Hi all,
I am currently testing our desaster scenario and try to make a documentation.
Scenario:
One DAG containing 3 databases (2x Exchange 2016 on site, 1x Exchange 2016 in Datacenter)
Exch01 (on site) holds DB01 and DB02, Exch03 (on site) holds DB03.
Exch02 located in the datacenter holds a DB copy of all DBs
In case of desaster (fire, war, bombing the city, etc), the on site hardware is lost and we want to keep services up using the hardware in the datacenter.
As 2/3 servers are shut down abruptly, the DAG will not shift the active mount to the datacenter and additional the quorum of the DAG is lost.
Now the race begins:
1. To regain quorum I would need to remove one server from the DAG (so the FS-witness would take over again), but I cannot remove any server as it "holds" the active copy of at least one DB
2. To get rid of that active DB, I would need to remove the DB Copy, what is not possible, as it is marked as active
3. To deactivate the DB I would need to move it to another DAG member, what is not possible, as DAG quorum is not available and cluster is down
At the current point I cannot find the correct way how to start.
Having two exchange in both sites would result in a FW witness that either sits on site or in the datacenter and whenever the WAN is gone, our DAG would unmount the DBs -> no solution.
Looking forward to any answer that may guide me to the correct startpoint.
Brgds, Niclas