Server Support
-
@nvila said in Server Support:
Hi,
We will be getting services of a consultant to support AD server VM running on Hyper V. What are the usual practice in terms of outage support and number of hours to restore service?
How many hours are needed to fix mis-configuration or conflict in AD?
What other issues that usually occurs and how long should we allow the consultant to fix the issue?
This depends on how things are configured and what the conflicts are. You're literally asking how much time will it take to fix this unknowable variable.
-
I'm asking based on your experiences, what are the usual issues and time needed to fix it?
-
Just site an example and it should give me an idea.
-
-
There are just too many variables. Many AD's have misconfigured DNS, bad security settings, bad / abandoned policies, bad time sync... the list of possible problems is basically endless. Most problems can be fixed in a short timespan, IF your consultant is good and the thought-to-be problem is not just a symptom of a deeper cause.
-
ohh...the AD is new and clean for now. My estimate is that user add/remove/revision/mapping are the changes that might happen in a year. If we get an issue or conflict with those changes. I assume the fix will be very easy and you can even delete a user and create one if needed. the time needed to fix it should be minimal. Am i correct?
-
@nvila said in Server Support:
ohh...the AD is new and clean for now. My estimate is that user add/remove/revision/mapping are the changes that might happen in a year. If we get an issue or conflict with those changes. I assume the fix will be very easy and you can even delete a user and create one if needed. the time needed to fix it should be minimal. Am i correct?
Depends on what you want to do. What about:
- PKI (AD Certificate Services)
- LDAP/S
- RADIUS
- NAP Server / IEEE802.1X
- Basic OU Structure
- Basic GPO/GPP
- Backup
To name a few. All of the above (expect for NAP maybe) are pretty much basics that are not pre-installed. Should be configured, planned and documented, you want them soon
AD can be a whole bunch of work or russian roulette otherwise. Is the consultant supposed to do that? -
For now, the consultant will provide support for outages. Since we are using VM and with backup AD, is it safe to say that we should be able to restore the service in 4 hours from latest VM backup regardless of what AD worst case scenario we may encounter?
-
@nvila said in Server Support:
For now, the consultant will provide support for outages. Since we are using VM and with backup AD, is it safe to say that we should be able to restore the service in 4 hours from latest VM backup regardless of what AD worst case scenario we may encounter?
Erm, you don't want to restore a DC from a backup?
Rule #1: Have at least 2 DCs
Rule #2: Don't restore a backup, deploy a new DC instead
Rule #3: Respect rule #1 and #2 -
We have 2 AD, worst case scenario is i lost them both. i can always restore backup VM and be up in less than 4 hours. correct?
-
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
-
Do you have a consultant or a repair man?
A repair man you pay to fix it when it breaks, a consultant is someone who stops it breaking to begin with.
What has his response been to these questions?
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
If you have two domain controllersfail you probably have a lot bigger problems to fix, like your VM system is down.
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
Wait, you got 2 ADs or 2 DCs in the same AD (Forest)? We should clarify this first.
-
I'm on chat guys
-
-
@nvila said in Server Support:
What is the best Disaster Recovery Plan for DC? if 2 DCs failed?
Recover from backup.
-
chat room 1336
-
