Active Directory

What is subnet and how we can add or remove in active directory

In Active Directory, subnets are used to define the scope of certain policies and features. Adding or removing subnets allows you to adjust these policies and scopes.

Some things in Active Directory that use subnet definitions are:

  • Site links – Subnets are used to define sites in Active Directory. Site links between sites are based on the subnets that servers and clients reside on.
  • IP security policies – You can define IP security policies that apply to specific subnets. This allows you to enforce different security settings based on subnet.
  • Filtering and authentication – AD supports filtering and authentication based on client subnet. This is used for features like network access protection.
  • Scope of distribution groups – You can define the scope of distribution groups based on subnets. This limits who can see and access the group.

To add a subnet in Active Directory:

  1. Define the subnet in your network, including the subnet mask and allocating an IP range.
  2. In Active Directory Sites and Services, right click on your site and select “New Subnet”.
  3. Enter the subnet name and IP address range. Click “OK”.
  4. The subnet will now be defined and can be used in any AD feature that supports subnet definitions.

To remove a subnet:

  1. Check for any dependencies on the subnet, like site links, IP security policies, scoped distribution groups, etc.
  2. Remove those dependencies first, if any exist.
  3. In Sites and Services, right click the subnet and select “Delete”.
  4. The subnet will be removed from Active Directory.

So in summary, adding or removing subnets in Active Directory allows you to define the scope for certain policies and features. It’s important to check for any existing dependencies before removing a subnet.

Hope this helps! Let me know if you have any other questions.

So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!

Guys please don’t forget to like and share the post.Also join our Active Directory page and where you can post your queries/doubts and our experts will address them .

You can also share the feedback on below ActiveDirectory email id.

If you have any questions, feel free to contact us on admin@activedirectory.in also follow us on Facebook page to get updates about new blog posts.

Vipan Kumar

He is an Active Directory Consultant. He has been working in IT industry for more than 10 years. He is dedicated and enthusiastic information technology expert who always ready to resolve any technical problem. If you guys need any further help on subject matters, feel free to contact us on admin@activedirectory.in. Please subscribe our Facebook page as well website for latest article.

Recent Posts

What are the steps to move the DC in production site after promotion?

Moving a domain controller (DC) to a production site after promotion involves several steps. Here's…

1 year ago

What are the staging and production sites in Active directory?

In Active Directory, staging and production sites refer to different environments used for testing and deploying changes…

1 year ago

If domain controller down for some time, is it good to move this to staging site? if yes then why?

If a domain controller (DC) has been down for an extended period of time, there…

1 year ago

What information contain netlogon logs?

Netlogon logs contain information related to the Netlogon service on a Windows Server, which is responsible for authenticating…

1 year ago

What are sites in Active directory? What are they used for?

In Active Directory, sites are a logical construct used to group together network resources (such as domain…

1 year ago

How we can redirect specific user’s subnet to get the authentication from particular AD site

You can redirect a specific subnet to authenticate from a particular Active Directory site by using site…

1 year ago