Results 1 to 2 of 2

Thread: Domain Replication Via VPN

  1. #1
    Join Date
    Feb 2012

    Domain Replication Via VPN

    Hi Everyone,

    I have a little (well quite a big) head banging problem.

    Basically I have three servers (Windows Server 2008 R2) at three diffrent physical locations around town. I have created a domain on server-001 and also created the OU's and users that I need. I now need to replicate this to the two other servers.

    I had this before, done via LogMeIn Hamachi. The servers were able to talk to each other using the VPN that was created. All was working fine until I came to join workstations to the domain. Because the DNS had each server as the VPN address, the workstations couldn't find the domain controller. For example, server-001 and server-002 were "talking" to each other fine, replicating changes within Active Directory as the DNS had Server-001 and Server-002 as the 5.x.x.x IP address. As the workstations didnt have Hamachi installed, when it contacted the DNS, it didn't understand the 5.x.x.x IP address and failed.

    So basically, my question is how can I setup the DNS so that the servers can "talk" to each other to replicate, yet still have an internal address for when clients are trying to join the domain?

    So if Server-001 and Server-002 replicate, they contact each other on the 5.x.x.x IP address, but if the workstations "talk" to the server, they can find the 192.168.x.x address?

    I have read some posts about multi-homing a domain controller is a very bad idea, but I have no other way around other that using Hamachi VPN. Unless I can create a VPN using RRAS with dynamic IP addressing from the ISP and with only 1 NIC in each server.

    Any help is much appreciated.

    Thank you,

  2. #2
    Join Date
    Dec 2007

    Re: Domain Replication Via VPN

    You can try to create two different site in AD sites and services and configure the replication schedule as per requirement. You may also have to map the required subnet to appropiate site for proper user authentication. Also ensure that all server are configured as GC. Also refer to this links here - and

Similar Threads

  1. NTDS Replication: How to remove a replication partner?
    By haritable in forum Small Business Server
    Replies: 3
    Last Post: 10-05-2012, 09:50 PM
  2. Domain replication problem
    By irolfi in forum Active Directory
    Replies: 2
    Last Post: 08-12-2011, 02:25 AM
  3. domain controller replication
    By mit303 in forum Operating Systems
    Replies: 1
    Last Post: 21-04-2011, 11:33 AM
  4. Replies: 1
    Last Post: 16-09-2009, 10:11 AM
  5. Domain Replication Problems
    By Manik in forum Active Directory
    Replies: 7
    Last Post: 25-04-2008, 03:51 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts