Active Directory disaster recovery testing.

Posted on 2011-04-23
Last Modified: 2013-11-05
Is there a safe way of performing disaster recovery testing in regards to Active Directory failover?

The idea would be to have domain controllers in a DR site, that we can seize Active Directory FSMO roles to test DR plans.  I know from reading (not experience) when you seize a FSMO role you cannot bring the previous holder back online.  However, in our case we would definitely want to bring the original holder online after DR testing.

I assume this is possible, but must take manual steps to achieve.  Any help is appreciated.
Question by:floydianone
    LVL 57

    Accepted Solution

    Some roles if they are seized are ok,  but yeah as a general rule don't bring it back.

    My recommendation would be to setup a simple lab up (you can use Hyper-V, VMWare, VirtualBox) set up a few DCs and test that way.

    You don't want to test seizing in production.



    Author Comment

    Thats what I figured. Thanks

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    7 Experts available now in Live!

    Get 1:1 Help Now