Job server topology

hi 

is it someone's who can help me with answers at the following questions?

  1. How can I install a job server in a large environment? I want to have a job server installed on each branch and I need to link all those job servers to a central instance. on each location, I have an AD and an exchange server. is it enough if I install e single JS on each location?
  2. Should be the JS a separate server (installed as a server member in the local domain), on locations we have between 1-4 DCs?
  3. What are the resources used by JS locally?
  4. Can I see a diagram somewhere?

Thank you

  • Hello,

    What do you mean by a "branch"?  Do you mean a domain as part of a forest?

    Installing a job server on a dedicated server is always a good idea.

    Have you already looked at the available documentation regarding minimum system requirements for a job server?

    As every environment is different, your requirements may be different when it comes to job servers, database requirements, etc.  if you haven't already, I suggest to consult with a partner so they can provide the guidance you need: https://www.oneidentity.com/partners.

    Trevor

  • Actually is more complicated. 

    there are 13 forests, and trust cannot be installed between forests. 

    So I'm looking for a solution to install JS on each forest/domain and synchronized all those JS to a central JS. The central JS will be linked to the DB so local JS will collect the jobs and will send all this to the central one. The central JS will be responsible for updated/sync data in DB

  • Forest trusts are not needed. You enter credentials within Identity Manager that are specific (or local) to each of the different forests and it will use those credentials to connect the respective domain. Therefore a single job server could connect to multiple forests that do not have trusts.

  • This includes also Exchange? so basically I can read and sync users and passwords, groups and non-person objects from Exchange? Exchange server is installed as server member in local domain/forest so a user with domain admin rights and local admin in exchange can do the sync? Do you know where can I find documentation about the configuration od JS for this kind of solution? 

  • Look within the installation media's 'Modules \ EX0' folder. Documentation related to Exchange is located here.

  • Hello,

    What do you mean by a "branch"?  Do you mean a domain as part of a forest?

    Installing a job server on a dedicated server is always a good idea.

    Have you already looked at the available documentation regarding minimum system requirements for a job server?

    As every environment is different, your requirements may be different when it comes to job servers, database requirements, etc.  if you haven't already, I suggest to consult with a partner so they can provide the guidance you need: https://www.oneidentity.com/partners.

    Trevor

    Haha yes, by "branch" I did mean a domain in the forest—not the kind with trees! And yep, already checked the docs and system requirements. I’m setting it up on a dedicated server, and luckily found a good server provider for it. If anyone’s hunting for one, give HostNoc a shot—they’ve been solid so far!