Roger,
Pros and cons for each. Primary reason for a separate domain: Complete separation of GP and AD. Trusts allow for granular control of resources but adds a lot of overhead to your rollouts, updates, management. I would only do this if the remote office was going to act very independent of your office and had local IT support. Personally I would create a new SITE, setup your AD and GP to deal with computers and users as separate OU's for each site and that keeps the Exchange and AD simple and easy to manage. Creating sites also allows you to control replication and bandwidth usage over the WAN links, placing a DC at each site is a must for this scenario. This will also allow for you to do DFS Replication between the sites for syncing a DFS namespace and make accessing those files locally very quick. User folders for laptop and My Doc redirection becomes fast and reliable as though they are local vs replicating that traffic across the WAN link each time. (r2) makes this EASY.. GP can be managed at a site level as well for rollouts of software, user controls, WSUS, etc and with DFS the clients would pull data from the DFS namespace local to them instead of across the wire. WSUS would be just having the remote pull from its upchain at the main. Central location for pushing/approving updates. AD Replication in the site scenario is not immediate and changes take time to get to the other side, you can trigger it, but it still has to replicate. Greg From: Roger Wright [mailto:[EMAIL PROTECTED] Sent: Thursday, January 10, 2008 6:22 PM To: NT System Admin Issues Subject: New Remote Office We have a new remote location coming online in a couple months and are working on our IT plan. There will be a permanent VPN between the two sites. We plan for the remote users (about 20) to access their apps via a terminal server here, but they'll also have a local file and print server. The Exchange server resides here We're unsure whether to make that location a separate domain with trusts between the two or add them to the existing domain and make their local F/P server a DC of the existing domain. The Exchange server resides here and permissions are already set for the users who will be relocating. What are the relative merits of a remote DC of the existing domain versus creating a new domain and adding the trusts? How much data would be moving across the wire for A/D syncs? Roger Wright Network Administrator Evatone, Inc. 727.572.7076 x388 ____ If your mind goes blank, remember to turn down the sound. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
