HA and domain controllers

Nice day. We are currently working on moving our environment all in virtualized environment. I'm working on our antisinistre/backup plan and I have a question. Do I need a domain controller from backup of our environment if we were to define the primary DC with HA?

I'm not sure that if we would need a backup domain controller if we HA because it seems to me that in the event of a failure of the virtual machine or worse still hardware failure, it would simply move the virtual machine to another part of the hardware in the cluster.

Any input is greatly appreciated.

1 HA nothing for facilities, services OS corruption situations failed or any series of related difficulties of Windows which can bring a server offline

2. when the failure of a host, all your guests on this host will restart because of the HA. This means that most of them will start before the domain controller and therefore, do not start correctly. You will also find, meanwhile, all guests on the affected host are also offline because they have no DC.

In short, a domain controller is something very easy to do a second, you would be difficult to achieve an argument not to do. A server with no other roles can run on 1 GB of RAM and use virtually no CPU.

Edit: The terms "Primary DC" and "Backup CD" crazy, as domain controllers are multi-Master. Will never be a "backup".

Tags: VMware

Similar Questions

  • 2 replicated domain controllers or clone 1 DCs as cold standby

    Hi guys,.

    I don't know if this is the right forum to ask this question or maybe someone can divert my question. Any involvement of a Windows 2008 Server cold waiting without any network connection for a period of time, tombstone question? and the reason that I asked for, it is I think to perform replication from domain controllers 2 where 1 fail and 2nd DC to support, or just to clone standby and connect the network whenever the 1 domain controller fail.

    Appreciate any comment.

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)

    If you give us a link to the new thread we can point to some resources it
  • Remove 1 of the 3 domain controllers in a Windows environment

    I have a Windows domain that has Windows 2003 and 2008 R2 servers to support workstations, SharePoint and exchange among other things. There are 3 domain controllers. The first domain controller created on window 2003 server. Later, more 2 domain controllers were added on Windows 2008 R2. During the promotion of each of the servers in DC, each of them were activated as DNS and Global catalog servers. In addition, both 2008 DHCP configuration on them were servers and one Server 2008 R2 is configured as primary and the second as the secondary. The 2003 is just a DC member. I made main hold all 5 FSMO roles and replication works as well on both servers.
    I now have to demote the first Windows Server 2003, and then it must be taken out of the area. But whenever I have to run DCPromo to demote the server he kept a message that no other DC cannot be contacted, and when I try to disable the NIC in Server 2003, replication will stop automatically on the two 2008 R2.

    Any help please.
    Thanks in advance.

    Hello

    Post your question in the TechNet Server Forums, as your question kindly is beyond the scope of these Forums.

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    See you soon.

  • Domain controllers Windows 2008 R2 with the forest functional level Windows 2003 taken over after the end of Windows 2003 support in July 2015

    Hello

    Anyone know if the Windows 2008 R2 with Windows 2003 forest functional level domain controllers will be always supported after Windows 2003 support ends in July 2015?

    Thank you

    This issue is beyond the scope of this site and must be placed on Technet or MSDN

    http://social.technet.Microsoft.com/forums/en-us/home

    http://social.msdn.Microsoft.com/forums/en-us/home

  • Help with the Powershell script to collect logs from all domain controllers

    I am writing a script to retrieve the last 5 days of application, security and log files from all domain controllers. The script runs, but fire the logs from the local server only. The variable $Computer has all of my DC so it's the fine mark. I guess it's a problem with my line ForEach-Object, but is not error. See the below script.

    $log = 'application '.
    $date = get-date-format MM-DD-YYYY
    $now = get-date
    $subtractDays = new-object System.TimeSpan 5,0,0,0,0
    $then = $Now.Subtract ($subtractDays)
    $Computers = get-ADDomainController-filter *.
    ForEach-Object - InputObject $Computers - process {Get-EventLog - LogName $log - after $then - before $now - EntryType error | select EventID, MachineName, Message, Source, TimeGenerated |} ConvertTo-html | {Out-file $env:TEMP\Applicationlog.htm}
    Invoke-Expression $env:TEMP\Applicationlog.htm

    Thank you

    Rich

    Hello

    To help with the repost the question script to the script Center Forum

    http://social.technet.Microsoft.com/forums/scriptcenter/en-us/home

  • domain controllers

    Hello

    I have three domain controllers in the network with a domain controller in each site. A DC with all FSMO roles. My question is if one of the other domain two among the site with no material of FSMO roles fail and it may be the power on. Can I build an another domain controller and forget the one who is crushed or is there a special treatment that I must follow?

    Thank you.

