Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

DC migration

Posted on 2013-02-02
4
Medium Priority
?
347 Views
Last Modified: 2013-03-04
I am in the process of planning to upgrade my domain controllers. I am currently running Server 2003. I have a couple of questions as I am podering a few different configurations. Are there any known issues with making you domain controllers virtual vs physical? I am running ESXi 5.1 with 3 hosts in an HA configuration. Also, what are the pros/cons of upgrading all the way to Server 2012 versus Server 2008 R2?
0
Comment
Question by:ktpoitm
4 Comments
 
LVL 23

Accepted Solution

by:
Suliman Abu Kharroub earned 500 total points
ID: 38847553
IT is best practice to have at least on physical DC on the domain.
0
 
LVL 23

Assisted Solution

by:Stelian Stan
Stelian Stan earned 500 total points
ID: 38847636
Their is a lot of debate to have all your DC virtual. I personally prefer to have one DC running on a physical box. Regarding 2008 R2 vs 2012, definitely 2012. Why to spend all this time migrating to 2008 R2 and then again to migrate to 2012.

Some good reading "Virtual Domain Controllers and Windows Server 2012 Improvements".

Also read "Safe virtualization of domain controllers ":http://technet.microsoft.com/en-us/library/hh831734.aspx
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 500 total points
ID: 38847641
Windows 2012 has some safety features built in for virtual DC.  ESX 5.1 supports the features

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2013/01/22/list-of-hypervisors-supporting-vm-generationid.aspx

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2012/09/07/new-features-in-active-directory-domain-services-in-windows-server-2012-part-12-virtualization-safe-active-directory.aspx

The caveat to the previous statement is that if you have two sites for example and have your virtual machines split then it is safe to go all virtual.

The danger of going all virtual is if you are running all your DCs on the same host or connected to the same back end storage and although unlikely if the storage or hosts totally dies you are in trouble because all your machines are gone.  

Thanks

Mike
0
 
LVL 24

Assisted Solution

by:Sandeshdubey
Sandeshdubey earned 500 total points
ID: 38847691
Configuring DC either from clone/snapshot/image is not recommended.

How to Virtualize Active Directory Domain Controllers

http://blogs.technet.com/b/askds/archive/2010/06/10/how-to-virtualize-active-directory-domain-controllers-part-1.aspx

http://blogs.technet.com/b/askds/archive/2010/06/15/how-to-virtualize-active-directory-domain-controllers-part-2.aspx

Deployment Considerations for Virtualized Domain Controllers
http://technet.microsoft.com/en-us/library/d2cae85b-41ac-497f-8cd1-5fbaa6740ffe(v=ws.10)#deployment_considerations_for_virtualized_domain_controllers

For DCs virtualization, not the that it recommended to have at least one physical DC / DNS / GC server that holds all FSMO roles.
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question