Deploying additional domain controllers: in-depth Active Directory series (v)

Small and medium-sized enterprises in building their own domain environment, the most classic approach is to build 2 domain controllers, so that not only can solve the problem of the efficiency of the domain environment, the most important thing is to be fault-tolerant. I've met a few small and medium-sized enterprises in a single domain environment using only one domain controller, it is not difficult to imagine that the majority of Chinese enterprises are small and medium-sized enterprises, I believe that many small and medium-sized enterprises are also a single domain control of the domain environment. A single domain controller, the most headache is the system performance problem, because these enterprises often put the database engine, MOSS, mailbox and other heavyweight products into this domain controller, the efficiency is not difficult to imagine, POP3 often when, MOSS occasionally login, the system often need to reboot. So it is necessary to build an additional domain controller from the new one.

The environment of the experiment in this section is shown below

The role of additional domain controllers:

1, provide fault-tolerant function. If the first domain controller fails, additional domain controllers can still provide services, allowing users to log in to the domain environment, and so on.

2, improve user login efficiency. Multiple domain controllers can share the task of auditing user names and passwords, especially when many users log on at the same time, increasing the user's logon speed.

How to deploy additional domain controllers:

First, you need to install the first domain controller. The additional domain controllers are then deployed. Of course we can deploy a lot of additional domain controllers.

In addition to deploying additional domain controllers, you need to replicate the active Diretory database from an existing domain controller to this new additional domain controller, which can be replicated in the following 2 ways:

1, replication over the network. This method can affect the efficiency of the network when there are many contents in the Active Directory database. Of course, according to the actual situation, such as we have just built the enterprise domain environment, this method is the best.

2, replication is made through the system State data that has been backed up. How to back up the "System State Data" section we've already talked about. Using this method to build the domain environment is the legendary offline deployment domain controller, and of course you can extract the files that are deployed offline in System State data ((systems)) by restoring the method (restoring to an alternate location).

Here we use the "Network replication Method" To install additional domain controllers.