@MSFTWebCast , Brother to me this subnet issue can be resolved easily, if we create this setup in Azure Cloud by taking either different regions for Sites DCs or by taking different VNets for Sites DCs...in that case we can deal with different CIDRs for sites...but even then we will still need R&R access server or VM for communication between the sites....???
I believe it will authenticate from nearest authentication service that is your Bangalore DC as per design if not then it goes to Primary DC. I may be wrong not sure not an expert on AD
AD Sites and Services We have multiple stores across the country. Each store has a site in AD and has a connection to our HQ. We are removing all our DC's from our Primary Data Center HQ (basically shutting down). We have Created new DC's in Azure and moved FSMO roles etc. There is connectivity set up between retail stores and Azure. Sites and Services Before we completely remove all the DC's. We need to make sure all the retail 50 stores that are pointing to our Data center, we need to change it to point to Azure. Two questions: In inter-site transports - IP, we have over 50 site link created, we would have to remove the Primary Datacenter HQ and add Azure - is this correct? In Each site for Existing DC's we have an automatic connection established with HQ, will we have to create a manual connection to Azure? If we remove HQ, will KCC automatically create a connection or we will have to manually create connection to Azure? Any other thing that we have to keep in Mind?
Hi, I have a question. Our enterprise has two offices, we configured a site2site vpn between the two offices. But in the headquarters there are too many subnets and lots of VLANs. In the secondary office, only has one subnet. Now the 2 DC has in one AD Site, but I want to make 2 sites and separate in a different subnets. Can I define just the secondary office sites, and then the primary office uses the default site and the remainder subnet sets, which is not definied? Thank you
Yeah, you can create new AD site for secondary office and keep primary office DC's in default first site. You can also create a separate AD site for primary office, if you want. If you have multiple subnets in your single site, you just need to create AD subnets for those subnet where you have place your DC's.
I know it is really hard for lots of people to understand it. I have tried to improve it but I think I failed. Now I am thinking to put subtitle in all the videos onward, might that will help. You know even customer care people used to tell me: "How can we help you Ma'am?" That's my accent.
I'm having the same issue as some of the other people. I have 2 network segments. A 192 and a 172. My 2 DC's are currently in my 192 and when I standup a new server in my 172 I cannot authenticate to it to join the domain. I full traffic from and to both subnets and can see everything just fine. I've even disabled the firewalls temporarily on my DC's to make sure that wasn't the issue. But even so I've had no success. Any ideas what may be causing the authentication to fail for new machines on the 172?
In my test lab, I have also put one VM as a router. Router (VM) allows communication between to different subnet. You need to put router to connect two different subnet.
@@MSFTWebCast Brother u have installed windows server on that VM and further via system manager, u have installed R&R access???? and make that server R&R access server???? in that way u have done that???
Brother can you help, how to set up multiple subnet and how to communicate them, because i did everything to communicate but i unable to do make them communicate please help me
If you have multiple local network within the same AD site then you need to use router to communicate with each other. If you have multiple subnet which is connecting multiple subnets ten you need router on both site to provide connectivity between those subnets.
These subnets are associated with a range of IP addresses which are linked to Active Directory Sites. AD Subnets are used to identify IP addresses for a particular AD site.
@@amadoumane7600 You can find the IP address range from looking at the IP addresses of your domain controller. Also check the IP addresses on other servers and client computers.
Hi there, I am unable to connect other class ip i.e:-172 (class B)(Branch Office) to 192 (Class C)(Head Office) Domain Controller. I can connect same class ip but not different class ip . Please assist me for this.
@@MSFTWebCast Perhaps it will be better to run small virtual machine with dedicated linux/bsd router distro on it. Try PFSense or OpnSense on a VM. But even better would to properly configure branch and headquarter routers with some vpn between them. If these are simple routers without VPN server functionality you can add wireguard or zerotier interface/network to each server and connect them with each other with that.
I had forgotten how to do this and your video helped refresh my memory.
Thank you!
Superb video. Master piece.
❤ nice explanation
Very well explained
Thank You.
Thank you for your excellent work.
That was awesome! Thanks! ❤️💋😍😊
@MSFTWebCast , Brother to me this subnet issue can be resolved easily, if we create this setup in Azure Cloud by taking either different regions for Sites DCs or by taking different VNets for Sites DCs...in that case we can deal with different CIDRs for sites...but even then we will still need R&R access server or VM for communication between the sites....???
Hi I had a query...how can we configure that client from suppose banglore location gets authenticated from banglore dc and not from some other dcc.
I believe it will authenticate from nearest authentication service that is your Bangalore DC as per design if not then it goes to Primary DC. I may be wrong not sure not an expert on AD
AD Sites and Services
We have multiple stores across the country. Each store has a site in AD and has a connection to our HQ.
We are removing all our DC's from our Primary Data Center HQ (basically shutting down). We have Created new DC's in Azure and moved FSMO roles etc. There is connectivity set up between retail stores and Azure.
Sites and Services
Before we completely remove all the DC's. We need to make sure all the retail 50 stores that are pointing to our Data center, we need to change it to point to Azure.
Two questions:
In inter-site transports - IP, we have over 50 site link created, we would have to remove the Primary Datacenter HQ and add Azure - is this correct?
In Each site for Existing DC's we have an automatic connection established with HQ, will we have to create a manual connection to Azure?