    IslandSea

    This question can be put more on Technet,

    http://social.technet.Microsoft.com/forums/en-us/categories/

  • Problems with cross certification over a link to low bandwidth to the domain controllers in the same forest

    I need to explain to a user a simple explanation on why this is not an effective solution for filing committed in different places trying to share a single file. The file is an excel document and the original file would be shared at 4 different locations on 4 separate domain controllers. The link is weak across all domains at best and the file is accessible by several people at the same time. Server 2003

    Hello

    I suggest you send the same question in the Microsoft Technet Forum for assistance. We have a dedicated team to help you with such questions.
    http://social.technet.Microsoft.com/forums/en/category/windowsxpitpro

  • Commissioning for lack of Exchange because of the latency in Multi Site domain controllers

    Hi all

    I use using the OIM 11 g R2 PS2 BP04 with AD-connector version (11.1.1.6.0 & AD 2010) and the Version of the Exchange Connector (11.1.1.6.0 & Exchange 2010) and its installed on RHEL 6.5. We have 20:00 domain controllers and each of them is in a different site. Here is the list of domain controllers:

    DC-host1,DC-HOST2,DC-site2-host1,DC-SITE3-host1,DC-SITE4-host1...etc

    We use automatic configuration AD access strategies and resources the user Exchange and configured as domain controllers in AD IT resource:

    DC-HOST1 - primary

    DC-HOST2 - secondary

    AD resource provisioning works fine however when IOM tries to configure exchange to the user, its failure due to the latency issue b & w AD different Site of the domain controller. For example, "PRODTESTUSER12" is implemented successfully in AD and when IOM tries to configure exchange for this user, exchange server search for any available domain controller search for the user. It randomly selects an AD domain controller, I say DC-SITE2-HOST1 to search for the user. Since this domain contorller is on another site and it is latency, its not able to find the user of this domain controller, this is why available exchange fails for this user. See the below error:

    Target class = oracle.iam.connectors.icfcommon.prov.ICProvisioningManager

    < 21 may 2015 23:10:06 CEST > < error > < ORACLE. IAM. CONNECTORS. ICFCOMMON. Prov. ICPROVISIONINGMANAGER > < BEA-000000 > < oracle.iam.connectors.icfcommon.prov.ICProvisioningManager: createObject: error while creating user

    java.lang.RuntimeException: the operation could not be performed because the object 'PRODTESTUSER12' could not be found on 'anc-dc2k8 - 01.wssc.ad.root'.

    We have not specified this domain either under AD controller or Exchange resources.

    n Connector logs, I can see below:

    22/05/2015-10:55:19 < INFORMATION >: class-> Org.IdentityConnectors.Exchange.RemoteRunspaceInstance-> InvokeScript method, Message-> enter the method


    22/05/2015-10:55:19 < VERBOSE >: class-> Org.IdentityConnectors.Exchange.RemoteRunspaceInstance,-> InvokeScript method, Message-> Script: Set-ADServerSettings - ViewEntireForest: $true; Get-User "PRODTESTUSER21" - ReadFromDomainController

    I think, because of this script, Exchange Server recovers first of any domain controller available to search for the user. Yes, is there a way to restrict or put domain controller's favorite?

    There is a hotfix available for this problem. Here are the details:

    Patch 19692488: APPLICATION of MERGER on top of 11.1.1.6.0 FOR the BUGS 18310438 19478076

    Bugs resolved by this fix

    UPDATED EXCHANGE CONNECTOR SMTP PRIMARY ADDRESS 16813315 PROBLEM

    17949931 DELAY IN EXCHANGE / COMMISSIONING

    19478076 WITH REGARD TO THE EXCHANGE OF SUPPLY FAILURES.

    Concerning

    Suren

  • Questions about the movement of 1 of 3 ESXi4.1-ESXi5 host domain controllers.

    Is this environment that I have 3 2008 R2 domain controllers.

    1 physical

    2 virtual

    I want to turn off a virtual domain controller and move first host (ESXi 4.1) on second host (ESXi 5).

    My concern is that if the NETWORK card in the guest OS is going to get dirty with or it will remain as it is.

    If I remember not the mac address will indeed change (unless I hard coded it in the configuration file), but that shouldn't be a problem.

    I don't know, what if a new NETWORK card will appear in OS making old useless NIC originally invited me to change the network settings.  Something I don't want to have to do.  I know I've seen a similar problem with a VM linux before, but don't remember seen happen in a virtual Windows machine.  Just want to be sure before that I have to try.

    Thanks in advance for your comments.


    Greg

    VM migration between hosts will make any changes to the NIC or MAC address. You must ensure that the required networking is presented with two hosts if you want to move between them seamlessly. If the network tag is not the same between the hosts, then you will need to change the settings of the virtual machine and use the drop down to select the appropriate network before turning on the new host. But this should be easy and quick and without surprise.

    See you soon,.

    Jon

  • How to disable snapshots for domain controllers in ESXi 5? Or other best practices?

    Dear all,

    I need some aspects of assistance to the deactivation of snapshots for 2 VMS in my HA cluster running Active Directory to Windows 2008 R2.

    I read that best practices for virtual machines running that active Directory is never for them to snapshot.

    I'm worried about auto created by the systems periodically snapshots and the problem arises if a snapshot is to be reinstated by mistake.

    So, what are the best practices for virtual machines running as domain controllers? To deactivate the snapshot function or other recommended methods?

