AD servers with multiple IP addresses

[nicholab]

What the best way of dealing with AD servers with multiple IP addresses. I found that I have 5 DC with multiple IP addresses and I what to move them on to one IP address each.

 

Any pointers on getting there?

[ZeroHour]

Are there multiple dns records for each DC?

[nicholab]

Yes there are multiple DNS records for DC. Also the FSMO is on the backup server.

[pete]

Could you expand a bit on the situation?

 

Are you saying:

 

DCs 1 to 5 are all actively using multiple IP addresses* assigned to different network interfaces and they respond to traffic on those IPs?

 

or...

 

Are you saying you've got some legacy/invalid DNS records lying around that relate to those DCs?

 

or a mix of both?

[HPlum78]

5 DC's wow how many users/ devices are you supporting? or is it a site thing you have going on? anyhow like Pete says above need a little more info on the design. That said it is best practise to only have DNS listening on one IP address (if my memory serves) and the fact that there are multiple registrations in DNS is down to DNS registration and having multiple IPs assigned to the DC's is my guess, is this a multiple NIC setup? FSMO Roles what do you mean by its on the backup server? there are 5 such FSMO roles and I am not understanding the backup bit, are you saying that this server is running your backup solution and a/ all FSMO roles?

 

Run the following to get what FSMO roles are where

 

Get-ADDomainController -Filter * |

Select-Object Name, Domain, Forest, OperationMasterRoles |

Where-Object {$_.OperationMasterRoles} |

Format-Table -AutoSize

 

Also a Get-AdForest would also be useful, feel free to redact any sensitive bits in the outputs, and post the outputs.

 

Harry

[HPlum78]

oh and just another thought

 

get-wmiobject Win32_NetworkAdapterConfiguration -ComputerName -EA | ? {$_.IPEnabled}

 

do the above and replace the bit with the names of your DC's

 

Harry

[nicholab]

I just checked the 5 FSMO role are on the server running the backup solution. This site has about 300 clients in AD. Where is the best place to move FSMO roles to, a DC in hyper-v local storage?

[mikkydoos]

Have you got multiple NICs with leads plugged in without NIC teaming set up ??

[nicholab]

Multiple virtual NIC's plugged in to a teamed connection on the host.

[HPlum78]

I would take a look at this and then make your call from there https://social.technet.microsoft.com/Forums/windows/en-US/f5dea401-5a3b-4ddb-8bb8-8d2b2e2db55b/teamed-network-cards-for-domain-controllers?forum=winserverDS with 5 DC's is there a need for NIC teaming? you need to answer that first, then I would consider the placement and what other roles you require those DC's for (the backup solution may not be best placed on a DC). We have c20,000 user and c9,000 device in the prod environment and have 4 DC's (we only have 4 to comply with the data centre design principals and polices, we could actually run 2 DC's in practice).