If we remove HQ, will KCC automatically create a connection or we will have to manually create connection to Azure?
Any other thing that we have to keep in Mind?
Can we rename the PR DC site during working hrs and create DR site than add the subnets does going to impact DC's
nice thanks
what do you do for sites that are related by permanent vpn and have no ip but a lot of subnets?
Great video can you give me next video link as you told in the end of the video? Thanks
Here it is: ruclips.net/video/4ZAbVji-B-0/видео.html
@@MSFTWebCast Thanks asked and found later ) is there anything else should be configured once I complete these 2?
@@ITMASTERTechGeek After that you just need to keep eye on logs and use repadmin commands to check the status of replication process, that's it.
@@MSFTWebCast Thanks
Hi, I have a question. Our enterprise has two offices, we configured a site2site vpn between the two offices. But in the headquarters there are too many subnets and lots of VLANs. In the secondary office, only has one subnet. Now the 2 DC has in one AD Site, but I want to make 2 sites and separate in a different subnets. Can I define just the secondary office sites, and then the primary office uses the default site and the remainder subnet sets, which is not definied? Thank you
Yeah, you can create new AD site for secondary office and keep primary office DC's in default first site. You can also create a separate AD site for primary office, if you want. If you have multiple subnets in your single site, you just need to create AD subnets for those subnet where you have place your DC's.
Nice accent u got there. Rly had to turn on subtitles. Thx for helping me out tho
I know it is really hard for lots of people to understand it. I have tried to improve it but I think I failed. Now I am thinking to put subtitle in all the videos onward, might that will help. You know even customer care people used to tell me: "How can we help you Ma'am?" That's my accent.
Your accent is perfectly fine, i can understand you just fine!
what would be the reason for servers not showing in site and services? connection was checked no fault...
Domain Controllers or Servers? Sites and Services will only display Domain Controllers.
How can I create subnet in virtualbox. the one you did.
I'm having the same issue as some of the other people. I have 2 network segments. A 192 and a 172. My 2 DC's are currently in my 192 and when I standup a new server in my 172 I cannot authenticate to it to join the domain. I full traffic from and to both subnets and can see everything just fine. I've even disabled the firewalls temporarily on my DC's to make sure that wasn't the issue. But even so I've had no success. Any ideas what may be causing the authentication to fail for new machines on the 172?
I am facing same issue
how did you make the two subnets in virtualbox
So as of now mine is empty and we have been running this AD for over ten years. Should I go ahead and add in our IP network? Will it break anything?
How may sites you have?
@@MSFTWebCast just one
@@HisLoveArmy Then there is no need to add IP subnet. But if you want to add, that will not break anything.
why it doesn't allow me to create subnet? I enter subnet number and choose the site but the next button still deem, unable to continue.
Make sure you have entered the IP Prefix correctly.
In my parent server machine there is no option for new site...What I have done wrong ... please rectify it.....
Maybe permission issue..
Problem: how can they replicate if they exist on different subnet segments? I tried. It will not let me setup replication to a different subnet.
In my test lab, I have also put one VM as a router. Router (VM) allows communication between to different subnet. You need to put router to connect two different subnet.
@@MSFTWebCast Brother u have installed windows server on that VM and further via system manager, u have installed R&R access???? and make that server R&R access server???? in that way u have done that???
Once this is set up, how can you create a DNS record that points to different IPs depending on which site the workstation is a member of?
I will be authenticate from every where because all authentication happening under one forest
Brother can you help, how to set up multiple subnet and how to communicate them, because i did everything to communicate but i unable to do make them communicate please help me
If you have multiple local network within the same AD site then you need to use router to communicate with each other. If you have multiple subnet which is connecting multiple subnets ten you need router on both site to provide connectivity between those subnets.
@@MSFTWebCasti have configured router vm still it's causing error and not pinging, what could be issue??
@@hussainshamaji2976 Check connectivity with default gateway first on both network.
ok
Where does these subnets are coming from?
These subnets are associated with a range of IP addresses which are linked to Active Directory Sites. AD Subnets are used to identify IP addresses for a particular AD site.
@@MSFTWebCast l have created a site but don't know where to find subnet, l try to create by my own but it is not working.
If you can give me your WhatsApp number so that I can call, l m trying it from Poland.
@@MSFTWebCast where to find this range of Adresse or you have to create it by yourself?
@@amadoumane7600 You can find the IP address range from looking at the IP addresses of your domain controller. Also check the IP addresses on other servers and client computers.
Hi there,
I am unable to connect other class ip i.e:-172 (class B)(Branch Office) to 192 (Class C)(Head Office) Domain Controller.
I can connect same class ip but not different class ip .
Please assist me for this.
You can use server 2019 with two lan cards as an router.
@@MSFTWebCast Perhaps it will be better to run small virtual machine with dedicated linux/bsd router distro on it. Try PFSense or OpnSense on a VM. But even better would to properly configure branch and headquarter routers with some vpn between them. If these are simple routers without VPN server functionality you can add wireguard or zerotier interface/network to each server and connect them with each other with that.
You don't want to have AD DC acting as a router, connected to public network!
@@MSFTWebCast how to conifigure the two lan cards
as router in VirtualBox
@@jeyosman1 Select tow NIC cards in for a VM and follow this video: ruclips.net/video/HZ8THj_cH1s/видео.html