Active Directory Branch Office Replication

An Active Directory branch office replication diagram explains where directory services run and how they reach a remote site. It distinguishes writable domain controllers at headquarters from a read-only domain controller at the branch, then shows the site link between them. This is useful when planning local sign-in performance, outage behavior, or administrative access at a smaller office. Include the local DNS role because clients commonly use the domain controller for name resolution as well as authentication. Add the client networks on each side so the reason for each controller is visible. For a larger branch, extend the view with redundant WAN paths, writable controllers, or local application services as needed.

Tipo Diagrama de redeNorma Cisco-convention topology iconsMecanismo schematex-networkAtualizado 24/09/2026

A solicitação

“An Active Directory branch office replication diagram with two headquarters domain controllers that replicate, a VPN site link to a branch gateway, a branch read-only domain controller with DNS, and user networks at both locations.”

Depois, tenteAdd a writable domain controller at the branch.Add a second VPN gateway for branch failover.

O que há neste desenho

Entenda as decisões por trás dele.

01Two HQ controllers

Headquarters retains redundant writable directory services.

02RODC at branch

The branch can authenticate locally while limiting stored credentials.

03VPN site link

Replication and administrative traffic have an explicit path.

Use this when a branch needs local authentication and controlled replication back to a central domain.

Ver todos os modelos de diagrama de rede →

Perguntas frequentes

Dúvidas comuns

What is an RODC?

A read-only domain controller holds a read-only copy of Active Directory and is often used where physical or administrative security is limited.

How does branch replication work?

The branch controller receives replicated directory data from writable domain controllers through a configured site link.

Why show the VPN path?

It identifies the connection that carries replication and remote administration between the locations.