Moving DC and App servers to isolate location

Posted on 2014-08-25
Last Modified: 2014-09-02
Hi, I needed to move an Application server and database to an isolated location with no network connection except locally. The application server relies on Active Directory for logins. This was what I was planning

Firewall <--> Switch <--> ESXi 5.1host with VMs (DC and App server) + Physical DB server

The subnet will be kept the same and the DC along with the ESXi host and Physical DB server will be moved offsite and cut off from the network and internet access. All of the server IPs will be kept the same and will be in same subnet. Have the following questions regarding this:

1. Will the login to the app work in this scenario?
2. There will be a need to reconnect this network back to the domain in a few months. What if any gotchas should I be thinking about

Question by:abhijitm00
    LVL 24

    Accepted Solution

    Will there be any changes made to the data in the isolated environment?  

    If there are no changes then I suggest the following:

    1.  Virtualize a DC and the app server
    2.  Boot up the DC in the isolated environment
    3.  Seize all FSMO roles
    4.  Perform MetaData cleanup and remove all other DCs

    If there will be changes made to data then perform the following:

    1.  Virtualize a DC
    2.  Boot up the DC in the isolated environment
    3.  Seize all FSMO roles
    4.  Perform MetaData cleanup and remove all other DCs
    5.  Boot the application server in the isolated environment
    6.  When you want to introduce the application server back to the production environment, ensure to remove it from the domain and then join it back to the domain
    LVL 34

    Assisted Solution

    AS long as DC and app both remain together even in isolated network, login will work
    U do need to seize FSMO roles for logins to work and ensure that server is Global Catalog (GC)
    Test your application the way you want, no matter if you make any changes or not
    When you want, move application server and database server to production and disjoin and re-join server to production domain

    Only do not move isolated DC back to production

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Too many email signature updates to deal with?

    Are you constantly visiting users’ desks making changes to email signatures? Feel like it’s taking up all of your time? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

    Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
    To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now