In this task, you configure a second domain controller to be available as a replacement in the event that the primary one fails. You also configure a backup of the first domain controller to the second one.
To test the individual functions, create a documentation for the entire task 2 a single document with all test scenarios using this template:
In this document you document all tests that you carry out. If the tests turn out badly, leave the test results in the documentation and carry out new tests after making the necessary adjustments, which you then also enter in the documentation.
Carry out the basic installation of the second domain controller according to the instructions for the first (see task 1).
If you have created an image in step 2b of task 1, you can now use this to set up DC2.
The host name of this server should be DC-ZH-02 should be. The other specifications remain the same.
Give the server the static IP address 10.0.2.25 and gateway 10.0.2.1
Promote the DC2 to a domain controller.
Activate the Windows Server Backup feature on DC-ZH-01 and create a daily backup.
The following requirements must be met:
Create a test scenario to test the backup domain controller. Also test whether the backup data can be restored from DC2 to DC1. Use the documentation file created at the beginning of task 2 for documentation.
In order to be able to guarantee the operation of the network despite a failure of DC 1 the files of the file share service and the user home must also be stored on the second server, and the set paths do not run via DC1. This can be done with DFS.
Share the „D:\“ drive and give the „domain users“ read and change authorisation.
Create a folder on „D:\“ with the name „Dotcom Rep“ and share it with the same permissions as above. the same permissions as above.
Install the DFS roles on both servers
Configure a namespace with the following settings:
Now create a replication group with the following settings
https://www.nakivo.com/blog/configure-dfs-replication-for-windows-server/ (Guide to creating a DFS infrastructure)
https://learn.microsoft.com/en-us/windows-server/storage/dfs-namespaces/add-namespace-servers-to-a-domain-based-dfs-namespace (Adding a namespace server)
To ensure that the shares and the userhomes can still be reached via the network addresses, you must change the paths of the mapped drive and the userhomes.
Change them so that they can be reached via the namespace so that in the event of DC 1 they are still accessible.
Once you have completed the above steps, you can now test the DFS service.
To do this, abruptly shut down DC 1 (make sure that DC 2 is switched on), and now try to access the shared folders and the userhomes via the client via the network addresses
Record the executed tests in the log.
Create a concept that fulfils the following requirements:
A subfolder is to be created in the backup folder for each day of the week, in which the backups are saved on the respective day of the week and consequently overwrite those of the previous week.
Find out for yourself which tools you can use to realise this. Also create a test scenario for this task and document your tests in the documentation file created at the beginning.
Before you complete the task, please answer the following questions in your documentation file.
→ Continue here to Task 3