I have a quick question about domain controller requirements. We have about 600 users in 1 large network and a few terminal servers. We have about 300 users logging into their machines around the same time and that takes a while for the login to start. We also see high load on the DCs during that hour time frame where there is an influx of simultaneous logins. The lsass.exe process is using most of the server memory and high CPU.
There are 2 domain controllers in the environment with 4 GB or ram each. What do you recommend to help with the login issue? I an thinking adding an additional 2-3 server 2003 DCs. Thanks.