Automatic AD replication via VPN ???

[LiLAmy]

Situation:
1 AD Domain, 2 Sites, 2 DC's

At a satellite office I have setup a DC in a seperate site, but in the same AD domain as the main office. The remote office only has a DSL connection and each client establishes it's own VPN connection to the RRAS when it needs to access resources at the main office.

My question pertains to the newly setup DC. Aside from having the DSL router itself establish the VPN connection, what solutions are there to have the DC first establish a VPN connection prior to performing each replication? (Because without it, it has no way of contacting the other DC)

Obviously, establishing the VPN connection from the DC manually is one solution, and then leaving it on all the time. But this won't work since it will get disconnected periodically and there is nobody available to re-connect it. Plus the connection would constantly un-necessarily use precious bandwith...

Or am I thinking in the wrong direction here?

Any input would appreciated. Thanks!

-lil amy

 

[InfrArch]

Hello Lil!

I think you must use Demand Dial VPN Router + set a DC in your satellite office to be a GC server. Then you'll minimize WAN traffic and 'll get what you want.

Hope it will be useful.


Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.

 

[LiLAmy]

I thought there was only supposed to be one GC Server per domain? How do you create 2?

So your saying there is no way to accomplish my goal without a VPN router?

 

[InfrArch]

You can have as many GC servers as DC 's . But it's not recommended to do so. But in your situation Demand Dial VPN Router , I think , is the best solution because of advanced level of security + satisfaction with your current WAN topology.

It's very easy to add a GC to your DC:
sites and services snapin
sites
your satellite site
servers
servername
ntds settings
right click/properties
GC mark - check it.


Hope it will help you.

Good luck

Victor K
psas@canada.com
MCSE+I;MCSA;MCSE(w2k);CNE(5.1);MCNE(6);CIWSP;CIWSA.