Solved

Domain configuration question for MSCS(Cluster Service) to work properly

Posted on 2008-10-24
4
320 Views
Last Modified: 2012-05-05
I am about to implement a 2-node cluster on fresh installs of Windows 2008 Enterprise. Microsoft Cluster Service (MSCS) requires that the nodes be joined to a domain, and they recommend that the nodes themselves NOT be domain controllers.

I currently do NOT have a DC on the subnet that these machines reside. So, what's the best option from the choices below:

1) I can connect/join to our PDC which is on another subnet in another office, which it would reach via VPN. However, if the VPN tunnel went down or the PDC was otherwise unavailable, would the cluster continue to function? (BTW - The PDC is Server 2003, but I don't see anything in the literature that says not to do that)

2) What are the drawbacks to making each node a PDC? Microsoft literature says its possible to make the nodes a DC, but they don't say why they recommend against it. Has anyone tried this and not had problems? Any great reasons not to go this route?

3) Other option is to create another DC on a different subnet, but within the same physical network. I have a VM system at the datacenter and could create a DC just for the cluster - but I'd rather avoid this.
0
Comment
Question by:TheLinkerG
  • 2
  • 2
4 Comments
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 250 total points
ID: 22805876
3. Have a DC in same physical site is best for any authentication as the local machines will prefer the local DCs before trying to authenticate to any remote DC.

BTW: Please skip the talk about PDC as it's an old NT4-term that doesn't exist in AD-environment. All DCs are on same multimaster level.
0
 
LVL 1

Author Comment

by:TheLinkerG
ID: 22812009
Thanks for the tip on the PDC thing - this is my first experience with Server 08. Actually, I think I will just make a guest OS on my virtual machine at the COLO and promote it to a DC. The servers in question can point to that, and the one on the other end of the VPN tunnel as backup.

As these are Server 08 will it be a problem to run them on a 03 domain?
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 22812152
Except of not getting all new GPO-functionality, it shouldn't be any problem with joining servers running Server 2008 to a domain running in 2003 functional level.
0
 
LVL 1

Author Closing Comment

by:TheLinkerG
ID: 31509829
Thanks for your input!
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Moving pagefile.sys problem on WindowsServer Standard FE 17 38
vmdk greater than 2TB 2 55
Windows Server Folder Access Control 6 33
Locating a GPO setting 3 26
If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question