To: keithsha who wrote (12051 ) 11/5/1998 12:04:00 AM From: ToySoldier Respond to of 74651
Just one clear case study example of why Active Directory WILL NOT WORK for medium to large scale organizations. I know Keithsha that you will just close your eyes and change the topic, but the rest will get an understanding of the severe limitations that Active Directory will encounter...Case Study: Building an Enterprise ACME Corporation requires an enterprise directory service. ACME Corporation is a medium-sized customer, with 5000 users and workstations worldwide. Three thousand users are located in the company's home office, while the remaining 2000 users are spread evenly across 100 remote offices. Each remote office is connected to the home office by a 56kbps WAN link. There are 100 servers located at quarters, and 1 server at each of the 100 remote offices (200 servers total). What are the implications of deploying a single, large Active Directory domain? How would NDS solve this problem? Active Directory Design: Create a single domain that includes all 5000 users. To ensure that users in the remote offices may login when the WAN is unavailable, replicate this domain to all servers in each of the 100 remote offices. Not every server in the home office requires a copy of the domain, so place the domain on 10 servers in the home office. (see figure) Implications of this design: Domain database size - Five thousand users and five thousand workstations will easily create a domain database in excess of 100 megabytes. This domain database is replicated to every domain controller. Every domain controller must have sufficient disk space and backup capacity to handle the large domain requirements. And, since the domain database will continue to grow with day-to-day management, ensure that there is sufficient disk resources to handle future domain database growth. Installation-When Active Directory is installed on the server in the remote office, the entire 100 megabyte database must be copied across the slow, 56kbps WAN link. On average, a 56kbps WAN link can transfer approximately 6.5 kilobytes per second, or 390 kilobytes per minute. Transferring the 100 megabyte domain database will take at least 4.3 hours , assuming that 100% of the link is available for the NT5 server install. Domain replication-For simplicity sake, assume that a simple password change generates 10 kilobytes of domain replication traffic. Since the entire domain is replicated onto 110 servers, every password change must be sent to all 110 servers, resulting in 1.1 megabytes of network traffic per password change . If just 2% of users change their password on any given day (100 users a day), this will generate approximately 110 megabytes of domain replication traffic. NDS DESIGN Create a single NDS tree with organizational units that represent the home office and each of the remote offices. To ensure that users in the remote offices may login when the WAN is unavailable, designate each remote office organizational unit as a NDS partition. Place NDS replicas of the 100 remote offices on two NDS servers in the home office. NDS database size-Each remote office only contains the objects required by the remote office - the twenty users and their workstations. With this efficient design, the NDS database is less than 800 kilobytes in size. Installation-Each remote office directory server only holds the objects required by that remote office. During installation, only 800 kilobytes of data is copied across the WAN link, which takes less than three minutes over a 56kbps WAN link. Directory replication-For simplicity sake, assume that a simple password change generates 10 kilobytes of directory replication traffic. Since there are only three replicas (or copies) of every partition, this change is only sent to three servers. Therefore, changing a password will create as little as (10 kilobytes x 3 server replicas) 30 kilobytes of network traffic. If just 2% of users change their password on any given day (100 users a day), this will generate approximately 3 megabytes of NDS replication traffic. I know Keithsha is banned by MSFT policy from reading competitor whitepapers, but the rest of you might want to read the following web site to get an understanding why Active Directory will not be successful compared to NDS until it bites the bullet and drops the Domains underpinnings...novell.com As for your bragging about Active Directory and the use of DNS. Well read this site to understand in more detail why MSFT' DNS reliance will fail on them and compare it to NDS's current solution that is succussful NOW!novell.com Keithsha, read and study these pages in detail - then tell us all which directory service will be successful. LOL Toy