Home > IT Answers > Windows Server > Branch office logon
scottbr
0 pts.
 Branch office logon
Active Directory, Microsoft Windows
Is there a configuration that would allow branch office users to logon when the branch's domain controller is unavailable without adding a second domain controller at the branch? Single domain, Windows 2003. Thanks in advance.

Software/Hardware used:
ASKED: February 25, 2007  10:10 PM
UPDATED: February 26, 2007  7:17 PM
RELATED QUESTIONS
Answer Wiki:
Short answer is yes, but. You did not provide a full description of your network. We would really need to know how your network is configured. For example, if you have a VPN between the branch and main office (like router to router not software) then the workstation could find a DC at the main office. Just a thought. dmw
Last Wiki Answer Submitted:  February 26, 2007  9:51 am  by  Dwiebesick   2,220 pts.
All Answer Wiki Contributors:  Dwiebesick   2,220 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

I agree. We have a domain controller at each remote campus and if it goes down, the clients can still reach the domain controllers at the main campus through our leased links. The other part of this is configuring the client systems to list all of the domain controllers as DNS servers. I have recommended a policy of entering all of the domain controllers in every client and putting the local one at the top of the list. This model assumes you are using the domain controllers as DNS servers for the clients.
rt

Astronomer
 0 pts.
 

Thanks for the responses-

There is a routed point-point T1 link between the main office and the remote office. None of the traffic is filtered. Each domain controller at each site provides DNS. I will need to check on the remote’s client DNS settings to confirm if a main office DNS server is included.

I have created sites in AD and AD replication is working fine.

Any more information I can provide?

Thanks again.

scottbr
 0 pts.
 

Scott:
The setup looks good. I suspect the main issue is configuring the clients to use the remote servers. You can do a partial test by configuring a client to use only the remote server for DNS. If this works you should be fine. If you want to be completely sure, I would bring down the office DC some night and test logins with its clients.
rt

Astronomer
 0 pts.