up vote 0 down vote favorite
share [g+] share [fb]

I have a DC win 2008 with ip 10.0.2.x. I also have another group ( workgroup) of pc's in a remote site with ip 10.0.1.x. The two sites are connected via vpn with zyxel routers. I would like to know how to configure domain controller so that i can join the domain throw the network 10.0.1.x to finally have only one DOMAIN with 2 subnet and global group policy

link|improve this question
feedback

migrated from stackoverflow.com Aug 17 '11 at 8:38

This question came from our site for professional and enthusiast programmers.

2 Answers

up vote 3 down vote
  1. On the domain controller, go into sites and services and add the subnets and sites that you require.
  2. Ensure you have the appropriate ports opened through the VPN between the remote subnet and the network your DC is on
  3. Configure the clients at the remote site so that their Primary DNS is set to the IP of the domain controller
  4. ping from the remote site clients. Ensure it resolves to the IP of the domain controller and that the ping succeeds. If not, troubleshoot your network configuration until it works
  5. Join the clients to the domain
link|improve this answer
Chris thanks for your quick answer. I would like also to ask about the subnet mask. Should be 255.255.255.0 for both sites ( 10.0.2.x / 255.255.255.0 , 10.0.1.x / 255.255.255.0) or 255.255.0.0 in both sites. Thanks alex. – Alex Koustas Aug 18 '11 at 7:30
255.255.255.0 at both sites. This means that when a computer at one site tries to reach a computer at the other site, it realizes it can't be reached on it's subnet. It'll then send the request to it's default gateway, which will then send it down the vpn to the remote site. – Chris Thorpe Aug 19 '11 at 0:42
feedback
up vote 1 down vote

To join the domain the client machines on the second subnet must to be able to resolve the active directory DNS records, either use the DC's as DNS servers or a local server with forwarders to the DC's for the required domain(s).

It may be a good idea to define the second subnet in AD as well, do this in Active Directory sites and services.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.