hi Iain,
Unfortunately, i have no way to avoid this but enabling my NIC card *ONLY* during the replication windows scheduled . The other time, my NIC card will be disable.
I don't know right now how to do this. I was thinking about scheduling (AT)a script (via netsh ??)that will enable my NIC when my replication windows starts and then will disbale my NIC when the replication stops.
Yann
[EMAIL PROTECTED] a écrit :
Yann,How are you planning on protecting your lag site DCs from a forced replication?Regards,Iain | IT Services | Infrastructure
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Yann
Sent: 15 May 2006 21:49
To: ActiveDir@mail.activedir.org
Subject: Re : [ActiveDir] Lag site- disabling auth on Lag DC.Understood !We will follow your advices.Cheers,Yann
----- Message d'origine ----
De : "Almeida Pinto, Jorge de" <[EMAIL PROTECTED]>
À : ActiveDir@mail.activedir.org
Envoyé le : Lundi, 15 Mai 2006, 10h21mn 54s
Objet : RE: [ActiveDir] Lag site- disabling auth on Lag DC.SRV records....
* make sure the DC only registers the CNAME SRV record which is used for replication
* don't assign the lag site DCs WINS servers, otherwise these will register the 1Ch record in WINS
* make sure the site link cost between the main site and the lag are higher than any other site links that also links to the main site
for the lag to work properly make sure you have at least one DC from each domain, because of eventual cross domain links (e.g. group memberships)
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
LogicaCMG Nederland B.V. (BU RTINC Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : <see sender address>
________________________________
From: [EMAIL PROTECTED] on behalf of Yann
Sent: Mon 2006-05-15 21:36
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Lag site- disabling auth on Lag DC.
hello all,
We are about to build a lag site for our AD recovery strategy.
We schedule replication Prod Sites <->Lag Sites one time a week.
We have one forest with a Root and Child domain.
The lag site will contain only one DC. We would like to disable clients auth on this DC. So I found 2 ways to do this:
1) Configuring the "DC Locator DNS Records" via a gpo.
or
2) Stop and disable the netlogon service.
What will be the best choice ? 1) or 2) ?
Shall i also disable the service server to avoid replication of sysvol too ?
Thanks for input.
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.*********************************************************************************This electronic message contains information from Hampshire Constabulary which may be legally privileged and confidential. Any opinions expressed may be those of the individual and not necessarily the Hampshire Constabulary.The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of the information is prohibited. If you have received this electronic message in error, please notify us by telephone+44 (0) 845 045 45 45 or email to [EMAIL PROTECTED] immediately. Please then delete this email and destroy any copies of it.All communications, including telephone calls and electronic messagesto and from the Hampshire Constabulary may be subject to monitoring. Replies to this email may be seen by employees other than the intended recipient.*********************************************************************************
Faites de Yahoo! votre page d'accueil sur le web pour retrouver directement vos services préférés : vérifiez vos nouveaux mails, lancez vos recherches et suivez l'actualité en temps réel. Cliquez ici.
