99%(143)142 out of 143 people found this document helpful
This preview shows page 7 - 10 out of 16 pages.
GAI will require policies and documentation for identifying what administrators will be authorized to create DHCP scopes. Further all DHCP servers will be separate from each site’s domain controller and host both IPv4/IPv6 address scopes for client computers. The IPv6 scopeswill only be staged for future implementation as IPv6 becomes more widely used and integrated with Microsoft technologies. Domain admins within each domain will be the only authorized members authorize the server, as recommended by Microsoft (Microsoft, n.d.).DHCP Scope DesignPresently, fault tolerance is not anticipated to be used given the rather small size of the organization. However, a plan will be set for the future growth of each site to implement fault tolerance using the 80/20 rule and configuring these exclusions using Microsoft’s split-scope configuration wizard.
WINDOWS NETWORK PROPOSAL FOR GLOBAL ADVERTISING, INC.7GAI will utilize static IP addresses for all domain controllers, DHCP, and DNS servers. Reservations will be used as needed for all other servers, for example the companies Webserver. The organizations printers will also utilize reservations to ensure printers always get the same IP. IPv6 and IPAMGAI and MGG will utilize one of Microsoft’s newer technologies, IPAM, for managing the organizations address space. The idea behind using this software now is detailed reports and usage information is readily available for administrators to provide to management when the need arises. DNSSecurityGAI and MGG require a form of security to protect the company and its information from attack. Since the company has certificate services running two forms of security will be recommended. The first being that DNSSec be used so clients can be assured the information provided is accurate. The second is that zone transfers will utilize IPSec to ensure the transfer of zone information is protected from man in the middle attacks. Group policy configurations will be set up to ensure zone transfers only utilize secure IPsec to conduct a zone transfer, setup following Microsoft’s recommended practices (Microsoft, n.d.).ZonesForward lookup zones for each company will be authorized to hold a copy of the other’s zone information. In other words, GAI will have secondary zone data for MGG and vice versa. This will be configured because it is the assumption the WAN link is robust and can support a complete zone transfer. If later this is found to be an issue, stub zones can be utilized instead.
WINDOWS NETWORK PROPOSAL FOR GLOBAL ADVERTISING, INC.8High AvailabilityHyper-V is an imperative component to consider for giving an enterprise the ease and confidence of accessibility to clients. Hyper-V is Microsoft's virtual machine manager, and it canbe a powerful response for making a server foundation that is exceptionally tough. Hyper-V works by utilizing a main central server to make virtual machines or servers for any application