Single Site Active Directory
Replication using DoubleTake is supported.
Multi Site Active Directory
Microsoft Domain Controllers should NOT be protected via DRaaS. This is due to the potential for corruption, clock drift, isolation and more in Active Directory. It is, moreover, easy and simple to have a DC on the recovery side so there is no need to replicate it and recover one.
Requirements
There needs to be a dedicated Domain Controller living on the DR network that is synchronized via Microsoft AD sync only to the production AD servers.
When testing failover
- Power down DR Domain Controller
- Clone DR Domain Controller to test network
- Edit Clone to place DR DC on Test network
- Do the test restore to the DR test network
- Power on DR DC test
- Validate clones are on the DR test network
- Power servers on
- Validate you can open Active Directory Sites and Services
- Validate you can open Active Directory Users and Computers
- Test the operational needs
Tear down
- Power off all the clones
- Delete the clones
- Power on DR Domain Controller