Title: Putting a DC on VMware
Exactly....I totally agree!
 
Ion V. Gott
 
 


From: [EMAIL PROTECTED] on behalf of joe
Sent: Tue 1/31/2006 10:09 PM
To: [email protected]
Subject: RE: [ActiveDir] Putting a DC on VMware

Great, two competing KB articles:
 
http://support.microsoft.com/kb/897615/
 
 
Hardware virtualization software allows you to run multiple operating system instances simultaneously on a single computer. Microsoft has two software offerings, Virtual PC and Virtual Server, which provide this functionality. Third parties also have software on the market providing this functionality. This article addresses support provided by Microsoft for its software running in conjunction with non-Microsoft hardware virtualization software.

Microsoft does not test or support Microsoft software running in conjunction with non-Microsoft hardware virtualization software. For Microsoft customers who do not have a Premier-level support agreement, Microsoft will require the issue to be reproduced independently from the non-Microsoft hardware virtualization software. Where the issue is confirmed to be unrelated to the non-Microsoft hardware virtualization software, Microsoft will support its software in a manner that is consistent with support provided when that software is not running in conjunction with non-Microsoft hardware virtualization software.

For Microsoft customers who have a Premier-level support agreement, Microsoft will use commercially reasonable efforts to investigate potential issues with Microsoft software running in conjunction with non-Microsoft hardware virtualization software. As part of that investigation, Microsoft may require the issue to be reproduced independently from the non-Microsoft hardware virtualization software. Where issues are confirmed to be unrelated to the non-Microsoft hardware virtualization software, Microsoft will support its software in a manner that is consistent with support provided when that software is not running in conjunction with non-Microsoft hardware virtualization software.
 
 
 
I agree that DCs tend to run fine on VMWARE, you need to be very sure of your position for support though so call ahead to whomever it is you will call for your MS support. I have argued the point with MS that not supporting the OS in the virtualization software that is being used by everyone to collapse datacenters down to size is a great way to get a bunch of people running in a unsupported manner.
 
 
 
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ion Gott
Sent: Wednesday, February 01, 2006 12:44 AM
To: [email protected]; [email protected]
Subject: RE: [ActiveDir] Putting a DC on VMware

Definitely good points on some of the key items to take into account when it comes to the virtualization of anything.
 
In regards to Microsoft stance on support of DC's on virtualization platforms, this changed a few months ago and it is actually now supported I believe without the premier support agreement....see http://support.microsoft.com/?kbid=888794
 
Quote from the KB:
 
Support for Active Directory domain controllers in virtual hosting environments
 
We do not test the functionality of Active Directory domain controllers in virtual hosting environments. However, we will help troubleshoot domain controllers that run in virtual hosting environments, whether the virtual hosting environment comes from Microsoft or from a third party. If the host environment causes a problem, the vendor of the host environment must provide support. One method to determine whether the host environment causes a problem is to determine whether the problem occurs when the host environment is installed on the hardware that is listed in the Microsoft Hardware Compatibility list or in the Microsoft Windows Tested Products list.
 
I have deployed Windows 2003 domain controllers on VMWare GSX and ESX server platforms at several clients over the past 5-6 months. From a performance standpoint everything functions well and overall DC's tend to make good candidates for virtualization.
 
For example on several  DL380 G4 servers with dual Xeon processes and 6GB of RAM I am running 5 domain controllers per physical server on VMWare GSX server 3.2 at different data center locations and supporting various child domains.
 
As far as the security of the physical host it was placed in an empty forest root (Another hot topic as to even being secure...I know) with hardening via local policy and ACL rights on the server itself.
 
Hope that helps...
 
Ion V. Gott


From: [EMAIL PROTECTED] on behalf of joe
Sent: Tue 1/31/2006 5:55 PM
To: [email protected]
Subject: RE: [ActiveDir] Putting a DC on VMware

Things to keep in mind that others mentioned but I just wanted to emphasize.
 
1. Understand your supportability position. If you do not have a Premier contract or a contract through a services organization such as HP you do not even have best effort support for the OS on VMWARE. You will need to reproduce any issues on hardware (or Virtual Server) to get MS to engage. If you have Premier you get best effort but could still end up having to reproduce outside of VMWARE.
 
2. Security security security security. Who owns the hosts running the DCs? They better be domain admins because they could be if they wanted to be.
 
3. Exchange is supported on only Virtual Server R2 and under a very specific set of circumstances.
 
   joe
 
--
O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm 
 
 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Etts, Russell
Sent: Monday, January 30, 2006 5:55 PM
To: [email protected]
Subject: [ActiveDir] Putting a DC on VMware

Hi all

One of our sites is looking to put two DCs on VM ware.  I'm not too sure this is really the best thing to do.  Am I being too paranoid?  Can anyone point me in the right direction regarding suggestions on running a DC on Vmware?  Even if there are white papers for running Exchange 2000 on Vmware?

Thanks all

Russ

Remember, you can't spell "Quality" without "IT"

Reply via email to