In Active Directory, subnets are used to define the scope of certain policies and features. Adding or removing subnets allows you to adjust these policies and scopes.

Some things in Active Directory that use subnet definitions are:

  • Site links – Subnets are used to define sites in Active Directory. Site links between sites are based on the subnets that servers and clients reside on.
  • IP security policies – You can define IP security policies that apply to specific subnets. This allows you to enforce different security settings based on subnet.
  • Filtering and authentication – AD supports filtering and authentication based on client subnet. This is used for features like network access protection.
  • Scope of distribution groups – You can define the scope of distribution groups based on subnets. This limits who can see and access the group.

To add a subnet in Active Directory:

  1. Define the subnet in your network, including the subnet mask and allocating an IP range.
  2. In Active Directory Sites and Services, right click on your site and select “New Subnet”.
  3. Enter the subnet name and IP address range. Click “OK”.
  4. The subnet will now be defined and can be used in any AD feature that supports subnet definitions.

To remove a subnet:

  1. Check for any dependencies on the subnet, like site links, IP security policies, scoped distribution groups, etc.
  2. Remove those dependencies first, if any exist.
  3. In Sites and Services, right click the subnet and select “Delete”.
  4. The subnet will be removed from Active Directory.

So in summary, adding or removing subnets in Active Directory allows you to define the scope for certain policies and features. It’s important to check for any existing dependencies before removing a subnet.

Hope this helps! Let me know if you have any other questions.

So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!

Guys please don’t forget to like and share the post.Also join our Active Directory page and where you can post your queries/doubts and our experts will address them .

You can also share the feedback on below ActiveDirectory email id.

If you have any questions, feel free to contact us on admin@activedirectory.in also follow us on Facebook page to get updates about new blog posts.