I am new to Active Directory and I need to implement AD for an organization that has two larger locations and 5 smaller locations, all connected via an MPLS network. Here is a simplified diagram of the network:
The main reason for implementing AD here is central authentication & user maintenance (and possible group policies). No roaming profiles, no Exchange, no file shares or other resource sharing.
The remote locations (C-G) have no servers and given the small number of workstations in these sites and their limited use of AD, I really do not want to install DCs with related infrastructure, cost & administrative overhead in those locations.
I plan to only use one domain, but have not yet decided on OUs, etc. (but overall I am trying to keep things simple).
- Are T1s sufficient for this use of AD (the 5 stations at each location will typically only login 1-2 times / day)? Or is it likely to be very slow to login & bog down the T1s?
- Can I use only one site (despite the current 3Mbps link @ site B [to become a 10 Mbps in ~2 months])? If not, how about putting both DCs @ Site A?
- Other design recommendations for this scenario (remember, I am an AD noob)?