What happens to a domain controller when it loses its connectivity during an outage


What happens to a site when its domain controllers lose connectivity.  Is there a particular time limitation that we need to take into consideration should the site links go down that we need to be prepared for.
Its possible this link could be down from 10 minute up to an hour.  What is the risk to AD with regards to AD services, NTP, and what ever else I'm not thinking of.  
I have a circuit between to data centers thats got an issue and requires maintenance to repair.
Thanks in advance for any help.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Mike KlineCommented:
Yes but the time limitation is much longer, it can be down as long as the tombstone lifetime period (TSL).  If it down longer than the TSL then you would have issues bringing it up

TSL is 60 or 180 days by default depending on the version

Windows 2000 (all SPs) = 60 days
Windows Server 2003 without SP = 60 days
Windows Server 2003 with SP1 = 180 days
Windows Server 2003 R2 with SP1 installed with both R2 discs = 60 days
Windows Server 2003 R2 with SP1 installed only with the first R2 Disc = 180
days Windows Server 2003 with SP2 = 180 days
Windows Server 2003 R2 with SP2 = 180 days
Windows Server 2008 = 180 days
Windows Server 2008 R2 = 180 days

I wouldn't keep them off that long.  If the box that holds certain FSMO roles like PDC emulator goes down try to get that back up in a few days at most.



Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Depends on the tombstone value from an DC perspective.

As for sync NTP etc the DC will sync once it is back online once it has not passed the tombstone time limit.

An hour should provide no impact to your DC, if you see any issues dcdiag can help you to identify / resolve.

Mohammed KhawajaManager - Infrastructure:  Information TechnologyCommented:
Nothing.   Computers in the site will authenticate to another DC.  Only issue you might be slow logons and some group policies may not apply if site link is slow.
dv8angelAuthor Commented:
Hope you guys don't mind sharing the points, you all answered pretty quickly so I wanted to be fair.  You guys answered this in full for me, thank you so much!!!!!!
Mike KlineCommented:
Sharing is great....glad you got the help you needed.


It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.