Backup Domain Controller over a RAS Link

A Backup Domain Controller (BDC) can be connected to a remote domain using Windows NT Server's Remote Access Service (RAS) and a modem connection.

Using a RAS-connected BDC as a PDC

If the RAS-connected BDC is ever expected to be promoted to Primary Domain Controller (PDC) while it is remotely connected to the domain, this BDC should be set up as a dial-out-only RAS client (RAS is not running on this computer). If you promote the RAS-connected client, NetLogon stops, changes roles, and restarts. RAS is dependent on NetLogon, so when NetLogon stops, you would lose your connection. By having just the RAS client dial-out services on this remote BDC, it can function as a PDC because that functionality does not depend on NetLogon running constantly. If neither the RAS server (which could also be a BDC) nor the RAS-connected BDC are expected to ever serve as PDC, this is not an issue. A RAS-connected BDC that has been promoted to PDC functions as it should, but possibly with slower response time, depending on line speed.

Partial Synchronization with a RAS-connected BDC

If a remote site has a RAS-connected BDC that dials in nightly to do a partial synchronization of any changes, and on some days 2000 changes are made to the SAM/LSA database, then the default ChangeLogSize should be increased. This may be necessary if any BDC has been off-line while a lot of changes have occurred, or else this BDC may be forced to do a full synchronization of the database. If minimal changes (for example, fewer than 2000) occur during the time the RAS BDC or any BDC does not have a physical connection to the PDC, then the default size is sufficient. If an administrator begins to notice any BDCs doing full synchronizations, it could be that many changes are occurring and the ChangeLogSize needs to be increased. The default ChangeLogSize is 64K which is approximately 2000 changes.