Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I'm in the process of adding a second DC to our domain and just want to make sure I have all the steps right before proceeding.

Info:

DC1 is 2008 R2 Standard.

DC2 is 2008 R2 Standard. //Edit: DC2 is 2008 Standard.

Network1 is 192.168.39.x/24

Network2 is 10.0.0.x/24

VPN is Sonicwall.

The 2 DC's will be at two different sites, but the networks are connected by hardware VPN. (Sonicwall). The main DC server will be on the 192.168.39.0/24 network. The 2nd DC will be on 10.0.0.0/24.

Here are the steps I plan to take; please let me know if I'm missing anything.

Part 1:

AD Sites and Services on DC1, create a new site and subnet for DC2. (Or should I create a new one for both?)

(Can I use the default IPSiteLink and not change anything in there other than refresh timer?)

Part 2:

Point the DNS of DC2 to DC1. Run /forestprep and /domainprep (on both, or just DC1?).

Dcpromo and select "Additional Domain Controller for Existing Domain". Then continue with normal steps with default locations for databases.

EDIT: Didn't realize this was like reddit and required two skipped lines to skip one :P

EDIT 2: When DCPromo-ing DC2, do I need to have "Append primary and connection specific DNS" and "Append parent suffixes of the primary DNS suffix" checked?

EDIT 3: I started the process of joining the domain when I came across the error, "The functional level of the domain or forest is incompatible with this operating system." "The version of the OS is incompatible with the current domain functional level"

Solved: I had to downgrade the functional level of the domain AND the forest following these steps + the small change in syntax provided by the user in comments below.

http://www.fixkar.com/articles/kb/1151/

Thanks all for help.

share|improve this question
    
EDIT 2: When DCPromo-ing DC2, do I need to have "Append primary and connection specific DNS" and "Append parent suffixes of the primary DNS suffix" checked? –  EagerToLearn Jun 28 '11 at 19:08
    
Comment to Edit 2: That's the default setting so leave it as it is with the caveat that you should not have any connection specific suffixes. –  joeqwerty Jun 28 '11 at 22:58
    
Please check my 3rd edit. I am not able to join the domain because the functional level is "R2", and my DC2 is only 2008 Standard. I read somewhere that I can lower the functional level as long as AD recycle bin (I think that's what it's called) isn't enabled. Help! – EagerToLearn 6 mins ago –  EagerToLearn Jul 6 '11 at 14:16
    
I had to downgrade the functional level of the domain AND the forest following these steps: fixkar.com/articles/kb/1151 Thanks all for help. –  EagerToLearn Jul 6 '11 at 15:10
    
Glad to help and glad you got everything working. –  joeqwerty Jul 7 '11 at 18:41

1 Answer 1

up vote 4 down vote accepted
  1. You should have ADS&S configured for all sites/subnets, even when you have only one. No need to change the replication settings unless you have specific needs/limitations.

  2. No need to run /forestprep or /domainprep.

share|improve this answer
1  
+1. One extra note on the IP site link; if you have any kind of decent bandwidth between the sites, consider setting the options attribute on your IP Site Link to 0x1. This'll put it in USE_NOTIFY mode, ignoring the replication schedule and replicating changes immediately. –  Shane Madden Jun 28 '11 at 15:11
    
Sorry I'm a little confused by the first part of your answer. Are you saying I shouldn't use the default site, and should create two new sites? Thanks, -Will –  EagerToLearn Jun 28 '11 at 15:12
    
Unfortunately the bandwidth is pretty bad in one of the locations. (T1 for an office of 30 people). –  EagerToLearn Jun 28 '11 at 15:13
1  
Another note: Make sure you understand the difference between the replication schedule and the replication availability. –  joeqwerty Jun 28 '11 at 15:14
1  
@user85958: No, I'm saying you should add a subnet to the default site and set up a new site/subnet for the new site. Every site (even if you have only one) should have a corresponding subnet configured for it. –  joeqwerty Jun 28 '11 at 15:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.