Thursday, October 12, 2006

Home /cluster /msdtc /MSDTC - Confusing recommendations from Microsoft / MSDTC - Confusing recommendations from Microsoft

MSDTC - Confusing recommendations from Microsoft

Following are the two separate "best practice" recommendations from MS regarding a MSDTC configuration for Exchange cluster:

According to Exchange 2003 Deployment Guide on page number 128

Note In Windows Server 2003, it is a best practice to create a separate cluster group containing the Physical Disk, Network Name, and IP Address resources (for example, MSDTC Group), and then add the MSDTC resource to that cluster group. Creating the MSDTC resource in its own cluster group helps ensure that a failure to the MSDTC resource does not affect the overall availability of your entire cluster or Exchange resources.

Note It is not recommended that you create the MSDTC resource in the default Cluster Group or the group containing Exchange resources.

According to KB Article # 301600 (http://support.microsoft.com/default.aspx/kb/301600)

Note We recommend that you create the MSDTC resource in its own resource group, such as you would for Microsoft SQL Server, where you can do so. To do this, follow step 2 to create this new group. If you cannot do this, or if you have a light-use DTC scenario such as a cluster dedicated to Exchange Server, proceed and use the Cluster group. On dedicated Exchange Server clusters, the MSDTC resource should be placed in the default cluster group.

I believe it is very confusing. As per KB article # 301600 for Exchange the MSDTC "should" be placed in the default group. As per Exchange 2003 Deployment Guide "It is not recommended that you create the MSDTC resource in the default Cluster Group or the group containing Exchange resources." I can understand the light use of MSDTC for Exchange servers but I never came across a "shared" cluster for Exchange server. I believe it is another best practice recommendation (or industry recommendation) to use a "dedicated" cluster for Exchange. Anyone have any comments or thoughts on this?

SS

Santhosh Sivarajan

Microsoft MVP · Identity & Cybersecurity Architect

Santhosh has 30+ years of hands-on enterprise experience in Identity and Access Management, Microsoft Entra ID, Active Directory, Microsoft 365 and Zero Trust architecture. He is the author of two books on Windows Server and security, and leads consulting, assessments and training at SAG Business Group.

0 comments:

Post a Comment

Popular Posts
Workstation Trust Relationship Issue Issue: You receive the following error message, when you try to login to the domain.  The security database on the server does not have ... ADMT Service Account - Permission and Configuration The ADMT service account needs to have proper permission in source and target domains.  You don’t need to use 2 separate accounts.  You can ... My First Peek into Microsoft Exchange 2010 By Santhosh Sivarajan Before I really dive into Exchange 2010, I thought I would install and play with it first. I took some screen shots and notes during the ins... ObjectSID and Active Directory What is an objectSID in Active Directory? When a new object is created in Active Directory, Domain Controller assigns a unique value used ... AD Group Report - List Group Members in Active Directory–PowerShell Script Updated Script - http://portal.sivarajan.com/2011/10/search-ad-collect-local-admin-group.html Script #1 This script... Add Users to a Group–PowerShell Script Purpose – Add users to a group from an input file – PowerShell V2 Script.  Input file – Input file (Users.csv) contains samAccountName in... User Account Migration and Merging – Part I (ADMT) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM pre-creating user account ... User Account Migration and Merging – Part II (Quest Migration Manager) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM Pre-creating user account in... Delete Stale or Inactive Computer Accounts from Active Directory Here is an easy way to identify and delete inactive or stale computers in an Active Directory environment.  Using the dsquery command you c... Converting PowerShell (PS1) to EXE / Standalone Application As we know, there many applications available to convert a PowerShell file to a standalone executable file.  Based on my experience, PowerSh...