Need Help on adding Active Directory server in DR data center

We have Data Center in Office and DR in Remote Location. We have dedicated AD servers globally in different sites. We are working on moving one of our data center to new location. We will move all our servers to new data center and to perform same we need to shutdown the AD server too for 10 hours. So far we don't have a DR server for active directory in our current location. I am planning to deploy a new AD server in DR location to fail over the domain controller requests for 10 hours until the current server comes up. Need help to setup new AD server in our environment.

- Plan to add new AD server in DR location
- Steps to configure the AD server in DR location
- Pre & Post steps to deploy the AD server
- Post Verification steps \ Replication Verification
- Possibilities of issues when we add new server in DR
- DR exercise (How can I validate the new server is accepting the AD requests when my current server goes down)
LVL 26
Sekar ChinnakannuStaff EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Wilder_AdminCommented:
If i understood right your AD Server in the dr location will be shut down and moved.

So you do not need a AD Server while moving. Its the location concept or low cost settings in your domain.

It means if a client needs AD Information like auth its looking for the nearest (low cost) AD Server. For performance reasons you should have that server near by your clients. But if you do not have then the client is asking the next one when he could reach it.

So in your case if there is no server or client at DR location why you should need a AD server?
If all of your other AD Server have a global catalog then you are already redundant in any desaster case. This is for the AD objects only. For DHCP etc you need another concept.

All your requestet stept are belonging to the dcprome.exe command. You should take some time to understand the FSMO Roles in a domain and if the moved server has non of them then just move them to the new location.
0
Sekar ChinnakannuStaff EngineerAuthor Commented:
We are not moving our server DR server, I am looking for a plan to deploy an new server in DR to take care of fail over process when we move the current AD server to new DC and when the current DC goes down.
0
Wilder_AdminCommented:
See http://www.petri.com/installing-active-directory-windows-server-2008.htm#

You can add the new server in DR location and then move the fsmo roles http://www.petri.com/transferring_fsmo_roles.htm

then shut down the server. After you restarted in the new location you can move again the fsmo roles to the original one.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

Sekar ChinnakannuStaff EngineerAuthor Commented:
Ok how can I confirm when I shutdown my current AD server and automatically fail over goes to new DR AD server and also Post Verification steps &  Possibilities of issues when we add new server in DR
0
Wilder_AdminCommented:
There are no automatic fail over. All you have to do is manual work. The only concept i know for automatic failover is the combination of windows 2012 Server and hyper-v. Because this server typ you are able to boot and its regetting the sync files of the dc cluster.

For verification you can take from the MS blog: http://support.microsoft.com/kb/298143

There are no issues when you add a ad server to an existing forest. If the network is accessable for all ports needed its working like a charm.
0
Sekar ChinnakannuStaff EngineerAuthor Commented:
ok but still when my current DC goes down I want all my connection need to redirect\fail over to DR AD server. not to next available DC or other site
0
Wilder_AdminCommented:
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.