slow login's on different sites

[Stin0]

Hello,

I've got 3 sites with their DC with DHCP. Each site has it's own fileserver and they are synced with DFS over a VPN-tunnel.
The 3 DC's replicate over the same VPN-tunnels...
Now here's the problem:
When one specific DC (the one with, i guess has all the FSMO-roles) loses it's VPN-tunnel to the other DC's, the clients in those sites seem to log in slower than normal.

We had some issues with FSMO-roles in the past, not sure if it has all been solved. But the network works... except when the middle-one loses it's tunnel.

I'm thinking at Global catalog?
Is it possible, or do i need, to make them all GC's?

Any idea's?


thanx in advance


Stijn

 

[Roadki11]

Make all 3 GC's and DNS servers. Setup Sites and Services with subnets. Make sure each client has its local server as primary DNS. You should see some improvement.



RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[Stin0]

All 3 DC's are already DNS servers. You can not setup AD without DNS...
Each site has it's own DC and DNS server, but when 1 DC fails the other should take over.

In AD-sites and services I already configured the different networks.

Tomorrow I'll try to make them all GC's, first going to read up a bit more.
Thank you!

Stijn

 

[Roadki11]

You can setup additional AD servers without installing DNS on those servers.... Which is why i said make all 3 DNS servers. Anyway, here is link that breaks the whole process down clearly and simply.

http://blog.augustoalvarez.com.ar/2...ailover-environment-on-a-windows-2003-domain/

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen