DC for new Hyper-V cluster

right now, we have old physical servers for domain, DHCP, file share and SQL. Management decided to virtualize all services to save costs.  I like to build a small cluster with 2 Hyper-V servers and Synology shared storage. As failover cluster requires domain controller I am on the fence, where to install DC:

  • on old or buy 2 new servers

  • on Hyper-V servers

  • as virtual machine

What do you think?


Solution 1:

Virtual Domain Controller (DC) is a way to go!

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/virtualized-domain-controllers-hyper-v

P.S. Two of them with enabled DC replication, actually.

https://www.windowscrush.com/setting-up-additional-domain-controller-adc.html

Solution 2:

You can easily run DC as VM on Hyper-V nodes, just run it as a local and not clustered VM. Separate servers may be the best option, if you don’t mind expenses and additional management.

The option with DC role installation directly on host with Hyper-V is against best practices and cannot be recommended. Some explanation here -

www.hyper-v.io/combining-hyper-v-dc-role-server-bad-idea