Click here to get back home

Disaster Recovery for Root Domain Servers

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Disaster Recovery for Root Domain Servers Liliana Bravo 10-10-2006
Posted by Liliana Bravo on October 10, 2006, 1:21 pm
Please log in for more thread options
Hi Folks

We are a Root Domain with 22 Child Domain in another location (countries) .
we have VPN between the forest and child domains All is working fine. We
have 3 DC in rootDomain (Cgroot1, cgroot2, cgroot3). I would like to prepare
a contigency disaster if my root locations disappear. It mean root domain
servers died and I want to enable another location for a new DCs root and
new VPN server and allow Child Domain continue working (rplications, etc) .
Do you have any idea where Can I found information about it ? or How can I
do that?

I will appreciate any help!!!

Liliana Bravo





Posted by Robert Moir on October 10, 2006, 3:50 pm
Please log in for more thread options
Liliana Bravo wrote:
> Hi Folks
>
> We are a Root Domain with 22 Child Domain in another location
> (countries) . we have VPN between the forest and child domains All is
> working fine. We have 3 DC in rootDomain (Cgroot1, cgroot2, cgroot3).
> I would like to prepare a contigency disaster if my root locations
> disappear. It mean root domain servers died and I want to enable
> another location for a new DCs root and new VPN server and allow
> Child Domain continue working (rplications, etc) . Do you have any
> idea where Can I found information about it ? or How can I do that?

If you're operating a multi-site organisation, the obvious way to improve
redundancy would be to ensure that each domain (including the forest root
domain) has at least one DC at a different site from all its other DCs, and
that there is more than one route between sites. That should pretty much
take care of everything.



Posted by Joe Richards [MVP] on October 10, 2006, 4:43 pm
Please log in for more thread options
Other than that, I would expect the standard Active Directory Recovery
documentation should be sufficient.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Robert Moir wrote:
> Liliana Bravo wrote:
>> Hi Folks
>>
>> We are a Root Domain with 22 Child Domain in another location
>> (countries) . we have VPN between the forest and child domains All is
>> working fine. We have 3 DC in rootDomain (Cgroot1, cgroot2, cgroot3).
>> I would like to prepare a contigency disaster if my root locations
>> disappear. It mean root domain servers died and I want to enable
>> another location for a new DCs root and new VPN server and allow
>> Child Domain continue working (rplications, etc) . Do you have any
>> idea where Can I found information about it ? or How can I do that?
>
> If you're operating a multi-site organisation, the obvious way to improve
> redundancy would be to ensure that each domain (including the forest root
> domain) has at least one DC at a different site from all its other DCs, and
> that there is more than one route between sites. That should pretty much
> take care of everything.
>
>

Similar ThreadsPosted
Re: Key Recovery Agent with no access to Root CA CRL October 24, 2008, 3:59 am
How to add a domain user as a Data Recovery Agent June 30, 2006, 1:48 pm
Allowing a Domain User Admin Rights to a Couple of Domain Servers June 29, 2005, 8:13 pm
Windows 2003 - Child domain cannot request certificate from root domain January 11, 2008, 11:41 am
How to give “View” access to all my servers in my domain? October 3, 2005, 5:11 am
automate xcopy btw Win servers with diff domain memberships ? January 12, 2006, 2:25 pm
Single Server access to stand alone servers within domain June 26, 2008, 6:49 pm
PKI Certificate Server Install in AD Empty Root Domain July 21, 2005, 10:42 am
Migrate Enterprise root authority CA to stand-alone root CA December 13, 2005, 7:57 am
Stans-alone root CA or Enterprise root CA August 31, 2006, 6:32 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap