- If GC's are required to process logons...?
- Posted by - on March 2nd, 2004
Then what's the point of having any DC that isn't a GC?
- Posted by Scott Harding - MS MVP on March 2nd, 2004
In a large environment it can cause replication issues, in smaller
environments this is not uncommon to make many DC's GC's. It can also be
affected by the number of Child Domains in your Forest.
--
Scott Harding
MCSE, MCSA, A+, Network+
Microsoft MVP - Windows NT Server
"-" <-@-.com> wrote in message news:uQw5i0JAEHA.212@TK2MSFTNGP12.phx.gbl...
- Posted by Danny Sanders on March 2nd, 2004
See general recommendations for FSMO placement in this article:
FSMO Placement and Optimization on Windows 2000 Domain Controllers
http://support.microsoft.com/default...b;en-us;223346
hth
DDS W 2k MVP MCSE
"-" <-@-.com> wrote in message news:uQw5i0JAEHA.212@TK2MSFTNGP12.phx.gbl...
- Posted by Jordan on March 3rd, 2004
For a single domain, there's no harm making all DCs to be GCs.
GC are more significant for multiple domains environment (they store partial
attributes for all objects in the forest).
Moreover if you are not in Windows 2000 Native Mode, you don't need a GC for
logging on.
"-" <-@-.com> wrote in message news:uQw5i0JAEHA.212@TK2MSFTNGP12.phx.gbl...
- Posted by - on March 3rd, 2004
I read that there was an exception to the "no GC on Infrastructure role
holder" rule that said that if all the DC's in the domain are GC, then there
are no phantoms to update and that it's then ok to have GC and
Infrastructure on the same one. This is true for our child domain, all DC's
are GC's, but not for other domains in the forest (some are not GC's). The
way it reads it looks like we are ok, but since Infrastructure master has to
do with other domains' objects, I'm not so sure. I'm also wondering, if a
DC isn't a GC, and therefore cannot log anyone on (Native Mode), then what
good is it? What does it actually do?
"Jordan" <oyamseng@online.microsoft.com> wrote in message
news:ebMb80LAEHA.3220@TK2MSFTNGP10.phx.gbl...
- Posted by Dave Shaw [MVP] on March 5th, 2004
A non-GC DC will still authenticate users in a multi-domain forest with
domains in native mode or greater. However, if the authenticating DC is not
a GC, it will need to refer to a GC for Universal Group memberships. The DC
will still authenticate and issue tickets without being a GC.
-ds
"-" <-@-.com> wrote in message
news:uj%23YGpXAEHA.2448@TK2MSFTNGP12.phx.gbl...
- Posted by Jordan on March 5th, 2004
GC stores partial replicas (AD consists of 3 partition, schema, config and
domain) of other domains objects. And these will incur additional
replication traffic. If you have more than 1 domain, just make sure that you
have at least 1 GC in each site. No harm making other DC to be GC is
additional replication traffic is not a concern. Also for multiple domain,
GC and Infrastructure Master should not be placed on the same machine.
248047 Phantoms, Tombstones and the Infrastructure Master
http://support.microsoft.com/?id=248047
223346 FSMO Placement and Optimization on Windows 2000 Domain Controllers
http://support.microsoft.com/?id=223346
Besides the Universal Group, a GC is also required if you are using User
Principle Name (i.e. abc@domain.com) to logon.
"-" <-@-.com> wrote in message news:uj#YGpXAEHA.2448@TK2MSFTNGP12.phx.gbl...
