Solved

Backup virtual domain controller replication

Posted on 2011-09-13
3
249 Views
Last Modified: 2012-05-12
My company wants to create two virtual 2008 R2 servers on laptops in case of emergency. This way we can run a bare bones network with a DC and file server until we bring the main network back online. My question is that if I create a new DC with DNS obviously and then shut down the virtual machine until several days before a storm is likely to hit us will AD ans DNS continue to try and replicate to that machine even though it is not on? Also, will the  PDC put that DC into tombstone state if is unable to successfully replicate to it for a certain period of time. I would like to be able to set this emergency DC up, so I can use my NTFS permissions on the file server, but I do not want to cause more problems in the meantime. Any help and advice would be much appreciated with this.
0
Comment
Question by:KBElectronics
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 36529522
They will try and then see that the DC is offline.  If they can't replicate before the tombstone lifetime period (either 60 or 180 days) then yes it will be put into tombstone state

You can check the TSL http://markparris.co.uk/2010/02/01/active-directory-tombstone-lifetime-set-it-to-the-correct-value/

The good news is having at least 2 DCs in any network is important.   Just make sure that the laptops are secure too, you don't want someone stealing a laptop and walking away with the domain.

Obviously a second server or more traditional virtualization solution is better than a laptop but a laptop for a second DC is better than not having a second DC.

Thanks

Mike
0
 

Author Comment

by:KBElectronics
ID: 36529688
Thanks Mike. We actually do have to physical DC's in the building, the virtual DC on the laptop was meant to be physically locked up and brought out in the event a hurricane was approaching us. Then I would bring the server online, have it replicate and I could atleast have AD info on the laptop to run a skleton network if we lose the main. Once they see the DC is offline, will they continuously try to replicate, I do not want to stuff the event log with Ntfrs errors all day long ? Great link, exactly what my next questions was going to be regarding TSL.
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 36530373
Can your laptop not be physically locked up in a place that has power and wifi? You could then just leave it on ALL the time and you have a second DC AND it will always be 100% upto date and ready to go.
P.S.
dont foget to make it a Global Catalog Server :P
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question