Active Directory Branch Office Replication

An Active Directory branch office replication diagram explains where directory services run and how they reach a remote site. It distinguishes writable domain controllers at headquarters from a read-only domain controller at the branch, then shows the site link between them. This is useful when planning local sign-in performance, outage behavior, or administrative access at a smaller office. Include the local DNS role because clients commonly use the domain controller for name resolution as well as authentication. Add the client networks on each side so the reason for each controller is visible. For a larger branch, extend the view with redundant WAN paths, writable controllers, or local application services as needed.

Type Diagramme de réseauNorme Cisco-convention topology iconsMoteur schematex-networkMis à jour 24/09/2026

La demande

“An Active Directory branch office replication diagram with two headquarters domain controllers that replicate, a VPN site link to a branch gateway, a branch read-only domain controller with DNS, and user networks at both locations.”

Essayez ensuiteAdd a writable domain controller at the branch.Add a second VPN gateway for branch failover.

Ce que contient ce dessin

Comprenez les décisions qui le sous-tendent.

01Two HQ controllers

Headquarters retains redundant writable directory services.

02RODC at branch

The branch can authenticate locally while limiting stored credentials.

03VPN site link

Replication and administrative traffic have an explicit path.

Use this when a branch needs local authentication and controlled replication back to a central domain.

Voir tous les modèles de diagramme de réseau →

FAQ

Questions fréquentes

What is an RODC?

A read-only domain controller holds a read-only copy of Active Directory and is often used where physical or administrative security is limited.

How does branch replication work?

The branch controller receives replicated directory data from writable domain controllers through a configured site link.

Why show the VPN path?

It identifies the connection that carries replication and remote administration between the locations.