Broadband connection?

[Luke]

Hello

I'm in the final stage of planning the network at my new cadet building now and I've everything sussed apart from one thing. The building is being wired from construction with ethernet access ports and a network switch is being installed as well. I'm setting up an Active Directory server for all the workstations which is no problem at all, I know how to do that

Here's a diagram of locations


Now the telephone sockets are only in the offices, so would it work plugging the router straight into the ethernet port in the office or does it have to be connected to the server?

Thanks
Luke


PS: Will we ever get Infinity available or is it impossible with BT being next door?

[Firehorse]

You can plug the router straight into the network (route it through a firewall first), if your server isn't acting as the router/firewall/cache then it doesn't need to be connected directly through the server. As long as your server is networked on the same switch it will have internet access the same as any other computer.

As for BT Infinity, you should also look for other providers. Easynet Connect also provide business FTTC through BT wholesale (which is what BT Infinity is), identical service but they'll probably be able to get you set up before BT Infinity is even available in your area.

[Luke]

Awesome, I'll take a look, cheers

[Recursion]

Awesome, I'll take a look, cheers

DO NOT run a single domain controller. When it dies, it's going to take your entire network with it. Get a second physical server, put it in a locked cupboard or somewhere secure away from the primary domain controller and set it up as a secondary domain controller. This will hold an exact replica of all the Active Directory data.

Also I highly suggest you turn off DHCP on your ISP's router and add the DHCP role on Windows Server, since you need to use Windows' DNS server if you're using Active Directory (yet another excuse for a secondary DC... it can run as a secondary DNS server, too). Active Directory absolutely relies on a lot of DNS entries that you can't setup elsewhere.

[Luke]

DO NOT run a single domain controller. When it dies, it's going to take your entire network with it. Get a second physical server, put it in a locked cupboard or somewhere secure away from the primary domain controller and set it up as a secondary domain controller. This will hold an exact replica of all the Active Directory data.

Also I highly suggest you turn off DHCP on your ISP's router and add the DHCP role on Windows Server, since you need to use Windows' DNS server if you're using Active Directory (yet another excuse for a secondary DC... it can run as a secondary DNS server, too). Active Directory absolutely relies on a lot of DNS entries that you can't setup elsewhere.

I understand the whole DHCP situation, but how would I go about having a secondary domain controller, what would I set it up as? Using 2008 R2

[Recursion]

I understand the whole DHCP situation, but how would I go about having a secondary domain controller, what would I set it up as? Using 2008 R2

Use any Windows Server OS you can get a license for (2008R2 upwards, I should think your first DC has put you at a forest level of 2008R2 unless you specifically selected lower), but when you install it simply install the AD and DNS roles them promote it to a domain controller, this way it holds an entire copy of the directory so it can take over if the first fails.

Alternatively, do a full system backup of the primary DC regularly. Normally you wouldn't want to restore a backup of Active Directory but since you'd have one domain controller it wont make any difference.

[Luke]

Use any Windows Server OS you can get a license for (2008R2 upwards, I should think your first DC has put you at a forest level of 2008R2 unless you specifically selected lower), but when you install it simply install the AD and DNS roles them promote it to a domain controller, this way it holds an entire copy of the directory so it can take over if the first fails.

Alternatively, do a full system backup of the primary DC regularly. Normally you wouldn't want to restore a backup of Active Directory but since you'd have one domain controller it wont make any difference.

Would a simple RAID 1 configuration be sufficient? I'm working to a budget here, the MoD arn't really cash-giving these days..!

[Recursion]

The point is to keep data off the server.

Just buy x2 external hard drives, use Windows Server Backup to backup to drive A monthly and drive B daily, take the monthly one off site/put it in a safe whilst it's not in use.

Boom £60 backup solution for your single DC AD domain!

[Luke]

The point is to keep data off the server.

Just buy x2 external hard drives, use Windows Server Backup to backup to drive A monthly and drive B daily, take the monthly one off site/put it in a safe whilst it's not in use.

Boom £60 backup solution for your single DC AD domain!

Champion, cheers Tom