I have a dilemma about how to proceed with new AD / Hyper-V installation and would appreciate your views, experience and advice.
Situation: we are a small company with single site (25 users) and few virtualized servers (Websense, SQL, Linux mail server, ISS, app server, ...), all running as VM guests on 2008 R2 Hyper-V host that has also Fileserver, Fax server, DNS and AD roles installed (I am aware this is not recommended). None of those servers is under heavy load, but we need all of them due to the nature of our business. This configuration was running ok for years.
We've now decided to move to a new hardware and Hyper-V version 2012 r2. Options of what to install on top of what with related questions:
1) Keep the same approach --> Physical server has Hyper-V, File server, AD, DNS roles installed, everything else virtualized
- I am aware of the fact this setup is not recommended by Ms, but it was running fine for years with 2008 r2 version. Disadvantage is also that servers are HW dependent.
2) Have only Hyper-V role on physical server, everything else virtualized, including AD
- I have mixed feelings about this approach. It seems "clean" and attractive, but: shall Hyper-V be a domain member? If so, what happens to logins on cold starts if AD VM fails to start? Are there any disadvantages of Hyper-V not being a domain member?
Note: I'd like to avoid having additional physical server for second AD server, we are a small site. Everything is backed up properly so I can do fast restores if needed.
I did search the net, including serverfault, but can't get a clear idea.Some links:
- http://blogs.msdn.com/b/virtual_pc_guy/archive/2008/11/24/the-domain-controller-dilemma.aspx
- HyperV on Domain Controller or DC on HyperV?
What would you do in our situation?