    Please kindly share. Thank you.

    Rgds

    Leslie

    leschua75 wrote:

    .

    I'm worried about auto created by the systems periodically snapshots and the problem arises if a snapshot is to be reinstated by mistake.

    VMware has no system automatically taking portraits.

    Snapshots exist either because you made them manually, an application backup created. In this case, talk with your backup vendor.

  • vSphere Client "domain controllers in confidence."

    I have a box of ESXi 4.1 with 4, Server 2008 R2 on it.

    Recently, I joined my domain name of the host. It seems to work very well (domain authentication, DNS host name, etc.) except that in the client, under configuration - host authentication services, I have nothing listed in "trusted domain controllers. The "type of directory services" shows active lists directory and 'domain' my domain correctly name. I could not find a definitive as to why my domain controller is not listed there (?)

    TIA.

    The area would be better described in "areas approved." Here is my setup showing three areas of trust and the domain in which the server is a member.

    Dave
    VMware communities user moderator

    ESXi Essentials free training / eBook offer

    Now available - VMware ESXi: planning, implementation, and security

    Also available - vSphere Quick Start Guide

  • Problem of VCB backup domain controllers

    I still do research the issue, it may or may not be true, but I was wondering if anyone had a DC using VCB backup problem. iSCSI connected proxy server.

    fact twice and twice (different days) I could NOT connect on two domain controllers. Event Viewer filled with the error logs related to DNS, ATN, time and many others. Restarting solves the problem.

    Someone at - it experience what that be like this?

    I would always advise against him. AD is a sensitive application and you should recover a domain controller virtual in the same way as a physical domain controller.  Using snapshots - enabed VSS or not, is not supported by MS, and you will have problems.

  • If all the domain controllers reside in the VMWare environment

    I was curious to know if there is someone who can give their opinion about the location of the domain controllers in the VMWare community.  I had 2 DCs before the introduction of VMWare and pulling on servers inside.  I created 2 new controllers domain in VMWare and then retrograde 2 those outside so that only there are only virtual domain controllers.  It seemed to work very well, but I had to turn off equipment running VMWare, and when it started, the storage device that the accessible ESX host has launched a mistake because he could not find a domain controller.

    Most people remove all external domain controllers and go with only VMWare virtual DCs, or is it better to always keep an external domain controller upwards and running?  Any advice is welcome.

    Thank you.

    I always advise to keep the domain controller hosting your virtual environment PDC emulator FSMO role. Time is critical on most of the servers, but especially on the PDC that is the top of your Windows Time synch infrastructure.

    We also keep a ms in each data center on a physical platform, this way if we already have a power down when we turn we can raise the physical DC first and very quickly.

    I hope this helps.

    Kind regards

    Steve

  • Satellite Pro C650D - problems with the audio and game controllers

    Hello

    I recently had problems with my microphone and speakers/headphones and game controllers.
    Sometimes the microphone stops working when on Skype, for example, but most of the time works fine, once again, when I restart the pc.

    Stakeholders sometimes still work when I connect headset.
    Some of the sounds are still coming through the speakers while some coming through the headphones.

    I have a usb game controller which also did not work everything properly.
    If I assign buttons in the program that they do not work in the game.

    All these devices are in Device Manager in a group that makes me think it's sort of annoying update doubtful that messes with them.

    Any body have similar problems or know what to do better?

    See you soon
    Laurin

    Hello

    Can you please send some details on the laptop model and the system you are using?

    With regard to the issue of sound/mic:
    > The microphone sometimes stops working when on Skype, for example, but most of the time works fine, once again, when I restart the pc.

    Are you talking about internal microphone or external? This only happens using Skype?
    In your case I would test the microphone using different applications to make sure that is not a Skype related issue.

    > Yet sometimes the speakers work when I connect headset.
    I recommend this thread:
    http://forums.computers.Toshiba-Europe.com/forums/thread.jspa?threadID=65295

    The user has had a similar problem, but this phenomenon was linked to the Realtek HD Audio Manager settings.
    She wrote:
    + In the upper right corner, there is a small yellow folder called "Connector settings" in my version. +
    + There, finally I could re-enable the setting "enable popup dialog box, when the unit is plugged. +

    + So now when I plug an external speaker or headphones, it appears, and I select the option "helmet" (instead of "line-in"), and then the sound only through the headphones/ext.speaker.+

    Regarding the game controller:
    > I have a usb game controller which also did not work everything properly.
    > If I attribute buttons in the program, they do not work in the game.
    I put t think its problem of laptop in my opinion, you must make sure that the controller is compatible with the games you play and also recommended to check some info provided by the manufacturer of the game controller.

  • all domain controllers are running windows server 2000 with the company wants to set up a more secure network server OS the company will modernize the ADS?

    you are the network administrator for abc.com domain. All domain controllers are running windows server 2000 with the company wants to set up a more secure network server OS the company will modernize the ADS?

    Please repost your request in the appropriate in the Windows Server Forum.  Thank you!

Maybe you are looking for