One DC or two DCs for an SMB office?
Two is almost always the right answer; one DC is a single point of failure for logon, DNS and GPOs.
Try this first
- 1Two DCs, ideally separate hosts or sites
- 2Both run DNS, verify replication
- 3Split or consciously keep FSMO roles together
- 4System-state backup on both
When to bring us in
Growing to multiple offices: configure AD Sites and Services properly for replication traffic.
See also
- Should I split FSMO roles across two DCs?For a small domain all on one DC is fine; with two DCs splitting is tidier but not required.
- How do I know my AD replication is healthy?Replication errors creep in silently; they only surface when logins or GPOs misbehave.
- Logins are slow at the second office.Subnets are often missing in Sites and Services so clients hit a DC over the WAN.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.