Home / server / Questions / 418112
Accepted
Frederik
Asked: 2012-08-17 00:56:47 +0800 CST

Change IP of AD server to new subnet - keep clients IP

  • 772

Some background: We are about to move a customer's server to our facilities, but as that server is a DC, I see some issues with that.

The two sites will be connected with a VPN tunnel. The server will get an IP in the 10.0.0.0/30 (or something similar) subnet, while the clients are in a 192.168.100.X/24 subnet (will be changed from 192.168.1.X/24)

Anything I should think about? Is this some huge operation to do, or is it quite simple?

I think, that as long as the DC remains the primary DNS for the clients, it doesn't really matter what IP it got?

windows-server-2003

2 Answers

  1. Best Answer

    You should really consider leaving the DC in the current site. Without a DC at the physical site, you will need to pass all authentication/ DNS/ DHCP traffic across your VPN pipe. If it is slow or down, you will have major issues. Moving it can work and you can tweak where the clients will look for DCs (AD Sites & Subnets MMC), but it's recommended to have a local DC at the physical site.

    Out of curiosity, why are you moving the DC? If you are concerned about the security of the DC, you could always replace it with an RODC.

    • 4

  2. No problem as presented - I would definitely review "Sites and Subnets" afterwards and make sure that reflects the new environment, which will be important if a new DC is added to the customer site instead of the colo.

    • 1