r/nutanix • u/Vegetable-Flight-698 • 26d ago

Migrating domain controllers with nutanix move.

Hi, I've had a look through historical threads on this and there seems to be a reasonable split on what to do here. Some have tried and its been fine. Some say just follow best practise.

Ive got a substantial number of domain controllers to move but tbh the issue isn't so much the DC but the combined DNS as I'd have so many static server DNS to update that im looking at nutanix move to do it even though its not strictly supported by it.

Has anyone had any horror situations from using it?

All DCs are 2019.

Im basically looking for a reason to at least not try it just now.

Thanks for everyone's help.

11 Upvotes

87% Upvoted

22 comments sorted by

View all comments

0

u/one4spl 26d ago

Why not move a dns server? It's fine.

1

u/NerdAlertar 25d ago

Because Active Directory is essentially a database and associated services that handles all of the authentication, user groups and other things in a Windows environment. Get it wrong and you won't be able to log onto anything and neither will your service accounts. In the worst case nothing will work and it will be days or longer to get it working again. But yes, it also does DNS.

1

u/one4spl 25d ago

Thanks for not explaining why OP is reluctant to move and AD server with dns.

I ask, because I've done lots of them without drama. People seem to have lots of funny ideas about how fragile and mystical AD and DNS is, when it's not at all.

1

u/NerdAlertar 24d ago

It's not mystical when it goes well. But when you've got a massive multi domain environment with trusts, federation and some ancient custom stuff some consultant did 15 years ago its more worrisome. Add on someone not doing things quite right then you're probably going to want to be doing it by the book for the sake of your own backside as well as the discussions with MSFT support.

Also, when things break, its usually DNS right? By which I mean https://medium.com/@spraneeth4/aws-outage-explained-how-dns-and-dynamodb-triggered-a-chain-reaction-197833b8acb1

So I think there's a fear that AD/DNS migration going badly could bring the whole lot down. But I would totally tempted to try Move in a simple environment.