Any Suggestion for AD Sites and Subnets assoication of root domain and sub domain on phyiscal LAN segement RRS feed

  • 問題

  • Dear All,

    I've refered to following URL first
    I have a flat LAN segement IP network is
    I have AD root domain call KZEROPLUS.INC and sub domain K2MINUS.INC both belongs to same AD forest
    The AD root domain and sub domain are depolyed on flat network
    The AD root domain have two Domain Controllers with DNS service hold the AD intergretaed zone KZEROPLUS.INC and stub zone for K2MINUS.INC.We name the Domain Controllers HQDC01.KZEROPLUS.INC, HQDC02.KZEROPLUS.INC
    The AD sub domain have one Domain Controller with DNS service hold AD intergrated zone K2MINUS.INC named SUBDC01.K2MINUS.INC
    HQDC01.KZEROPLUS.INC IP address netmask
    HQDC02.KZEROPLUS.INC IP address netmask
    SUBDC01.K2MINUS.INC IP address netmask
    We have no plan to apply any VLANs with subneting on
    The AD root domain has 400 users, sub domain has 100 users
    1. Should I place all Domain Controllers of all domains on one AD site?
    2. We will build another sub domain calls AWLTG.INTL on same AD Forest located on remote branch network, to prevent unnecessary AD replication trafffic; should I create 3 AD sites and each site associate with one particular domain?
    3. What is the better AD site topology for user on KZEROPLUS.INC and K2MINUS.INC?
    4. Can I use the Catch-All Subnet apporach for KZEROPLUS.INC and K2MINUS.INC?
    5. How can I apply two sets of AD site policy for KZEROPLUS.INC and K2MINUS.INC?
    Any comment and suggestion is welcome

    Kenny Lee
    2009年5月12日 上午 01:05


  • 1. Yes. You should using a single Site for all domain controllers

    2. You should create another site for the subdomain. If the domain in the same network and subnet, it should be fine to have a single Site

    3. Becase they are in the same network, I dont see there have any needs to have second site.

    4. Since your SUBDC and HQDC is on the VLAN It already in a catch-all subnet as the domain using

    5. You may not able to assign a site-wise policy to KZEROPLUS.INC and K2MINUS.INC. Since both of the domain are using as the network address. If you need to do a site-wise address range, you have to define the DC in either network into another vlan, or just using another range of IP addresses

    2009年5月20日 下午 04:29