Server Support
-
-
There are just too many variables. Many AD's have misconfigured DNS, bad security settings, bad / abandoned policies, bad time sync... the list of possible problems is basically endless. Most problems can be fixed in a short timespan, IF your consultant is good and the thought-to-be problem is not just a symptom of a deeper cause.
-
ohh...the AD is new and clean for now. My estimate is that user add/remove/revision/mapping are the changes that might happen in a year. If we get an issue or conflict with those changes. I assume the fix will be very easy and you can even delete a user and create one if needed. the time needed to fix it should be minimal. Am i correct?
-
@nvila said in Server Support:
ohh...the AD is new and clean for now. My estimate is that user add/remove/revision/mapping are the changes that might happen in a year. If we get an issue or conflict with those changes. I assume the fix will be very easy and you can even delete a user and create one if needed. the time needed to fix it should be minimal. Am i correct?
Depends on what you want to do. What about:
- PKI (AD Certificate Services)
- LDAP/S
- RADIUS
- NAP Server / IEEE802.1X
- Basic OU Structure
- Basic GPO/GPP
- Backup
To name a few. All of the above (expect for NAP maybe) are pretty much basics that are not pre-installed. Should be configured, planned and documented, you want them soon
AD can be a whole bunch of work or russian roulette otherwise. Is the consultant supposed to do that? -
For now, the consultant will provide support for outages. Since we are using VM and with backup AD, is it safe to say that we should be able to restore the service in 4 hours from latest VM backup regardless of what AD worst case scenario we may encounter?
-
@nvila said in Server Support:
For now, the consultant will provide support for outages. Since we are using VM and with backup AD, is it safe to say that we should be able to restore the service in 4 hours from latest VM backup regardless of what AD worst case scenario we may encounter?
Erm, you don't want to restore a DC from a backup?
Rule #1: Have at least 2 DCs
Rule #2: Don't restore a backup, deploy a new DC instead
Rule #3: Respect rule #1 and #2 -
We have 2 AD, worst case scenario is i lost them both. i can always restore backup VM and be up in less than 4 hours. correct?
-
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
-
Do you have a consultant or a repair man?
A repair man you pay to fix it when it breaks, a consultant is someone who stops it breaking to begin with.
What has his response been to these questions?
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
If you have two domain controllersfail you probably have a lot bigger problems to fix, like your VM system is down.
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
Wait, you got 2 ADs or 2 DCs in the same AD (Forest)? We should clarify this first.
-
I'm on chat guys
-
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
Recover from backup.
-
chat room 1336
-
