Skip navigation
VMware

This Question is Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (6 pts)
1,651 Views 10 Replies Last post: Mar 12, 2008 5:42 AM by tgiedvmware RSS
tgiedvmware Lurker 3 posts since
Jul 26, 2007
Currently Being Moderated

Mar 11, 2008 10:42 AM

VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

Does anyone have some good information on Virtualizing Windows Server 2003 domain controllers?    ?:|

 

 

ascari Expert 286 posts since
Jan 3, 2007
Currently Being Moderated
1. Mar 11, 2008 10:55 AM in response to: tgiedvmware
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

Hi

 

 

if you promote (dcpromo) on a new vm, there are no problems. Use dcpromo on a new vm is raccomended. (i have been able to see it to the vmworld 2008)

 

 

Otherwise, if you use converter you can found some problem with new virtual nic and consequently with active directory replica.

 

 

http://download3.vmware.com/vmworld/2006/tac9710.pdf

 

 

RParker Guru 7,853 posts since
Dec 6, 2006
Currently Being Moderated
2. Mar 11, 2008 11:00 AM in response to: tgiedvmware
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

OK, reality check.

 

 

If ALL your AD's are VM's, and for some reason you lose connectivity to your VM's or your VMs are off, you probaby have other machines which are physical that are relying on those AD's to be up.  Therefore it's prudent to mention you may not want to virtualize ALL your AD's. . . . . . .

 

 

ascari Expert 286 posts since
Jan 3, 2007
Currently Being Moderated
4. Mar 11, 2008 1:31 PM in response to: tgiedvmware
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

you can try to do it, but do not destroy phisical server (if you need to use it on-line)

 

 

(i'm repeat) is better use dcpromo on new vm.

 

 

It's possible that you encounter some network problem: when you convert a phisical system also physical nic will be converted with all network parameters (ip, mask, default gateway etc). At the end of cenversion phase, you need delete old phisical nic (search for hidden device in control panel or via resistry) and assign original ip address in new virtual nic after vmware tool installed.

 

 

During this operation the converted dc it will not be able to connect at you ad infrastructure. Some uman error are possible durin this operation, but you can try to do it.

 

 

Vmware best practice they say to convert physical server without fsmo roles, but if you are able with microsoft enviroment ... you can reduce migration time.

 

 

That's correct that Parker say.... keep one physical active directory server (with a global catalog role).

 

 

Bye Alberto

 

 

 

 

 

LarsLiljeroth Master 569 posts since
Dec 15, 2004
Currently Being Moderated
5. Mar 11, 2008 1:45 PM in response to: RParker
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

We run most of our DC virtual ( 20+ ) but in our 2 main AD sites we have 1 virtual DC and 1 Psysical. Just to be more secure....

 

We haven't seen any problem at all..... and this config has been running for about 2 years.

// Lars Liljeroth -------------- *If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!!
azn2kew Champion 3,022 posts since
Jun 21, 2006
Currently Being Moderated
6. Mar 11, 2008 1:52 PM in response to: LarsLiljeroth
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

We run domain controllers in virtual machines and have HA configured on ESX cluster.  We have multiple Domain Controllers scatter through different ESX clusters and in case one of the cluster failed, other domain controllers still up and running or even good HA configured will reboot it to other functional ESX host. Always good to have 1-2 physical domain controllers to secure yourself from total storage failured.

 

 

"The Power of Knowledge"

 

 

If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!! Regards, Stefan Nguyen VMware vExpert 2009 iGeek Systems Inc. VMware vExpert, VCP 3 & 4, VSP, VTSP, CCA, CCEA, CCNA, MCSA, EMCSE, EMCISA
ascari Expert 286 posts since
Jan 3, 2007
Currently Being Moderated
7. Mar 11, 2008 1:56 PM in response to: LarsLiljeroth
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

 

i am agree with you. I'm in a similar situation. I have one physical dc and n virtual dc and no problem for about one year long.

 

 

Other thing is virtualization way.

 

 

Dave.Mishchen… Guru User Moderators vExpert 11,905 posts since
Nov 15, 2005
Currently Being Moderated
8. Mar 11, 2008 2:54 PM in response to: tgiedvmware
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

So it is a bad idea to convert dc's from physical to virtual correct?

 

It's a much better idea to stage a new VM and then run dcpromo.  With a new VM you don't have to worry about old device drivers, management software, etc.  If you do clone

1)  You must perform a cold clone.  If you do a hot clone,  when you bring the VM up it will be out of sync.

2)  If you perform a cold clone and then power on the new VM, you must ensure that the old physical server is never powered on again (at least not with network connectivity).

 

Note also that snapshots are not supported by Microsoft as a valid method for backing up domain controllers.  You'll need to perform a system state backup to be able to properly restore your DC down the road.     Doing so can create inconsistencies accross your AD databases  - support.microsoft.com/kb/888794.

LarsLiljeroth Master 569 posts since
Dec 15, 2004
Currently Being Moderated
9. Mar 11, 2008 3:14 PM in response to: ascari
Re: VMWare esx 3.5& Windows Server 2003 Domain Controllers

I agree !  do a new server and DCPromo....  We converted 2 DC's but because of the time on the first boot was back in time it made the DC

force a full replication... so we killed it and made a fresh one.... So it vote for new DC versus conversion

// Lars Liljeroth -------------- *If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!!!

Bookmarked By (0)

Share This Page

Communities