Windows 10: Active Directory best practices for two sites and one controler

Discus and support Active Directory best practices for two sites and one controler in Windows 10 Software and Apps to solve the problem; Hi allOur company will expand with a second physical site, and therefore a separate LAN. We already have an Active Directory in place, running on a... Discussion in 'Windows 10 Software and Apps' started by TSPR_, Apr 29, 2025 at 9:22 AM.

  1. TSPR_
    TSPR_ Win User

    Active Directory best practices for two sites and one controler


    Hi allOur company will expand with a second physical site, and therefore a separate LAN. We already have an Active Directory in place, running on a Windows Server 2022 machine, with DHCP and DNS services. So we will now have two separate local networks, connected with a site-to-site VPN on router/gateway level, and one AD controller.I was wondering if there is a guide/instructions for setting up such a scenario. Can one AD controller handle this setup? How can I properly set up the DHCP and DNS requests from two different LANs?Thanks for your help

    :)
     
    TSPR_, Apr 29, 2025 at 9:22 AM
    #1
  2. LAWRENCECACHERO
    LawrenceCachero Win User

    Best Practice for Inactive Computers in Active Directory

    Hi,

    Is there a documentation regarding best practice for Inactive Computers in Active Directory

    Thanks,
     
    LawrenceCachero, Apr 29, 2025 at 9:32 AM
    #2
  3. CHARLIE R. LOCHBAUM
    Charlie R. Lochbaum Win User
    Best Practices patching AD Domain Controllers

    What is the Best Practice in patching a production Active Directory Domain Controller?

    Thanks folks!

    Charlie
     
    Charlie R. Lochbaum, Apr 29, 2025 at 9:32 AM
    #3
  4. PRATEEK_SINGHAL
    Prateek_Singhal Win User

    Active Directory best practices for two sites and one controler

    Multi-Site Active Directory Sync

    Hello All,

    I have created 4 Active Directory Domain Controllers both in different locations. One is in Delhi and Another one in Mumbai.

    Delhi has 2 domain controllers Primary(DDC01) and Secondary(DDC02).

    Mumbai has 2 domain controllers Primary(MDC01) and Secondary(MDC02).

    Both have different networks and I can take the RDP of both Domain controllers from different locations.

    Now I want to connect all 4 Domain Controllers so they can replicate the data and policies.

    I saw this can be done through Active Directory Site and Services.

    I Added Subnet's of Both Sites in Mumbai DC i.e. MDC01

    I created Sites such as Mumbai-HO and Delhi-BO in MDC01 it got replicated to MDC02.

    I could see MDC01 and MDC02 but I cannot see any of the DDC01 or DDC02 showing there.

    I am checked all the Active Directory ports are opened between both Sites.

    Please find the list of ports below: -

    UDP Port 88 for Kerberos authentication UDP and TCP Port 135 for domain controllers-to-domain controller and client to domain controller operations. TCP port 139 and UDP 138 for File Replication Service between domain controllers. UDP Port 389 for LDAP to handle normal queries from client computers to the domain controllers. TCP and UDP Port 445 for File Replication Service TCP and UDP Port 464 for Kerberos Password Change TCP ports 3268 and 3269 for Global Catalog from client to domain controller. TCP and UDP Port 53 for DNS from client to domain controller and domain controller to the domain controller.

    Am I missing something?

    Just FYI... DDC01 and DDC02 are having different gateways due to some reason.
     
    Prateek_Singhal, Apr 29, 2025 at 9:32 AM
    #4
Thema:

Active Directory best practices for two sites and one controler

Loading...

  1. Active Directory best practices for two sites and one controler - Similar Threads - Active Directory best

  2. Active Directory best practices for two sites and one controler

    in Windows 10 Gaming
    Active Directory best practices for two sites and one controler: Hi allOur company will expand with a second physical site, and therefore a separate LAN. We already have an Active Directory in place, running on a Windows Server 2022 machine, with DHCP and DNS services. So we will now have two separate local networks, connected with a...

  3. Active Directory best practices for two sites and one controler

    in Windows 10 Gaming
    Active Directory best practices for two sites and one controler: Hi allOur company will expand with a second physical site, and therefore a separate LAN. We already have an Active Directory in place, running on a Windows Server 2022 machine, with DHCP and DNS services. So we will now have two separate local networks, connected with a...

  4. Active Directory best practices for two sites and one controler

    in Windows 10 Software and Apps
    Active Directory best practices for two sites and one controler: Hi allOur company will expand with a second physical site, and therefore a separate LAN. We already have an Active Directory in place, running on a Windows Server 2022 machine, with DHCP and DNS services. So we will now have two separate local networks, connected with a...

  5. Best Practice for OneDrive

    in Windows 10 Gaming
    Best Practice for OneDrive: In most places I look at to investigate the use of OneDrive, I see that it is excellent for backing up the contents of the Documents and Pictures folders.But I need more than that. In addition to those two I also want to include my Music, Videos, Downloads, and another...

  6. Best Practice for OneDrive

    in Windows 10 Software and Apps
    Best Practice for OneDrive: In most places I look at to investigate the use of OneDrive, I see that it is excellent for backing up the contents of the Documents and Pictures folders.But I need more than that. In addition to those two I also want to include my Music, Videos, Downloads, and another...

  7. Defender for Endpoint - Best Practices

    in Windows 10 Customization
    Defender for Endpoint - Best Practices: Hi,Where can I find a list of best practice settings for Defender for Endpoint agent settings as defined by Group Policy?I am currently reviewing the settings my org uses, and would also like to know if I have missed any settings too.Best regards,Dan...

  8. OneDrive best practice

    in Windows 10 Gaming
    OneDrive best practice: Previously, I could not use OneDrive and was using SyncToy. Now I can use OneDrive but getting it set up is the problem. I have over 100GB to transfer but to this point I haven't been able to get 1GB out of a 10GB folder. I'm using LAN, not wireless and have a fiber optic...

  9. OneDrive best practice

    in Windows 10 Software and Apps
    OneDrive best practice: Previously, I could not use OneDrive and was using SyncToy. Now I can use OneDrive but getting it set up is the problem. I have over 100GB to transfer but to this point I haven't been able to get 1GB out of a 10GB folder. I'm using LAN, not wireless and have a fiber optic...

  10. Active Directory sites & Subnets

    in AntiVirus, Firewalls and System Security
    Active Directory sites & Subnets: Hi Guys, I have a setup of Active Directory 1 DC with 4 RODCs A is my main DC. B,C,D,E are RODCs in different Branches. But When I checked from client pc the "logon server" is showing different location. When I went to one client PC in "E" and checked Cmd>echo...