David,

Did you check into shadowing? I know that the shadow file follows the same
rules as the main file, as of where it has to reside.

So maybe John could explain why it is so with shadowing! I see shadowing
as a good start for fail-over, but if you can't create a shadow and
maintain it on another system on the network, it's not worth having
shadowing capabilities in the first place(for a good part). If the system
where FB crashes, because of the motherboard let go, the downtime is too
great even if shadowing is used. On the other hand if shadowing can be
performed over the network, on another system, then you simply get the
other system to run as if it was the one that went down. Maybe this could
be looked into for version 1.0.

This is just my 2 cents.

Daniel Rail
Senior System Engineer
ACCRA Med Software Inc. (www.accramed.ca)