Essentially you’re circumventing AD’s replication engine with something that 
isn’t going to enforce consistency which has the potential to turn out very 
poorly.

Newer (Windows Server 2012++) DCs, on uplevel versions of vmWare should realize 
they come up on a new host and handle many (but not all) possible scenarios 
where this could break AD replication.

My suggestion is not to replicate any of your DCs with vmWare and just stand up 
additional VMs in the remote site.

Thanks,
Brian Desmond

w – 312.625.1438 | c – 312.731.3132

From: [email protected] [mailto:[email protected]] On 
Behalf Of Charles F Sullivan
Sent: Friday, February 5, 2016 12:42 PM
To: [email protected]
Subject: [NTSysADM] Replicating AD VMs

Is there any reason I should be afraid to use VMware replication to make copies 
of our DCs in the event of a data center-wide disaster?

We have 5 DCs, all VMs, in a Windows 2012 R2 Forest/Domain functional AD. We 
have one forest, one domain. One of these DCs is running at a backup site about 
a mile away. I would like to use VMware Replication to keep copies of the other 
four DCs at the same location.

The replication would be set with an RPO of 15 minutes. In a disaster scenario 
for our data center, the DC at the other site would be the only one standing, 
but I would bring up the replicated DCs, one at a time, starting with the PDCe. 
The only other thing I would need would be to confirm that the IP configuration 
holds or set it correctly if needed.

Everything else is taken care of, such as physical network, DNS, etc. We 
already know we can recovery services such as this at the other site because we 
have tested it. Also, VMware replication would not be used as a replacement for 
backups, and we have other AD DR plans which have been tested using 
conventional backups. I simply want to know, from an AD perspective if this is 
a bad idea. The platform is irrelevant. We could just as well be using Hyper-V, 
but I will also check on the VMware Forums in case there’s something I should 
know related to VMware’s solution.

Thanks in advance for any feedback.

Reply via email to