domain controller cluster

Dear Expert,
currently i m having domain controller installed on windows server 2003.

Now I am plannig move on to clustered DC.I have two Identical servers to do so.

Now my question is whether it is recommended? What are the steps i should folow?


Who is Participating?
TheCapedPlodderConnect With a Mentor Commented:
This is not a best practice.  In fact I doubt it's even possible.

Build each server as Windows 2003 Standard and promote them to be domain controllers.  Active Directory automatically replicates with other domain controllers in the same domain and provides complete fault tolerance (with the exception of FSMO roles).

Make sure you install DNS on both servers and created your DNS zones as AD integreated.  Also ensure you make both DC's global catalogs.

You'll save yourself a bundle on Enterprise Edition licenses and shared disk.
sandeeptheteAuthor Commented:
thanks..but its not all abt saving money.I have already bought hardware & licences.
I have my storage box is ready.
Below are the steps i have completed.
1.Created LUNS on storage (hitachi AMS)
2.Installed win2k3 r2 enterprise edition on both nodes.
3.Promoted both nodes to Domain controller(test domain).
4.Then I followed the procedure from microsoft K-base and configured the cluster.
5.Clustering is workin fine in test domain.

Now my concern is to tranfer or migrate my existing domain to this new environment with minimum down time.



What I want to achive is complete fault tolerence.
LauraEHunterMVPConnect With a Mentor Commented:
Clustering domain controllers is not a recommended configuration, see You achieve fault tolerance in Active Directory by deploying multiple individual domain controllers, not by creating clusters.
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Quote "LauraEHunterMVP:
Clustering domain controllers is not a recommended configuration, see You achieve fault tolerance in Active Directory by deploying multiple individual domain controllers, not by creating clusters."

This is very true, should your domain controller hosting any one or multiple FSMO's fail you can seize the FSMO role onto another DC.
Brian PiercePhotographerCommented:
I'll add to that - clustering of DCs is NOT recommended, by all means have two DCs - but not in a cluster - keep your cluster to exchange and keep the DCs seperate
sandeeptheteAuthor Commented:
Why clustering of domain controllers are not recommended by microsoft?

can anybody list few points?
It's really quite simple.  Active Directory is fault tolerant by design, if one AD server fails all other AD servers will happily carry on regardless provided FSMO roles are moved (and this is a well documented process).  Adding clustering to the mix just over complicates things unnecessarily and reduces the usefulness of the two servers.

With two seperate servers running indepently both can serve customers at the same time making maximum use of the servers.  In a cluster only one server is doing anything at any one time.

With two seperate servers when one fails there is no interuption to service.  In a cluster when the active node fails there is a service outage whilst resources fail over.

You've now been told by four people that this is not a good idea. Take that as a good recommendation.
Did you happen to actually read the Microsoft link that I listed earlier?

"You cannot cluster domain controllers for fault tolerance. You can promote computers to be domain controllers, and then you can install the Cluster service on those computers, but there is no method to store Active Directory on any one of the cluster's managed drives. There is no "failover" of Active Directory."
TheCapedPlodderConnect With a Mentor Commented:
I didn't read it myself but I did postulate in my first response that "In fact I doubt it's even possible" so it's nice to have this confirmed.

So there we have it.  Can't be done.
sandeeptheteAuthor Commented:
Dear All,
Thanks a lot for ur responce..I think the point is well explained.
I have one small query regarding the storage.
Ok now if i promote one server to PDC..Is it possible by any chance that MY ADC and PDC could share a common storage from my SAN box.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.