I am migrating from Mirroring to AGs on SQL Server 2014 / Windows 2012 R2. I will have a 2 node cluster. I need this cluster to be online at all times for a production environment.
I am reading Microsoft documentation for Availability Groups but I cannot find anything along lines of "Best Practices" for having a 2 node AG/WSFC, except that not having a witness is NOT "Best Practice". I am simply exploding with questions.
If I implement a File Share Witness
What is the best place to put my (file share) witness? Is putting it on a DC a good idea or a security risk?
Why does it have to be Windows Server as opposed to (say) a linux/NAS?
How do I prevent someone from simply deleting the file share because they don't know what it is or what its for, while not locking myself/all sysadmin out of it?
If I don't Implement a File Share Witness
Could I just remove dynamic quorum and exclude witness altogether? Is that even possible?
Is it better to just add another SQL node to my cluster, if I have one, to act as a 3rd voting party but not include any of its databases? Is that perhaps more durable?