
Configure and monitor Active Directory Domain Services replication across single and multiple sites and domain controllers for optimal authentication traffic and a highly available directory service.
Explore why replication matters to the global catalog, how the configuration partition replicates to all global catalog servers, and how the multiple master model propagates changes across domain controllers.
Describe how Active Directory partitions—configuration, schema, domain, and application—organize data, drive replication to domain controllers across the forest, and define object and attribute rules.
Examine characteristics of AD DS replication, including multiple-master replication, store-and-forward, data store partitioning, and attribute-level replication, and understand how domain controllers manage changes, conflicts, and replication topology.
Explore how ad ds replication within a site uses connection objects, knowledge consistency checker, notification and polling mechanisms to maintain a fast, two-way topology among domain controllers.
Explore how Active Directory resolves replication conflicts in a multi-master model, covering conflicts—same attribute edits, simultaneous object changes, and duplicate relative distinguished names—using stamps, timestamps, and GUIDs to determine resolution.
Describe how replication topology is generated across AD forest partitions—schema, configuration, domain, and application partitions—using forest-wide, site topology information, fault-tolerant replication and global catalog processes.
Learn how sysvol replication synchronizes logon scripts and group policy templates across domain controllers using dfs replication, replacing the older FRS with differential compression and scheduled bandwidth control.
Configure Active Directory domain services sites to optimize replication and bandwidth, localize authentication for branch offices, and manage site topology with the site topology generator and SRV records.
Active Directory sites represent physical locations connected by network links and map subnets to sites, enabling replication control, service localization, and site-based group policy deployment.
Explore why adding active directory sites improves authentication and replication by aligning domain controllers with slow links, user density, and localized services to reduce latency.
Explore how replication differs within and between sites, comparing reliable, uncompressed intra-site traffic with compressed inter-site traffic to optimize bandwidth, schedules, and urgent change notifications.
The ISTG creates the site replication topology using the knowledge consistency checker, designates a bridgehead server per site, and automatically generates connection objects for intersite replication.
Register SRV records in DNS to publish domain controller services like LDAP and Kerberos, mapping service names to host names with TCP or UDP transport.
Learn how Windows clients locate the nearest domain controller via site-specific DNS, query domain controllers, authenticate with the first domain controller that responds, and switch sites as needed.
Move domain controllers between sites using the Active Directory sites and services tool. Create sites without domain controllers and enable automatic site coverage with subnets, adjusting settings via group policy.
Explore configuring and monitoring AD DS replication, including site links, site link by region, and universal group membership, with replication scheduling as short as 15 minutes, plus monitoring tools.
Explain how Active Directory site links connect sites for replication using the knowledge consistency checker and ISTG, with default IP site links and configuring your site topology.
Explore how site links enable replication between domain controllers across sites, and how to configure site link bridging to create transitive paths when needed, including cost considerations.
Enable universal group membership caching to sign in users without contacting a global catalog. Refresh occurs every eight hours and a global catalog on every domain controller improves remote-site sign-ins.
Implement Active Directory Domain Services sites and replication for London headquarters and Toronto, deploying a Toronto domain controller, renaming the default site, configuring subnets, and monitoring replication with Repadmin.
########Mod04Ex4.ps1#########
#Displays "Starting"
Write-Host "Starting" -ForegroundColor DarkGreen
#Remove all Site Links
Get-ADReplicationSiteLink -Filter *| Remove-ADReplicationSiteLink -Confirm:$false
Start-Sleep -Seconds 2
#Remove all subnets
Get-ADReplicationSubnet -Filter * | Remove-ADReplicationSubnet -Confirm:$false
Start-Sleep -Seconds 2
#Mess up DNS on TOR-DC1
Clear-DnsClientCache
Get-DnsClient | Set-DnsClientServerAddress -ServerAddresses ("10.0.0.1")
#show Date/Time to compare against last successful replication later
get-date
#displays "Finished"
Write-Host "Finished" -ForegroundColor DarkGreen
########Mod04Ex4Fix.ps1#########
#Displays "Starting"
Write-Host "Starting" -ForegroundColor DarkGreen
#Fixes DNS
Clear-DnsClientCache
Get-DnsClient | Set-DnsClientServerAddress -ServerAddresses ("172.16.0.10")
#recreate Site links for LON-TOR and TOR-TEST
$schedule = New-Object -TypeName System.DirectoryServices.ActiveDirectory.ActiveDirectorySchedule;$schedule.ResetSchedule();$schedule.SetDailySchedule("Twelve","Zero","Sixteen","Zero");New-ADReplicationSiteLink "LON-TOR" -SitesIncluded LondonHQ,Toronto -Cost 60 -ReplicationSchedule $schedule
$schedule = New-Object -TypeName System.DirectoryServices.ActiveDirectory.ActiveDirectorySchedule;$schedule.ResetSchedule();$schedule.SetDailySchedule("Nine","Zero","Fifteen","Zero");New-ADReplicationSiteLink "TOR-TEST" -SitesIncluded Toronto,Test -Cost 60 -ReplicationSchedule $schedule
#Note Days of Week not set. Would need to build array. Reset manually in Active Directory Sites and Services.
#Recreate Subnets
New-ADReplicationSubnet -Name "172.16.0.0/24" -Site LondonHQ -Location "London,UK"
New-ADReplicationSubnet -Name "172.16.1.0/24" -Site Toronto -Location "Toronto,Canada"
New-ADReplicationSubnet -Name "172.16.100.0/24" -Site Test -Location "Test,Site"
#displays "Finished"
Write-Host "Finished" -ForegroundColor DarkGreen
Configure active directory sites across multiple regions to optimize domain controller workload distribution and network performance, creating UK West, West Europe, and Central India sites with 15 minute replication.
Configure Active Directory sites and subnets for a multi-region environment by managing site links, replication frequency, and subnet assignment via GUI and PowerShell, and move domain controllers accordingly.
When a branch office logs on slowly or a change takes an hour to reach another site, the cause is usually sites and replication. This course explains how Active Directory replicates inside a site and between sites, how sites are built, and how to configure them in a lab.
What the lectures cover
Besides the main topics, you also work through: Complete a lab with its solution, then study an Azure-based example of sites and subnets for a multi-region environment.
Inside the course
The course is organised into these sections: Overview of AD DS replication; Configuring AD DS sites; Configuring and monitoring AD DS replication; Lab; An Azure-Based Lab Sites Configuration Example. Lectures you will find include: What are AD DS partitions?; Characteristics of AD DS replication; How AD DS replication works within a site; Resolving replication conflicts; How replication topology is generated; How SYSVOL replication works; Configuring AD DS sites Section Overview; What are AD DS sites?; Why implement additional sites?; Demonstration: Configuring AD DS sites; How replication works between sites; What is the ISTG?; Overview of SRV records; How client computers locate domain controllers within sites; Moving domain controllers between sites; Configuring and monitoring AD DS replication Section Overview; What are AD DS site links?; What is site link bridging?; What is universal group membership caching?; Lab: Implementing AD DS Sites and Replication; Lab Solution: Implementing AD DS Sites and Replication; AD Site Configuration and Domain Controller Assignment; Configuring AD Sites and Subnets for Multi Region Environment.
The course runs about 2.2 hours in 25 lectures and includes a practice test of 20 questions. It is a focused course on sites and replication, not a complete Active Directory course. Some lectures are theory, supported by demonstrations and a lab.