What is a domain controller
A domain controller provides centralized management of network devices, that is, domains. The controller stores all the information from the accounts and parameters of network users. These are security settings, local policies, and many others. This is a kind of server that completely controls a particular network or network group. A domain controller is, in a way, a set of special software that runs various Active Directory services. The controllers run certain operating systems, such as Windows server 2003. The Active Drive Installation Wizard allows you to create domain controllers.
The Windows NT operating system, as the primary server, uses the primary domain controller. Other servers used are used as backup controllers. The main PDC controllers can solve various tasks related to user group memberships, creating and changing passwords, adding users, and many others. Then the data is transferred to additional BDC controllers.
Samba 4 software can be used as a domain controller if the Unix operating system is installed. This software also supports other operating systems, such as windows 2003, 2008, 2003 R2 and 2008 R2. Each of the operating systems, if necessary, can be expanded depending on specific requirements and parameters.
Using domain controllers
Domain controllers are used by many organizations in which computers are located that are connected to each other and to the network. The controllers store directory data and control the entry and exit of users into the system, as well as control the interaction between them.
Organizations using a domain controller need to decide how many will be used, plan data archiving, physical security, server updates, and other necessary tasks.
If the company or organization is small and it uses only one domain network, then it is enough to use two controllers that can provide high stability, fault tolerance and a high level of network availability. In networks that are divided into a certain number of sites, one controller is installed on each of them, which allows to achieve the necessary performance and reliability. Thanks to the use of controllers on each site, it is possible to significantly simplify user login and make it faster.
Network traffic can be optimized, to do this, you need to set the time for replication updates when the network load is minimal. Configuring replication will significantly simplify the work and make it more productive.
You can achieve maximum performance in the controller if the domain is a global catalog, which will allow you to query any objects for a specific weight. It is important to remember that including a global catalog entails a significant increase in replication traffic.
It is better not to enable the host domain controller if you are using more than one domain controller. When using a domain controller, it is very important to take care of security, because it becomes sufficiently accessible for attackers who want to take control of the data necessary for fraud.
Features of installing additional domain controllers
In order to achieve higher reliability in the operation of the necessary network services, the installation of additional domain controllers is necessary. As a result, it is possible to achieve significantly higher stability, reliability and safety in operation. The network speed in this case will be significantly higher, which is a very important parameter for organizations that use a domain controller.
In order for the domain controller to work correctly, some preparatory work is necessary. The first thing to do is check the TCP / IP settings, they must be correctly installed for the server. The most important thing is to check DNS names for mappings.
For safe operation of a domain controller, you must use the NTFS file system, which provides higher security compared to FAT 32 file systems. To install on a server, you need to create one partition in the NTFS file system on which the system volume will be located. Access to the DNS server from the server is also required. DNS is installed on this or an additional server, which must support resource records.
In order to correctly configure a domain controller, you can use the Setup Wizard, with which you can add the execution of certain roles. To do this, you will need to go to the administration section through the control panel. You must specify a domain controller as the server role.