Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Windows 2008 Domain Controller with ip 10.0.2.x. I also have another group (workgroup) of PC's in a remote site with ip 10.0.1.x.
The two sites are connected via VPN with ZyXEL routers. I would like to know how to configure domain controller so that i can join the domain throw the network 10.0.1.x to finally have only one DOMAIN with 2 subnet and global group policy

share|improve this question

migrated from Aug 17 '11 at 8:38

This question came from our site for professional and enthusiast programmers.

  1. On the domain controller, go into sites and services and add the subnets and sites that you require.
  2. Ensure you have the appropriate ports opened through the VPN between the remote subnet and the network your DC is on
  3. Configure the clients at the remote site so that their Primary DNS is set to the IP of the domain controller
  4. ping from the remote site clients. Ensure it resolves to the IP of the domain controller and that the ping succeeds. If not, troubleshoot your network configuration until it works
  5. Join the clients to the domain
share|improve this answer
Chris thanks for your quick answer. I would like also to ask about the subnet mask. Should be for both sites ( 10.0.2.x / , 10.0.1.x / or in both sites. Thanks alex. – Alex Koustas Aug 18 '11 at 7:30 at both sites. This means that when a computer at one site tries to reach a computer at the other site, it realizes it can't be reached on it's subnet. It'll then send the request to it's default gateway, which will then send it down the vpn to the remote site. – Chris Thorpe Aug 19 '11 at 0:42

To join the domain the client machines on the second subnet must to be able to resolve the active directory DNS records, either use the DC's as DNS servers or a local server with forwarders to the DC's for the required domain(s).

It may be a good idea to define the second subnet in AD as well, do this in Active Directory sites and services.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.