Re: Test Domain



Inline

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Andy Wolsten" <AndyWolsten@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0ED4F94E-73FA-4055-B8BB-93D86CF40B1D@xxxxxxxxxxxxxxxx
Thanks Paul,

the instructions make sense basically to get the AD from live environment
then use to create a test one. I have a few questions though.

- How can we remove the AD DC object of the new server from production
which
is moved off the production domain. Does this cause any issues?

In the details of my article it notes to demote the DC once you have backed
it up, other than removing the NS record in DNS there is nothing else you
should have to do.


- The process indicates on the test DC in test domain, we delete the DC
objects of the DC's present in the production domain. We actually require
these DC's to remain since we are trying to create a complete replica of
production. We need to incorporate exchange in to this test domain at some
point. Can we maintain these old DC objects in the domain somehow. Can we
add a new server to the test domain and restore our exchange db here, will
this work ok?

If you have the same hardware as in production you could simply do a restore
of the dc's you are trying to recover, but make sure you have access to your
FSMO server. The fsmo piece could present a problem for you so if you
really are insistent on all names being the same yo umay want to do a
graceful transfer of the fsmo roles to your temp dc before you do the
backup, backup the temp dc, transfer the fsmo roles back and then demote the
temp dc. Thereby once you do the restore in the test environment your fsmo
roles will reside without having to do a seizure. I don't recall off hand
which fsmo roles but there is at least one that once it is seized you should
never restore that server.

As far as Exchange is concerned I think your best bet would be to ask an
Exchange expert in the Exchange news group, but again if you have the exact
same hardware you could do a restore in the test environment and that would
work.


- We are not just trying to replicate AD but our entire server
infrastructure, server names etc since it is fairly small - 3 DC's, 1 with
exchange.


"Paul Bergson [MVP-DS]" wrote:

I have an article on AD duplication, but I don't cover Exchange.

see http://www.pbbergs.com
Select Articles and click on creating a test domain




--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

"Andy Wolsten" <AndyWolsten@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C6C75F84-D3A0-4C27-B5B9-6D4F2A56EC18@xxxxxxxxxxxxxxxx
Hi,

I currently have a 2003 AD production domain with Exchange 2003
standard
and
would like to create a test domain, being a replica of the production
domain.

Can anyone please advise on the easiest way to create a copy domain on
a
seperate network of our current AD domain.

thanks muchly





.



Relevant Pages

  • Re: Cloning AD groups (incl. SIDs) between production/test enviro
    ... disasterous if you allow production and test to ever speak to one another. ... I need also the SID's of the security groups, because there is a member ... I use the next commandline from the production domain controller for the ... when I go to the memberserver in the test domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cloning AD groups (incl. SIDs) between production/test environmen
    ... disasterous if you allow production and test to ever speak to one another. ... I need also the SID's of the security groups, because there is a member ... I use the next commandline from the production domain controller for the ... when I go to the memberserver in the test domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Copy users and groups to test DC?
    ... to log in to the test or production domains. ... you need your test domain to trust the production domain ... DNS queries about the test domain. ... records from the test domain sitting on your production DNS servers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: General DNS config questions
    ... pointing to our Exchange Server. ... way and I'm now getting emails on the test domain address. ... emails from Hotmail are still getting delayed, ... another to resolve the A record to its IP address). ...
    (microsoft.public.windows.server.dns)
  • Re: Cloning AD groups (incl. SIDs) between production/test environmen
    ... See this articles about creating a test environment from the production one: ... I use the next commandline from the production domain controller for ... when I go to the memberserver in the test domain. ...
    (microsoft.public.windows.server.active_directory)

Loading