Hurricane Hot site with domain controller, exchange server, and citrix server. 500 points

Posted on 2006-04-17
Last Modified: 2010-03-18
I need a few things answered, but I will start with this one.

We are a hospital in New Orleans that will have a hot site located in Opelpousas, La. This will be mainly for email, file replication and payroll. I currently have 3 domain controllers here in New Orleans and will be building a new one for the hotsite. Only one domain controller here in New Orleans holds the FSMO roles. My question is:

If the the hotside is in full production and the site to site link (T1) fails (as during a hurricane), will the hotsite still operate normally without the FSMO roles? What else should I be looking for?

The Exchange servers will be handled by WanSyncHA from XOsoft.
The Citrix server will authenticate users based on their Active Directory Account
The Payroll Lawson server is in a workgroup and is not supported by me.
Our Domain is Windows Server 2003 native
There will be a site to site PRI and also the hotiste will have a T1 to the internet.

Thanks for all your help.
Question by:jasonlkennedy
    LVL 6

    Expert Comment

    Your environment can operate temporarily without any of the fsmo roles.  Certainly enough time for the t1 to come back up.  Making sure you have a second mx record created for the mail in case of a failure.  Other than that you sound good to go.

    LVL 1

    Author Comment

    "Temporary" is an unknown variable. When hurrucane Katrina hit, our circuits were down for about 45 days. With the RID master in an unavailable state, can IDs be created in AD for new users, if the situation calls for it?
    PDC emulator is not needed
    Infra master should be fine for awhile.
    schema master - not changing anything there.
    domian naming master - still useless for the hotsite
    RID master - I will probably need a pool for new IDs and computers that may join in the hotsite.

    I figure that I can seize the role if need be. I have done this several times before for clients with failed DCs, but never when the orginal DC may come back online with the RID master. Can RID master be removed from the orginal without a transfer?

    LVL 6

    Accepted Solution

    The RID master creates 500 new SIDS at a time so you will be able to operate for a while without one.  What I would do in this instance is seize the role when necessary and then do a force removal of active directory on the original dc and do a clean up on one of the other dcs to make sure the original is completely gone from ad.  When the time comes to put the demoted dc back into action, just promote it again and transfer the role back at a time of your choosing.

    LVL 1

    Author Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Suggested Solutions

    Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
    The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now