Can I replicate Windows server 2008 Active Directory to my home dhcp computer AD ?

Hi Experts,

One of me clients is asking if hes able to replicate Windows server 2008 Active Directory to the home dhcp computer AD.  (So the home server is like a DR for AD)

But the home is only a residential ADSL with no static ip.
Just small office. There is no firewall between the two sites.
It should not work ?

regards,
stephen2012Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Bruno PACIConnect With a Mentor IT ConsultantCommented:
No.

The AD controller must be recorded in the domain DNS zone, not on any external DNS zone.
By the way, AD domain controller require not only simple type "A" DNS records must alos a lot of "SRV" DNS records and that sort of DNS records are not provided by dynamic DNS services on the web.

Again, AD controller must have static IP addresses for a very simple reason :

To be able to replicate AD objects the domain controllers must be able to locate each other.
To locate each other the domain controllers use DNS records.
DNS records are replicated between domain controllers.
This can work if IP are static.

If the IP of a DC comes to change, the other DC won't be able to locate the DC anymore because its DNS records won't point to the new IP address.
The replication will then fail. And as the replication is the way to replicate DNS records you won't get out of this failing situation without an admin action.


Active Directory is like a plane: it's safe and robust but you must know how to pilot and must not try to make a looping.
I don't know how to be more clear... If you try exotic configuration you'll crash.

If you want a disaster recovery configuration you must do it seriously and spend the right money for that. In your case, a dedicated server as a secondary DC in your company will be perfect ! Trying to use a "strange" home server somewhere on the web is a fool idea !
0
 
Bruno PACIConnect With a Mentor IT ConsultantCommented:
Hi,

I'm not sure to understand, or I'm afraid to understand... (!!)
Do you mean installing a second domain controller on a remote server that is connected to the first one through an ADSL connection (public WAN) !!??

Well... anyway... installing a DC on a server that has no static IP address wil not work a long time... You can make it work for a while but as soon the IP will change you might have hard time to make it work back again.

Let be serious. If you want a secondary Domain Controller so that the domain still works if one Domain Controller fails you must use a server that is really able to be a domain controller, with static IP, enough RAM, DNS service, etc...


If you're idea is to backup the AD server and export the backup to another computer through an ADSL connection, then yes this is possible but this is only a backup. If the AD server (let's call it the Domain Controller, DC, as it is its function) crashes, you'll have to resintall a Windows opearting system on it to restore the backup and get your DC back to life. it will take a few hours to make bring the domain back up.


Have a good day.
0
 
Mike KlineConnect With a Mentor Commented:
Agree with Paci, I would not do it.   Are you currently running with one DC, at a minimum get a second DC up in the office (virtual or on any hardware).  If your single DC goes down hard you will have downtime and issues.

Have you thought about the Microsoft cloud solution

http://www.windowsazure.com/en-us/manage/services/networking/replica-domain-controller/

I have some machines in Azure but haven't installed a replica DC.

Thanks

Mike
0
 
stephen2012Author Commented:
how about if I use a Dynamic DNS service to allow AD to replicate over internet ?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.