Orphaned Domain Controller

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

For some reason, my management team wants me to deploy a Windows 2000 domain
controller to one of our remote offices that does not yet have a WAN curcuit.
It may take a considerable amount of time before the curcuit goes in.
Therefore, this "DC" will be stuck out there on an Island for what could be a
considerable amount of time.

Does anyone know of any serious consequesnces that I could be facing by
deploying a configuration like this or am I just looking at messy event logs
and a significant amount of replication when it does get connected?

-greg
 
Be aware of Tombstoning of the DC object if left disconnected for over 60
days. The active directory Domain Controller will be significantly missed by
the other DC's and you will see a number of KCC errors filling up your logs
each time they want to replicate to this machine.
I would suggest making this machine a member server and promoting him at the
time of the WAN link connection. If this machine goes passed the 60 day
tombstoning period, you will have much work to bring him back. The time can
be tweaked to be 180 days if this is beneficial to you.

1. In ADSI Edit, expand Configuration Container, CN=Configuration,
CN=Services, and CN=Windows NT.
2. Right-click CN=Directory Service, and then click Properties.
3. In the Select a property to view box, click tombstoneLifetime.
4. Note the value in the Value(s) box. If the value is <not set>, the
default value of 60 days is in effect.

If you will have this machine off-line for over 180 days once tweaked, it
would be my suggestion not to send it out there.
 
Greck,

Patti answered the question very well. I might take it upon myself - if I
were in your shoes - to make sure that Management understands the
consequences of doing what they - for whatever reason - want to do.

I might also find a nice way of asking them to let the experts do what the
experts do. I mean, you do not impose mandates on them about overtime
issues or marketing plans, do you? So, why are they trying to tell you what
you need to do. I assume that you have already informed them of the 'lack
of thought process' behind the decision and that they want you to do it
anyway!

Cary
 
Back
Top