 210.482.0157

Fax: 425.708.5237

Blog: http://mschrisran.spaces.live.com



From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Robert Singers
Sent: Wednesday, August 06, 2008 7:01 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] RODC and Site Links



Do sites containing only a Read-Only Domain Controller have any bearing on
site link design? There doesn't seem to be anything about it in the
documentation
http://technet2.microsoft.com/windowsserver2008/en/library/e3a6521b-ad89-44b
6-a998-c23a923b26891033.mspx?mfr=true .

_____

This e-mail message has been scanned for Viruses and cleared by NetIQ
MailMarshal

_____

_____

Please Note:

The information contained in this email message and any attached files may
be confidential and subject to privilege. Any opinions expressed in this
message are not necessarily those of the Department of Building and Housing.
All technical opinions are offered on a ‘no-liability’ basis. This message
and any files transmitted with it are confidential and solely for the use of
the intended recipient. If you are not the intended recipient, you are
notified that any use, disclosure or copying of this email is unauthorised.
If you have received this email in error, please notify us immediately by
reply email and delete the original and any attachment(s). Thank you.

_____