|
|
| salv236 2004-04-19, 4:02 pm |
| i want to see if i have got this right, say i have several DCs and a parent at the top of the hierarchy. A user account has been created at the root domain this user account is replicated to all the domains that make part of the same tree structure.
Here are my questions?
does the replication of user account info affect the root domain? (i assume it doesnt as this already resides in the active directory store of the root domain but affects other DCs). | |
| aznluvsmc 2004-04-19, 4:15 pm |
| Domain specific information such as user accounts are only replicated between domain controllers in the same domain.
When you refer to hierarchy, I assume you mean a domain hierarhy and not a domain controller hierarchy as there is no such thing.
If you have a domain called Microsoft.com and a sub-domain called Sales.microsoft.com and a user exists in the Microsoft.com domain, they would not be replicated to the Sales domain. | |
| salv236 2004-04-19, 4:32 pm |
| sales.microsoft.com forms part of the same tree structure of microsoft.com i would have thought that it would replicate to sales as they are in the same tree and not with disjointed namespaces.
correct me if i am wrong. | |
| jocampo 2004-04-19, 5:34 pm |
| quote:
Originally posted by salv236
sales.microsoft.com forms part of the same tree structure of microsoft.com i would have thought that it would replicate to sales as they are in the same tree and not with disjointed namespaces.
correct me if i am wrong.
Every forest hast at least 3 replication topologies:
1. Domain specific data is one replication topology.
2. Forest wide data is another one (schema and configuration naming contexts) It replicates among all DCs in the enterprise.
3. The Global Catalog. The KCC creates a replication topology that global catalog servers use to replicate the GC as well. | |
| aznluvsmc 2004-04-19, 9:53 pm |
| A contiguous name space is used to show a relationship between a parent domain and its sub-domains. Notice that there is more than one domain when a name space is contiguous.
A contiguous name space forms a domain tree where there are domains under other domains. It's the same as a directory tree. Just because a file exists in the parent directory doesn't mean it also exists in the sub-directories below it.
It doesn't really make any sense to have a user object exist in a domain and all sub-domains below it the same way it doesn't make sense for a file to exist in a directory and all sub-directories below it.
Hope that clears things up. | |
| salv236 2004-04-20, 7:06 am |
| from what i know directory service objects are stored in ntds.dit. Informaton that domains replicate are schema and configuration tables, sysvol area as well as domain policies.
if you have several domains in the same tree user account are replicated to other domains (child) that make part of that tree which allows for authentication to those other child domains.
I found that out in my microsoft press book 70-215 chapter 7 lesson 2. I presume that the replication of user accounts to child domains has no adverse effect on the root domain as it already resides on its ntds.dit database file. | |
| curiousgeorge 2004-04-20, 12:24 pm |
| Your book is referring to replication among global catalog servers. GC's have the full set of information about objects from the local domain and a subset of information about objects in all other domains in the forrest. When you log on, you authenticate using the closest GC.
Hope that helps. | |
| salv236 2004-04-20, 2:25 pm |
| quote:
Originally posted by curiousgeorge
Your book is referring to replication among global catalog servers. GC's have the full set of information about objects from the local domain and a subset of information about objects in all other domains in the forrest. When you log on, you authenticate using the closest GC.
Hope that helps.
ok thank i think i have understood it and if i am not mistaken the GC also contains partial replicas of the ADS schema configuration objects such as trusts and info on the KCC. |
|
|
|