Link to home
Start Free TrialLog in
Avatar of ClubColby
ClubColby

asked on

Move FSMO Roles prior to DataCenter Maintenance

Single forest with Single domain.

Current FSMO roles are on one dc in hq. Primary and secondary DNS servers are also on additional domain controllers in HQ. Each site nationally has 2 domain controllers configured as global catalog and DNS.

DataCenter Maintenance in HQ will require complete shutdown of all systems.  Systems with failover capability will failover to colocation facility which has 2 domain controllers.

Thoughts on moving fsmo roles out to colocation facility during Datacenter maintenance. Any additional gotchas I have not thought about woul be appreciated!
ASKER CERTIFIED SOLUTION
Avatar of Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Andrew Hancock (VMware vExpert PRO / EE Fellow/British Beekeeper)
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Also make sure if you have firewall rules setup the same at the colo facility.

How long will your datacenter be offline?

Avatar of ClubColby
ClubColby

ASKER

Datacenter will be dark for at least 10-12 hours.

All return green.

So recommendation is I do not have to transfer roles or stop replication for DCs in HQ?
Once I bring the HQ DCs back online I''ll also need to run the dcdiag /e /v , etc to confirm HQ DCs are replicated and healthy. Anything else? I know I am going to get an alert storm from SCOM after the maintenance completion even with all the DCs in MM.

Should I be concerned about replication or should I say lack of replication causing database corruption?

thanks ahead!
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
oh, one last thing, make sure you've got good AD backup (system state!), even if it's NT Backup! before you start, just in case!
What could happen if I don't transfer roles to secondary sites?

Backups yes!  
You can have Domain downtime if the DCs can not contact the FSMO roles these are critical for AD to function properly.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Correct.  Datacenter will be down. We have other DCs for the domain at our colo facility in same city.
Those domain controllers and other satellite office domain controllers will be online. These are all on the same domain.  Since this maintenance will take place saturday morning to saturday evening user load will be low. One thing to note is that we will fail over our exchange services to our colo facility so that email will continue to function while our datacenter at HQ is dark.
You need to have the fsmo roles online with Exchange running and other services.
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.