Why is network segmentation so important to an Active Directory environment?

Answer 1

To limit broadcast domains. Active Directory servers generate a lot of broadcast traffic.

Answer 2

You should segment your network to make it more manageble to you as the administrator. It is recommended by Microsoft, but Active directory doesn't care if your network is segmented.

The main reason you would segment is fault tolerance and efficiency. If a switch goes out on one segment the rest of your network keeps running. You can maximize bandwith by limiting unnessary traffic across the whole domain. You can assign Group policies and keep your policies organized.

...etc...

It all comes down to organization. If you are planning a network, you can prevent future headaches if you do it right from the start. And that starts with intellegent segmenting.

Answer 3

Go through this below link you will exact answer about your doubt..!

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerWhitepapers/C48C97E8-1C7B-4584-BC0D-59017DEEBE8A.mspx


This white paper describes best practices for deploying domain controllers in segmented networks in a manner that supports client authentication, secure resource access by clients, and replication traffic between domain controllers on opposite sides of a firewall, including procedures and recommended practices for managing IPSec policies...!

Answer 4

DHCP and DNS need to be configured properly for a subnetted network, or else the different segments wont be able to communicate with each other (DNS and DHCP requests can't cross over a router usually). DNS and DHCP are used in an AD-integrated environment.