More Pieces

Published: September 17, 2004

This guide describes how to create the first domain controller for a new child domain and how to configure an additional domain controller for replication within a child domain.

Overview

The following sections demonstrate the procedures required for configuring a computer running Windows Server 2003 as the first domain controller in a child domain. An additional domain controller within the child domain will be configured to function as a replication partner.

An Active Directory service deployment consists of one or more forests with each forest having one or more domains. Creating the initial domain controller (DC) in a network creates the first domain in a forest—you cannot have a domain without at least one domain controller. The first domain created is the root domain of the first forest. Additional domains in the same domain forest may be child domains or tree root domains. A domain immediately above another domain in the same domain tree is considered its parent.

Domains are used to accomplish network management goals, such as structuring the network, delimiting security, applying Group Policy, and replicating information.

Active Directory allows domain controllers to function as peers—therefore, clients can update Active Directory on any of the Windows Server 2003 domain controllers in the domain. This is a significant change from the read-write/read-only roles played by Windows NT^® Server Primary Domain Controllers (PDCs) and Backup Domain Controllers (BDCs). The Windows NT Server domain system supports single-master replication requiring all changes to be made on the PDC.

The Windows Server 2003 operating system supports multi-master replication—all of a domain’s domain controllers can receive changes made to objects and can replicate those changes to all other domain controllers in that domain. By default, the first domain controller created in a forest is a global catalog server, which contains a full replica of all objects in the directory for its domain and a partial replica of all objects stored in the directory of every other domain in the forest.

Replicating Active Directory data among domain controllers provides benefits for information availability, fault tolerance, load balancing, and performance. In this step-by-step guide, you can take advantage of the greater fault tolerance provided in the multi-master model by installing multiple domain controllers. In the event a domain controller stops working, the availability of Active Directory is not compromised.

Creating Additional Domain Controllers

The following steps should be performed on a computer that has Windows Server 2003 installed and is connected to the common network infrastructure created in Prerequisites in this guide.

Best Practice: While not strictly required, Microsoft highly recommends that all domain controllers, DNS and Dynamic Host Configuration Protocol (DHCP) servers, routers, and printers within the common infrastructure be assigned static Internet Protocol (IP) addresses.

Configuring Static IP addresses

Configuring a Child Domain

Configuring a Replication Partner

The Role of Sites in Active Directory Replication

Sites enable the replication of directory data both within and among sites. Active Directory replicates information within a site more frequently than across sites, implying that better connected domain controllers receive updates first. The domain controllers in other sites will receive all updates to the directory, although, to reduce the bandwidth requirements for slower network connections, updates are scheduled to occur less frequently.

A site is delimited by a subnet and is usually geographically bound. Sites differ in concept from Windows Server 2003–based domains in that sites can span multiple domains, and a domain can span multiple sites. Sites are not part of the domain namespace but they do control replication of domain information and help determine resource proximity. For example, a workstation will select a domain controller within its site against which to authenticate.

Directory information can be exchanged using the following replication transports: Remote Procedure Call (RPC) over Transmission Control Protocol/Internet Protocol (TCP/IP) and Simple Mail Transfer Protocol (SMTP). For information about configuring sites, subnets, and IP-based replication, see the Step-by-Step Guide to Active Directory Sites and Services.

To take advantage of multi-master replication, you can set up another domain controller to serve as a replication partner for the first domain controller in the Vancouver child domain.

Configuring an Additional Domain Controller as a Replication Partner

To configure an additional domain controller as a replication partner

12.

Once the Active Directory Installation Wizard completes, click Finish, and then click Restart Now to reboot your system.

You can create a contact in Active Directory to forward mail to an external email address or mobile device - whilst still leaving a copy in the original mailbox.

1. Open Active Directory.
2. Navigate to the OU where you want to create your contact, right-click the folder, point to New, and then click Contact.
3. On the New Object page, complete the name information and click Next.
4. On the next page, verify that the Create an Exchange e-mail address check box is selected.
5. In E-mail address, click Modify.
6. In New E-mail Address, select the e-mail address type for the target address, then click OK.
7. In Internet Address Properties, type the e-mail address you want to forward to, then click OK.
8. Complete the wizard to create a contact with the proper target address.

Now that the contact has been created, it has to be associated to the relevant user.

Right click on the user and select properties. From the Exchange General Tab hit the Delivery Options button.

In the forwarding address section, click Foward To and then the modify button.

Choose the user account and make sure to the tick the “Deliver messages to both forwarding address and mailbox checkbox”.

The AD operations guide, very useful :

AD_Operations.pdf