Eddie C wrote: > I can not give an authoritative answer, but if your active directory > is 2003 server your active directory itself is multimaster ( no more > PDC and SDC ). It seems theorically possible to install active > directory sync on both nodes but leave it running only on one domain > controller. Something like this: > > > AD2 <-> AD1 > | > LoadBalancer > | > FD2 <->FD1 > This is a cool idea, but it may not work because FDS uses the AD sync control to perform incremental inbound updates. It's quite likely that the two AD servers would have different states for the sync cookie. You could work around this by initiating a full sync when failing over between ADs.