Solved

Domain configuration question for MSCS(Cluster Service) to work properly

Posted on 2008-10-24
4
323 Views
Last Modified: 2012-05-05
I am about to implement a 2-node cluster on fresh installs of Windows 2008 Enterprise. Microsoft Cluster Service (MSCS) requires that the nodes be joined to a domain, and they recommend that the nodes themselves NOT be domain controllers.

I currently do NOT have a DC on the subnet that these machines reside. So, what's the best option from the choices below:

1) I can connect/join to our PDC which is on another subnet in another office, which it would reach via VPN. However, if the VPN tunnel went down or the PDC was otherwise unavailable, would the cluster continue to function? (BTW - The PDC is Server 2003, but I don't see anything in the literature that says not to do that)

2) What are the drawbacks to making each node a PDC? Microsoft literature says its possible to make the nodes a DC, but they don't say why they recommend against it. Has anyone tried this and not had problems? Any great reasons not to go this route?

3) Other option is to create another DC on a different subnet, but within the same physical network. I have a VM system at the datacenter and could create a DC just for the cluster - but I'd rather avoid this.
0
Comment
Question by:TheLinkerG
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 31

Accepted Solution

by:
Henrik Johansson earned 250 total points
ID: 22805876
3. Have a DC in same physical site is best for any authentication as the local machines will prefer the local DCs before trying to authenticate to any remote DC.

BTW: Please skip the talk about PDC as it's an old NT4-term that doesn't exist in AD-environment. All DCs are on same multimaster level.
0
 
LVL 1

Author Comment

by:TheLinkerG
ID: 22812009
Thanks for the tip on the PDC thing - this is my first experience with Server 08. Actually, I think I will just make a guest OS on my virtual machine at the COLO and promote it to a DC. The servers in question can point to that, and the one on the other end of the VPN tunnel as backup.

As these are Server 08 will it be a problem to run them on a 03 domain?
0
 
LVL 31

Expert Comment

by:Henrik Johansson
ID: 22812152
Except of not getting all new GPO-functionality, it shouldn't be any problem with joining servers running Server 2008 to a domain running in 2003 functional level.
0
 
LVL 1

Author Closing Comment

by:TheLinkerG
ID: 31509829
Thanks for your input!
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
A safe way to clean winsxs folder from your windows server 2008 R2 editions
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question