what windows server should I choose for Active directory?

Alex Sage

@Alan Don't forget CAL's.. Do you have more users and computers?

stacksofplates

@aaronstuder said in what windows server should I choose for Active directory?:

@gjacobse said in what windows server should I choose for Active directory?:

While Server 2008 is still in use, there is no reason to go back that far in history for AD.

You need to be looking at 2012 or 16.

Also, if you can - set up HyperV for your AD -

Why would you even consider 2012?

Core based licensing for 2016.

Alan

@aaronstuder I might soon! But isn't something u can buy more licences later when u need it?

gjacobse

@Alan said in what windows server should I choose for Active directory?:

@aaronstuder I might soon! But isn't something u can buy more licences later when u need it?

Yes - you can. But you don't want to have conflicts right out of the 'box'.

Dashrender

how is the 100-120 users being managed now? It seems odd that a company would grow that large and not have a management solution of some type in place?

Dashrender

Please provide as much information about the environment as you can.

Like:
What OS are the PCs running?
What if any servers are running?
What kind of data is there? and how much and where is it stored?
What is being used for email?
What online services are being used today?
What type if internet connection do they have?

Alan

@Dashrender no management solution in place! the company was small and start to grow fast and about to grow even more soon!

Obsolesce

Well, without knowing anything at all about your environment...

-I'd go with Hyper-V Server 2016 for your HOST. This is free.
-Buy a Windows Server 2016 Standard license. This will allow you to create two virtual machines on your HOST.
-VM1 = Domain Controller, DNS, etc
-VM2 = File Server, Applications
-Buy enough user CALs to cover everyone as others have mentioned.

There's no reason to go with 2012 R2 anymore. 2008 R2 shouldn't even be a thought.

Alan

@Dashrender
-most of the Pcs are running windows 7 pro, we have few windows 10 pro and Macs.

the company use hosted base server like Rackspace for emails and box.com...etc
the only server we have in place is the one that been used for RF guns.
-data stored using online service like box.com.
-internet connection is provided by AT&T.
the network infrastructure is very good. The have a good network!

Dashrender

So I ask, do you really need AD? You've gotten along without this long.

How about looking at another solution like MDM but for Windows. MSP like packages can provide monitoring/AV/updates to the endpoints without the use of AD. They can run from VPS (Virtual Private Server) from any of a number of hosts, including Rackspace as you already use. Another option would be Vultr.

I'm not saying this is the solution for you, but it's one that shouldn't be dismissed.

Alan

the main location is a big warehouse in TX and we get contracts from sprint. most of the data are related to inventory and all the project related data like configuration files, close out sheets and pictures...etc our headquarter is in California and we have remote locations as well

Dashrender

@Alan said in what windows server should I choose for Active directory?:

the only server we have in place is the one that been used for RF guns.

Are these like the ones they use in retail to scan products? What does the software tie into? something online?

Dashrender

@Alan said in what windows server should I choose for Active directory?:

@Dashrender
-most of the Pcs are running windows 7 pro, we have few windows 10 pro

Please remind the client that Windows 7 only has 3 more years of support left. Jan 2020 is when MS stops making security updates. Definitely not to early to start looking at the requirements to get away from Windows 7.

Obsolesce

@Dashrender said in what windows server should I choose for Active directory?:

@Alan said in what windows server should I choose for Active directory?:

@Dashrender
-most of the Pcs are running windows 7 pro, we have few windows 10 pro

Please remind the client that Windows 7 only has 3 more years of support left. Jan 2020 is when MS stops making security updates. Definitely not to early to start looking at the requirements to get away from Windows 7.

Wish I could upvote this more. 3 years doesn't mean wait 3 years then look to move. Start now.

Alan

@Dashrender You r right, I might not need AD, I'm looking for a solution the will provide some type of management like a single sign-in and user authentication ...etc the company is growing and it should something in place to centralise and manage all the devices/users in the company

Alan

@Dashrender Upgrading to windows 10 won't be a problem. I haven't thought about it this way but it definitely something to be considered.

Dashrender

@Alan said in what windows server should I choose for Active directory?:

@Dashrender You r right, I might not need AD, I'm looking for a solution the will provide some type of management like a single sign-in and user authentication ...etc the company is growing and it should something in place to centralise and manage all the devices/users in the company

Do you need a central administration of the endpoints? You haven't explained the use of the end points, or the applications. Can you go BOYD? Since it sounds like there is currently no centralized PC control mechanism, you're a bit there already.

If you keep deploying applications that have either their own authentication or a shared central one, that can allow you to keep a BOYD type setup.

Of course, even in BOYD, you can deploy management tools for the endpoints as previously mentioned.

Dashrender

@Alan said in what windows server should I choose for Active directory?:

@Dashrender Upgrading to windows 10 won't be a problem. I haven't thought about it this way but it definitely something to be considered.

We tested and upgraded all available machines to Windows 10 before the official end date for the free upgrade. I'm not sure if you can still get the free upgrades or not, only testing will tell. Good luck in any case.

Grey

@Alan 2012 r2 is the current standard here (and my preference), but it is up to you to decide how to move forward with your own implementation. If you're building an AD infrastructure, you really shouldn't have to ask this kind of question, especially if you've been hired as a SysAdmin. Honestly, asking this kind of question makes me wonder about your experience in IT.

Alan

@Grey This is my first IT job and started as a part-time help desk and part-time network tech . I don't have the experience but I do have a good background as I graduated with a computer engineering degree and got Cisco certs!
but this is my first step on getting experience