Creating Additional Domain Controllers

In every Active Directory domain—whether it is a forest root, tree root, or child domain—you should have redundant DCs. These DCs provide fault tolerance and speed. Multiple DCs per domain ensure that, if one goes offline due to hardware failure or a network outage, other DCs still will be online with the exact same information in their databases. Every Windows 2000 domain controller in an AD domain has a writeable copy of the AD database. This means that you can update domain accounts on any DC that is a member of that domain. To create additional DCs, run dcpromo on the member server and click Next on the Welcome page.

The next page you are shown is the Domain Controller Type page, with the Additional ...

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.