I don’t really look at problems from the “Trying to Save Money Approach”…. I try to spend my money and use my time wisely.
I base all my value judgments on the following factors.
1. Does it value people? 2. Is it priced acceptably? (I value dominate designs, but also feel that some innovative features are worth more if they offer added value) 3. Is the solution timely? 4. Does the solution offer reproducible results?
AD lag site restores seem a little advanced for general operators to be able to perform. To me restore operations are an operator job not an engineer’s so I want a solution that offers value to operators.
The standard “Free” AD solution to restore objects has a lot of CLI, it doesn’t restore all the attributes, it takes more time to implement, it requires a DC be rebooted, it lacks the ability to restore single attributes, and groups. The lag site approach seems okay initially, but it requires more dedicated hardware that has to be maintained, it complicates the AD design in a “unnatural way”, it requires knowledge of the AD site architecture to properly implement (You have to force replication to the rest of the forest) and takes longer to implement a restore operation… (The use might be out in china, where your lag site might be in the UK).
For me I wanted the ability to quickly restore objects using a turnkey solution that I can delegate to trusted operators to perform. A dedicated person to do this task would cost about 30 to 40K per year. My base thinking is that would work between 10K to 20K up front, and about 3 to 5% overhead each additional year. I gain the ability to restore all objects and attributes, as well as groups and their memberships. I can restore these objects at the site the user resides, I don’t have to reboot a DC to do this operation, and I free up the engineer to be an engineer not an operator.
So my priorities are different than yours….. and so are my responsibilities. I don’t have to save the company money.
Notice I didn’t say lag sites don’t work, but the number of steps involved to do an authoritative restore compared to using a third-party product designed for the job and the possible end results are akin to shooting a bullet and throwing one.
Yeah you probably hit the target both ways…. But I think my way is more accurate, has better range, and gets the job done a lot faster and has the potential to be more effective with less skill.
Todd Myrick
From: Frank Abagnale
[mailto:[EMAIL PROTECTED]
Todd,
You mentioned 'potentially has the ability to create more problems'
Could you outline the problems that are on your mind?
I see Lag Sites as a solution to save the business money from purchasing a solution, but I still need to think about business risk if such a solution was to be implemented.
Frank
Brings words and photos together (easily) with |
- RE: [ActiveDir] AD Lag Sites Myrick, Todd \(NIH/CC/DNA\) [E]
- RE: [ActiveDir] AD Lag Sites deji
- RE: [ActiveDir] AD Lag Sites Myrick, Todd \(NIH/CC/DNA\) [E]
- RE: [ActiveDir] AD Lag Sites PAUL MAYES
- Re: [ActiveDir] AD Lag Sites Tomasz Onyszko
- Re: [ActiveDir] AD Lag Sites Tomasz Onyszko
- RE: [ActiveDir] AD Lag Sites neil.ruston
- RE: [ActiveDir] AD Lag Sites Wyatt, David
- RE: [ActiveDir] AD Lag Sites neil.ruston
- Re: [ActiveDir] AD Lag Sites Tomasz Onyszko
- RE: [ActiveDir] AD Lag Sites PAUL MAYES