Design a fault tolerant site    An offline site is usually low risk unless there is an urgent need to deploy a critical update or a need to create Configuration Manager 2007 Network Access Protection policies to restrict network access. If the Configuration Manager 2007 site server is offline, it does not necessarily stop all Configuration Manager 2007 operations. For example, clients can still process existing advertisements if content is available on distribution points. Configuration Manager 2007 supports clustering the site database. You can also replicate the site database information, which is usually done for performance reasons, but would also allow a site system to access replicated data, even if the site database is offline.

Create a backup and recovery plan    Recovering a failed Configuration Manager 2007 site is a complex task. For more information, see Maintaining Configuration Manager 2007.

Test your backup and recovery procedures    Backup procedures are worthless unless they are periodically tested. Configuration Manager 2007 backup and recovery are complex procedures and should be routinely tested to ensure service continuity in the event of site failure.

Secure your backup media    The Configuration Manager 2007 backup task makes copies of the registry, the file structure, and the Configuration Manager 2007 site database. Attackers who gain access to the backup media could gain valuable information about the network, such as IP addresses, Active Directory site names, and the state of all client computers. Attacks involving backup media are potentially as serious as physical attacks against servers. As with all backups, store Configuration Manager 2007 backup media in a secure location, consider encrypting the backup files, and institute a controlled procedure to check out and restore the media.

Use role separation to increase recoverability    It is common in small sites for all roles to be installed on the site server. This increases the risk that if the site server is unavailable, all Configuration Manager 2007 functionality is disabled. If possible, configure a management point that is not on the site server to increase availability to the clients. Configure multiple reporting points and distribution points. You cannot create more than one default management point for the site, but you can use a computer with RAID, or other fault tolerant features. Alternately, you can keep a spare management point running, and configure it as the default if the first management point goes offline.

The following table describes the effect of various site systems being offline.

Other Resources