x64 Domain Controllers

re: x64 Domain Controllers

Jef Kazimer — Thu, 14 Sep 2006 05:48:24 GMT

By chance, does the 1gb per process limit exist in the 64bit version of the os?

We were discussing the max event log size today and I was curious if it still is an issue in 64bit os versions.

more info here: http://jeftek.spaces.live.com/blog/cns!F2042DC08607EF2!699.entry

Thanks,

Jef

re: x64 Domain Controllers

AC — Thu, 14 Sep 2006 22:22:03 GMT

Brian,

Nice info. Thanks for sharing.

Can't you still provide the 5000-10K user answer by dividing the # of user / computer accounts or the # of authenticated operations over some unit of time by the # of available DC's?

MSFT authenticates X # of security principals or Y # of authentications with 14 servers

If you look only at user account authentication then that's 3500 users per DC.

If you look @ user and computer account authentication then the ratio is more like 15K user / computer accounts per server where user to computer account ratio is 1:3.2.

I would assume that the majority of desktop computers run 24x7 except for reboots from power outages and security fixes, with laptops generating more volume as reattach each day or wake from hibernate between meetings (the unlocking of a workstation generates a logon authentication)

Very few companies will have 3.2 computer accounts per user.

Focusing on authentcations per hour (especially at peak times), day or week will likely give a better result.

re: x64 Domain Controllers

bpuhl — Fri, 15 Sep 2006 11:16:38 GMT

Hi AC, thanks for reading my blog and posting the comments!

There are numerous reasons why a "5000 - 10000" type answer isn't valid, but the by far the largest one is that it depends on how other things in the domain are configured.

For example, we have IPSec deployed in all our forests for domain isolation. Does this change the load profile on the DC's? ABSOLUTELY!

In fact, I'll even admit here, that our IPSec deployment actually caused some serious auth issues in the domain because we exceeded our capacity. The only solution was to upgrade and add servers (we did both).

So one day, we're cruising along with ~15 x86 "old" DC's...and the next day, we've got 20 DC's, half of which are x64. Numbers of users, computers, even interactive logons, all stayed the same - but our Kerberos authentication's tripled due to the IPSec negotiations.

Every environment is different. How you configure your servers is different. What kind of load you have on your servers will be different, so no, I can't really provide a generic answer for you...

"So Brian - If everything is 'different' like you say, then why give any advice at all?"

Because somebody, somewhere, is sitting at their desk, in front of a blank whiteboard, with the most unusual IT problem of all - They've actually GOT budget, but have ABSOLUTELY NO IDEA WHATSOEVER what to spend it on... My numbers will at least help you determine if you need 2, 10, 20, 100 or 200 DC's...

well...at least that's what I hope.

~Brian

Can you have a mix of 32 and 64 bit domain controllers?

Brad Rutkowski's Blog — Thu, 08 Feb 2007 20:43:45 GMT

I see this questions come up quite a bit about the interoperability of x86 and x64 domain controllers.

re: x64 Domain Controllers

Max — Fri, 10 Aug 2007 19:59:50 GMT

Hello,

I am in search of guidelines for my staff on how to load the entire Active data base in RAM. We are dealing with 1.5 Million users and need the faster speed of authentications. Also for wireless devices.

Any asisstance is greatly appreciated.

re: x64 Domain Controllers

Rhea — Tue, 11 Dec 2007 10:21:41 GMT

[...]OH COOL! :) thanks! :), i like the offer, but if u want to see the new projection screen in affordable price then here is the link:

http://www.electronicwhiteboardswarehouse.com/

[ ..]

64bit Domain Controllers and Event Log Max Sizing « Jeftek’s Weblog

64bit Domain Controllers and Event Log Max Sizing « Jeftek’s Weblog — Thu, 31 Jan 2008 11:56:13 GMT

PingBack from http://jeftek.wordpress.com/2006/09/13/64bit-domain-controllers-and-event-log-max-sizing/

re: x64 Domain Controllers

zxevil135 — Sat, 01 Mar 2008 02:00:34 GMT

Udai5g r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil136 — Sun, 02 Mar 2008 00:31:19 GMT

PYO3G0 r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil134 — Fri, 07 Mar 2008 02:07:56 GMT

TOxHuW r u crazzy? I told u! I can't read, man!

re: x64 Domain Controllers

zxevil141 — Fri, 07 Mar 2008 05:12:15 GMT

CtEZd0 r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil150 — Fri, 07 Mar 2008 22:57:18 GMT

MgY4lY r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil151 — Sat, 08 Mar 2008 01:56:35 GMT

EFn4x7 r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil152 — Sat, 08 Mar 2008 05:15:40 GMT

ruz4u0 r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil153 — Sat, 08 Mar 2008 08:20:29 GMT

H9fViN r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil154 — Sat, 08 Mar 2008 10:52:27 GMT

SKkrc0 r u crazzy? I told u! I can't read!

re: x64 Domain Controllers

zxevil155 — Sat, 08 Mar 2008 13:23:07 GMT

KQFnNQ r u crazzy? I told u! I can't read!