Home / server / Questions / 23016
Accepted
Saif Khan
Asked: 2009-06-10 15:29:49 +0800 CST

Small Business Server as ReadOnly Domain Controller

  • 772

Can I run small business server as a RODC? My site design is hub and spoke. I want to place a domain controller at the small offices. I am tight on budget so my offices will have one server which should function as domain controller and file server. Can I accomplish this with small business server?

windows domain-controller small-business

6 Answers

  1. Best Answer

    I'll add to that: if you're in a position where you need a RODC, you've outgrown the position where you need SBS.

    • 4

  2. You can put read-only domain controllers into branch offices as addt'l DC's in a domain with an SBS server, but the SBS server computer itself cannot run as an RDOC.

    (You do realize that you can have one SBS server computer in an Active Directory forest-- right? You're not thinking of running each branch office as a separate Active Directory forest, are you? Ugh... That would be painful to administer.)

    • 3

  3. The short answer is: no. SBS isn't what you want for this role. I'm not positive about SBS 2008, but SBS 2003 will shut down every hour if it is not the domain controller holding all FSMO roles for the domain.

    Simply put, it's not designed to scale past the builtin limits. You get what you pay for!

    • 2

  4. If you have offices, you will need at least Windows Server Standard.

    SBS is a standalone server (the new premium version does give you a second server) it can not be joined to domain, it has to be the root and only domain in the forest.

    • 1

  5. You need to buy SBS Premium for your RODC's but you can do it.

    At least according to this MS FAQ (Search the page for Domain Controller): http://technet.microsoft.com/en-us/sbs/cc817589.aspx

    • 0

  6. Trying to clarify and condense what others have said:

    • SBS MUST be the FSMO master domain controller, therefore it CANNOT be an RODC.
    • You CAN have additional DCs and servers on the network - this is not a problem.
    • SBS is limited to 75 Clients.
    • You cannot have trusts with other domains.
    • Because SBS MUST be the FSMO master DC, you can only have SBS server per domain. So in your network, you CAN use SBS (assuming you have fewer than 75 clients) and separate Server 2008 Standard servers per location, even RODCs.

    (Sorry for the late post, but I assume it's permissible - especially since I found a link to the question off another question).

    • 0