Dear All, we have planned to design a disaster recovery site in another city at our office. i will install the site and connect it to main office via layer-3 VPN. i want to deploy an additional domain controller at site that will be connected to my office main Domain Controller over VPN. Can i give a different subnet mask to my site office additional DC domain controller??? like i am having 255.255.25x.0 on main domain controller and i want 255.255.25y.0 on addition DC. is it possible to connect with different Subnets?? and will the replication takes place easily?

Hello, you can use another subnet without any problems, just make sure that connectivity is given between the sites and no ports are blocked on the firewalls: http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx AD sites and services must be configured also: http://technet.microsoft.com/en-us/library/cc730868.aspxBest regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

In addition to Meinolf, you check this book and Planning Active Directory Forest Recovery also watch this webcast. Thanks

Different subnets are theoretically possible. However, I don't have enough information to say that it will work for sure. If the network is setup correctly, the DCs won't have a problem with different subnets. Two things to watch: 1) Have someone really good with subnetting look at your exact subnet masks and IPs. I assume that since the servers are physically far apart, you have the servers on separate subnets, in which case different subnet masks would be common. 2) Consider setting up sites to prevent your local clients from authenticating against your disaster recovery site and vice versa. C Shane Cribbs http://www.georgiatechnologies.com