Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 537
  • Last Modified:

Can I replicate Windows server 2008 Active Directory to my home dhcp computer AD ?

Hi Experts,

One of me clients is asking if hes able to replicate Windows server 2008 Active Directory to the home dhcp computer AD.  (So the home server is like a DR for AD)

But the home is only a residential ADSL with no static ip.
Just small office. There is no firewall between the two sites.
It should not work ?

regards,
0
stephen2012
Asked:
stephen2012
  • 2
3 Solutions
 
Bruno PACIIT ConsultantCommented:
Hi,

I'm not sure to understand, or I'm afraid to understand... (!!)
Do you mean installing a second domain controller on a remote server that is connected to the first one through an ADSL connection (public WAN) !!??

Well... anyway... installing a DC on a server that has no static IP address wil not work a long time... You can make it work for a while but as soon the IP will change you might have hard time to make it work back again.

Let be serious. If you want a secondary Domain Controller so that the domain still works if one Domain Controller fails you must use a server that is really able to be a domain controller, with static IP, enough RAM, DNS service, etc...


If you're idea is to backup the AD server and export the backup to another computer through an ADSL connection, then yes this is possible but this is only a backup. If the AD server (let's call it the Domain Controller, DC, as it is its function) crashes, you'll have to resintall a Windows opearting system on it to restore the backup and get your DC back to life. it will take a few hours to make bring the domain back up.


Have a good day.
0
 
Mike KlineCommented:
Agree with Paci, I would not do it.   Are you currently running with one DC, at a minimum get a second DC up in the office (virtual or on any hardware).  If your single DC goes down hard you will have downtime and issues.

Have you thought about the Microsoft cloud solution

http://www.windowsazure.com/en-us/manage/services/networking/replica-domain-controller/

I have some machines in Azure but haven't installed a replica DC.

Thanks

Mike
0
 
stephen2012Author Commented:
how about if I use a Dynamic DNS service to allow AD to replicate over internet ?
0
 
Bruno PACIIT ConsultantCommented:
No.

The AD controller must be recorded in the domain DNS zone, not on any external DNS zone.
By the way, AD domain controller require not only simple type "A" DNS records must alos a lot of "SRV" DNS records and that sort of DNS records are not provided by dynamic DNS services on the web.

Again, AD controller must have static IP addresses for a very simple reason :

To be able to replicate AD objects the domain controllers must be able to locate each other.
To locate each other the domain controllers use DNS records.
DNS records are replicated between domain controllers.
This can work if IP are static.

If the IP of a DC comes to change, the other DC won't be able to locate the DC anymore because its DNS records won't point to the new IP address.
The replication will then fail. And as the replication is the way to replicate DNS records you won't get out of this failing situation without an admin action.


Active Directory is like a plane: it's safe and robust but you must know how to pilot and must not try to make a looping.
I don't know how to be more clear... If you try exotic configuration you'll crash.

If you want a disaster recovery configuration you must do it seriously and spend the right money for that. In your case, a dedicated server as a secondary DC in your company will be perfect ! Trying to use a "strange" home server somewhere on the web is a fool idea !
0

Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now