Definitely good points on
some of the key items to take into account when it comes to the virtualization
of anything.
In regards to Microsoft stance on support
of DC's on virtualization platforms, this changed a few months ago and it is
actually now supported I believe without the premier support agreement....see
http://support.microsoft.com/?kbid=888794
Quote from the
KB:
Support for Active Directory
domain controllers in virtual hosting environments
We do not test the
functionality of Active Directory domain controllers in virtual hosting
environments. However, we will help troubleshoot domain controllers that run in
virtual hosting environments, whether the virtual hosting environment comes from
Microsoft or from a third party. If the host environment causes a problem, the
vendor of the host environment must provide support. One method to determine
whether the host environment causes a problem is to determine whether the
problem occurs when the host environment is installed on the hardware that is
listed in the Microsoft Hardware Compatibility list or in the Microsoft Windows
Tested Products list.
I have deployed Windows 2003
domain controllers on VMWare GSX and ESX server platforms at several clients
over the past 5-6 months. From a performance standpoint everything functions
well and overall DC's tend to make good candidates for virtualization.
For example on several DL380 G4
servers with dual Xeon processes and 6GB of RAM I am running 5 domain
controllers per physical server on VMWare GSX server 3.2 at different data
center locations and supporting various child domains.
As far as the security of the physical host
it was placed in an empty forest root (Another hot topic as to even being
secure...I know) with hardening via local policy and ACL rights on the server
itself.
Hope that helps...
From: [EMAIL PROTECTED] on behalf of joe
Sent: Tue 1/31/2006 5:55 PM
To: [email protected]
Subject: RE: [ActiveDir] Putting a DC on VMware
Things to keep in mind that others mentioned but I just
wanted to emphasize.
1. Understand your supportability position. If you do not
have a Premier contract or a contract through a services organization such as HP
you do not even have best effort support for the OS on VMWARE. You will need to
reproduce any issues on hardware (or Virtual Server) to get MS to engage. If you
have Premier you get best effort but could still end up having to reproduce
outside of VMWARE.
2. Security security security security. Who owns the hosts
running the DCs? They better be domain admins because they could be if they
wanted to be.
3. Exchange is supported on only Virtual Server R2 and
under a very specific set of circumstances.
joe
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Etts, Russell
Sent: Monday, January 30, 2006 5:55 PM
To: [email protected]
Subject: [ActiveDir] Putting a DC on VMware
Hi all
One of our sites is looking to put two DCs on VM ware. I'm not too sure this is really the best thing to do. Am I being too paranoid? Can anyone point me in the right direction regarding suggestions on running a DC on Vmware? Even if there are white papers for running Exchange 2000 on Vmware?
Thanks all
Russ
Remember, you can't spell "Quality" without "IT"
