Subscribe to Windows IT Pro
August 27, 2003 12:00 AM

Disaster Recovery with Dfs

How to reliably replicate certain types of data when planning for the worst
Windows IT Pro
InstantDoc ID #39768
Rating: (0)

Dfs Tips, Tricks, and Caveats
Before you get too excited about Dfs, realize that it has some limitations—it isn't the final solution for all your offsite data-replication needs, but it's a useful tool to get you started. The first caveat is to recognize what types of data you can replicate with Dfs. For example, Dfs works well with files that users open, change, then close until they need to access those files again. Dfs recognizes that the file has changed and replicates the new version of the file across your network, as needed. Again, Dfs replicates the entire file, not just the changes. Therefore, if you update a large file, Win2K will copy the entire new file to each of the replicas in your network.

In addition to moving data files from one replica to another, Win2K also replicates permissions between the replicas that you define in the Dfs structure. If you add or remove permissions to a folder or file in one location, Dfs will replicate those changes throughout the environment.

The only items that Dfs won't replicate are file locks—the indicators that Win2K uses to determine whether someone else is working on a file. This consideration is important and will most likely affect how you choose to define your Dfs structures. Because Dfs doesn't replicate file locks, two users could be working on the same file at the same time, each with a different copy of the file and completely unaware of the other copy. If this situation takes place and both users save their changes to the network at roughly the same time, a last-writer-wins methodology occurs. For example, one user's changes might be written to disk and synchronized, only to be immediately overwritten by changes saved by the other user. To help avoid this situation, I typically advise people to always consider synchronized replicas as backup shares only, ones that users should never access directly.

One way I typically synchronize replicas as backup shares is to define shares according to the individual sites that own documents, then define a backup share in another site. For example, a repository of sales documents from the New York office might be in a share called NYSALESDOCS. To replicate this information to London, I would create a directory, share it as NYSALESDOCS-BACKUP, then define it as a Dfs replica. This naming convention helps clarify what the share on the London server is all about.

As you can probably guess, if only one master SALESDOCS Dfs share exists for the global organization, Dfs will have a hard time forcing users into a specific share on a specific server because Dfs uses AD sites to determine whether a share is nearby.

Because Dfs replication is triggered by a file change, Dfs doesn't work well with database files that are always open—database files never really encounter a "close" operation, so the data is never synchronized. As a result, Dfs won't help you replicate your Microsoft SQL Server or Microsoft Exchange Server databases.

Keep in mind that Dfs replication is similar to disk mirroring (i.e., the system replicates whatever data it's given, good or bad). As a result, if a virus infects a user's workstation, corrupts all *.doc files, and users modify those files, Dfs will replicate those corrupted files as long as they're in the Dfs structure. This scenario is one example of why traditional backups are still necessary. Finally, by default Dfs can't replicate certain files: .bak and .tmp files and any filename beginning with a tilde (~).

Only a Partial Solution
Dfs is an affordable and reliable mechanism for providing disaster-recovery capabilities for certain types of data in your organization. Considering you've already paid for the capability, you can implement Dfs as part of your disaster-recovery plan and use it to the best of its abilities—with the sincere hope that you'll never end up depending on it.

Related Content:

ARTICLE TOOLS

Comments
  • Ryan Witt
    8 years ago
    May 11, 2004

    In response to Mike Bedford's comments:
    After setting up your root targets, links, targets, and finally the targets that you want to replicate to you can disable referral on the targets that are for "backup" so that edits don't occur on the secondary target. Make sure your root targets exist on DCs at each site (in case the WAN is down) and make sure that each site also contains copies of the "backup" targets. Note that fail-over to a "backup" set will require an administrator's intervention to change the DFS referral for each target to any "backup" copy. Recovery from failure could be hairy if you have multiple locations editing different "backup" DFS copies. I think DFS "disaster recovery" is best suited for single-locations that want cheap (and somewhat manual) fault tolerance. Make sure you run your backups off of the "primary" target or you will end up in trouble if DFS/FRS fails (sadly, I speak from experience).

  • Mike Bedford
    9 years ago
    Sep 08, 2003

    The author never sems to finish an important point made in the article of using a primary/backup relationshipo when using DFS. He says its good practice to do so, but never clearly demonstrates how to use only ONE copy of the DFS root as the primary, and only use the the backup copy in the event of a catastrophe. With an AD-enabled DFS root, how do you force users to use one copy versus the backup copy? Also, if the the domain controller is not accessible (say in a remote office who loses its WAN link to a centralized DC), but has a file server local (a primary DFS replica), will the users still be able to access the data (assuming an AD based DFS root)?

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.