Solved

Vmware snapshots on Domain Controllers

Posted on 2010-09-22
8
1,444 Views
Last Modified: 2012-05-10
I was told that you should not take snapshots of a domain controller using vmware tools.
Is this true?
If it is true, i could understand if you had multiple Dcs, as it could break replication, however, what if you only have 1 DC. would it still break or cause domain issues if you rolled back to the snapshot?
0
Comment
Question by:bntech
  • 3
  • 3
  • 2
8 Comments
 
LVL 10

Expert Comment

by:BloodRed
ID: 33735074
It can still cause issues with any AD objects which were created or updated since the snapshot was taken.  I wouldn't recommend it in a production environment, but if you're in a lab with relatively few changes being made and just want to be able to roll back over a short peroid of time you can probably get away with it.
0
 
LVL 40

Accepted Solution

by:
coolsport00 earned 500 total points
ID: 33735082
Here are 2, in my opinion, HIGHLY important RECOMMENDED reads from VMware on Snapshots:
KB:
http://kb.vmware.com/kb/1015180
Basic Admin Guide:
http://www.vmware.com/pdf/vsphere4/r40/vsp_40_admin_guide.pdf (pg. 203)

Let me explain briefly why I recommend NOT to use snapshots - When you take a snap of a VM, you create a separate file...a point in time 'replica', if you will, of the VM. All data then writes to that snap file. In this case, more than likely this will be mostly your domain data (sysvol folder). When you want to remove the snap, what you do in snapshot manager is 'delete' the snap. Now, this is a confusing task because admins typically think this does just that...deletes the snap...and all data on the snap is gone. But, in actuality what happens is data is written to the parent disk FIRST, THEN the snap file is deleted. So, why I recommend against doing this is the data in your sysvol folder may get corrupted. Now, keep in mind, I say "may"...not that it will. Snapshots in general, in my opinion, regardless of the server type (DC, Exchg, App, etc.) are not good. The main reason is because people tend to use them incorrectly. Snaps are meant as TEMPORARY (i.e. not to exceed a day or 2). Admins tend to forget a snap is created and as such it tends to grow out of control, to the point that no more space is left on the datastore the VM is on; this leads to not being able to delete the snap because you need free space on the datastore to be able to commit the data to the parent disk then remove the snap.

Anyway, that's my 2¢ worth :)

Hope that helps...

Regards,
~coolsport00
0
 
LVL 1

Author Comment

by:bntech
ID: 33735247
Are you saying, even taking a snapshot (not rolling back) could pose a problem as well, when you want to delete AKA commit the snapshot to the parent file.

So in summary - dont use snapshots on domain controllers - period
Also you recommend against snapshots on other servers as well -- i thought that this process was relatively safe for non-dcs.

Thanks for the responce guys
0
 
LVL 40

Expert Comment

by:coolsport00
ID: 33735289
Yes, my recommendation is not to use them on DCs for sure and MINIMALLY on other VMs. Snapshots are meant for BRIEF periods...mainly when you're doing an update to a VM's guest OS. Take a snap, do the update, test for a day or 2, then delete the snap. That's all it should be used for.

Hope that helps.
~coolsport00
0
Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

 
LVL 10

Expert Comment

by:BloodRed
ID: 33735314
Once you create the snapshot, all additional data and/or modifications to existing data are stored in the snap file.  When you delete the snap, that data must be merged back into the the base disk.  If the snap grows too large, the process of merging the data back into the original can take a very long time and becomes prone to error and corruption.  

Like said above, snapshots are not meant to be left in place for long periods of time.
0
 
LVL 1

Author Comment

by:bntech
ID: 33735415
Un-related, but are there any best practices \ settings to make on a DC running in a vmware environment.  Same question for Exchange 2007..

Thanks for your answers
0
 
LVL 40

Expert Comment

by:coolsport00
ID: 33735441
Mmm...there are a couple articles you can look at from both VMware and MS. You should ask this in another thread though as asking mulitple questions in a thread is frowned upon from EE (see: http://www.experts-exchange.com/help.jsp#hs=23&hi=23)

Regards,
~coolsport00
0
 
LVL 1

Author Comment

by:bntech
ID: 33735502
I will post a new thread -- Thanks, feel free to reply \ answer the new thread at
http://www.experts-exchange.com/Software/VMWare/Q_26491740.html
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A safe way to clean winsxs folder from your windows server 2008 R2 editions
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now