VMware

This Question is Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
10 Replies Last post: Mar 12, 2008 5:42 AM by tgiedvmware  

VMWare esx 3.5& Windows Server 2003 Domain Controllers posted: Mar 11, 2008 10:42 AM

Click to view tgiedvmware's profile Lurker 3 posts since
Jul 26, 2007

Does anyone have some good information on Virtualizing Windows Server 2003 domain controllers? ?:|
Click to view ascari's profile Expert 277 posts since
Jan 3, 2007

Hi

if you promote (dcpromo) on a new vm, there are no problems. Use dcpromo on a new vm is raccomended. (i have been able to see it to the vmworld 2008)

Otherwise, if you use converter you can found some problem with new virtual nic and consequently with active directory replica.

http://download3.vmware.com/vmworld/2006/tac9710.pdf

Click to view RParker's profile Champion 5,288 posts since
Dec 6, 2006

OK, reality check.

If ALL your AD's are VM's, and for some reason you lose connectivity to your VM's or your VMs are off, you probaby have other machines which are physical that are relying on those AD's to be up. Therefore it's prudent to mention you may not want to virtualize ALL your AD's. . . . . . .

Click to view ascari's profile Expert 277 posts since
Jan 3, 2007

you can try to do it, but do not destroy phisical server (if you need to use it on-line)

(i'm repeat) is better use dcpromo on new vm.

It's possible that you encounter some network problem: when you convert a phisical system also physical nic will be converted with all network parameters (ip, mask, default gateway etc). At the end of cenversion phase, you need delete old phisical nic (search for hidden device in control panel or via resistry) and assign original ip address in new virtual nic after vmware tool installed.

During this operation the converted dc it will not be able to connect at you ad infrastructure. Some uman error are possible durin this operation, but you can try to do it.

Vmware best practice they say to convert physical server without fsmo roles, but if you are able with microsoft enviroment ... you can reduce migration time.

That's correct that Parker say.... keep one physical active directory server (with a global catalog role).

Bye Alberto


Click to view LarsLiljeroth's profile Master 567 posts since
Dec 15, 2004
We run most of our DC virtual ( 20+ ) but in our 2 main AD sites we have 1 virtual DC and 1 Psysical. Just to be more secure....

We haven't seen any problem at all..... and this config has been running for about 2 years.
Click to view azn2kew's profile Champion 2,942 posts since
Jun 21, 2006

We run domain controllers in virtual machines and have HA configured on ESX cluster. We have multiple Domain Controllers scatter through different ESX clusters and in case one of the cluster failed, other domain controllers still up and running or even good HA configured will reboot it to other functional ESX host. Always good to have 1-2 physical domain controllers to secure yourself from total storage failured.

"The Power of Knowledge"

Click to view ascari's profile Expert 277 posts since
Jan 3, 2007

i am agree with you. I'm in a similar situation. I have one physical dc and n virtual dc and no problem for about one year long.

Other thing is virtualization way.

Click to view Dave.Mishchenko's profile Guru 8,983 posts since
Nov 15, 2005
So it is a bad idea to convert dc's from physical to virtual correct?

It's a much better idea to stage a new VM and then run dcpromo. With a new VM you don't have to worry about old device drivers, management software, etc. If you do clone
1) You must perform a cold clone. If you do a hot clone, when you bring the VM up it will be out of sync.
2) If you perform a cold clone and then power on the new VM, you must ensure that the old physical server is never powered on again (at least not with network connectivity).

Note also that snapshots are not supported by Microsoft as a valid method for backing up domain controllers. You'll need to perform a system state backup to be able to properly restore your DC down the road. Doing so can create inconsistencies accross your AD databases - support.microsoft.com/kb/888794.
Click to view LarsLiljeroth's profile Master 567 posts since
Dec 15, 2004
I agree ! do a new server and DCPromo.... We converted 2 DC's but because of the time on the first boot was back in time it made the DC
force a full replication... so we killed it and made a fresh one.... So it vote for new DC versus conversion ;-)

VMware Developer

SDKs, APIs, Videos, Learn and much more in the Developer community.

Learn More

Developer Sample Code

Increase your developer productivity with VMware API sample code.

Learn More

VMworld Sessions & Labs

Online access to the latest VMworld Sessions & Labs and online services.

Learn more

Purchase PSO Credits Online

Purchase credits to redeem training and consulting services online.

Buy Now

Community Hardware Software

View reported configurations or report your own.

Learn More

VMware vSphere

Come witness the next giant leap in virtualization.

Register Today

Communities