locked
Active Directory User and Password Sync RRS feed

  • Question

  • Hi,

    We have virtualised development labs that are direct clones of our production environment, including names, IP addresses and Active Directory. These labs are ring fenced using virtual network appliances with firewall rules that allow access to specific ports. The issue we have is that when passwords expire either in the labs or in production AD, it causes issues for our developers. Also, when new users are created in production, the process has to be repeated in multiple labs which is a bit of a time sink, even with scripts.

    Currently we sporadically do system state restores to AD controllers in the labs to get them in sync with prod but this also requires us re-adding all the servers back onto the domain and again is tedious process. Is there any way to sync from production AD to the labs AD?

    Thanks in advanced.

    Mark

    Wednesday, October 29, 2014 8:54 AM

Answers

  • Hi Mark,

    Is there any way to sync from production AD to the labs AD?

    We can only synchronize AD data between Domain Controllers within the same forest/domain.

    Although I am not sure that why you need a production environment and a cloned lab environment, since we can easily achieve fault tolerance by setting up multiple Domain Controllers.

    Best Regards,

    Amy

    • Marked as answer by Amy Wang_ Sunday, November 9, 2014 10:04 AM
    Thursday, October 30, 2014 6:37 AM
  • If it is an isolated environment, you won't be able to synchronize the data.  

    Export/Import, Backup/restore, P2V, D2VHD etc are the only option. 


    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    • Marked as answer by Amy Wang_ Sunday, November 9, 2014 10:04 AM
    Thursday, October 30, 2014 6:08 PM

All replies

  • Hi Mark,

    Is there any way to sync from production AD to the labs AD?

    We can only synchronize AD data between Domain Controllers within the same forest/domain.

    Although I am not sure that why you need a production environment and a cloned lab environment, since we can easily achieve fault tolerance by setting up multiple Domain Controllers.

    Best Regards,

    Amy

    • Marked as answer by Amy Wang_ Sunday, November 9, 2014 10:04 AM
    Thursday, October 30, 2014 6:37 AM
  • If it is an isolated environment, you won't be able to synchronize the data.  

    Export/Import, Backup/restore, P2V, D2VHD etc are the only option. 


    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    • Marked as answer by Amy Wang_ Sunday, November 9, 2014 10:04 AM
    Thursday, October 30, 2014 6:08 PM