The CyberArk Vault Disaster Recovery (DR) service should not be running on the DR Vault when the primary Production Vault is up. This is because the DR service is meant to be activated only during a failover scenario, where the primary vault is down, and failover operations need to be managed from the DR vault. Running the DR service while the primary vault is operational can cause conflicts and operational issues.