Re: AD backup



A lot of things are "possible". In the case of a Domain controller, the best DR strategy is always to have a second DC. If you set it up properly (DNS, DHCP, GC, etc.), you will, at worst, have to seize the remaining FSMOs and continue until you can re-build the DC and add it back into the domain. Meanwhile, your users will, at worst experience a slower logon. This assumes that the workstations have both DCs in their DNS settings.

If money is tight for hardware, you can even use a decent workstation as a second DC until you can get better server-class hardware.

Regards,
Hank Arnold

Geoff Lane wrote:
"Manny Borges" <manny_borges@xxxxxxxxxxx> wrote in
news:#$M9hgCXGHA.2268@xxxxxxxxxxxxxxxxxxxx:

Using my 10-media strategy, I can thus retrieve system state images
from up
to 12 weeks ago (with granularity increasing with age).
Unfortunately, no. You can go back up to 60 days MAX unless you modify
the tombstone value for AD objects. See here: http://support.microsoft.com/?id=216993

Thanks.

Although I would have backups from the last five business days, and three preceding fridays, and one or two months within the default tombstone value, the article you quoted does give instructions to recreate a domain from older backups:

"If every server in the domain is destroyed, restore one server from an arbitrarily outdated backup, and replicate all other servers from the restored one."

The article then gives instructions on how to "fudge" the tombstone value. One of the tools used to do that is ADSI scripting - I have a nice ADSI VBS library, so that should not present too much of a problem!

That said, hopefully I won't ever need to restore from a system state backup older than a couple of weeks - so the 60-day tombstone value shouldn't be an issue.

Thanks again,

.



Relevant Pages

  • Re: Company Web Restore after Reload
    ... I got the backups off the old drives, ended up having to remount them and do ... I need the server to access the ... you can restore the companyweb database. ... > The second situation is to restore a Microsoft Windows SharePoint Services ...
    (microsoft.public.windows.server.sbs)
  • Re: Diaster Recovery 101 (MSEX5.5)
    ... > ISINTEG -patch and could not start the Exchange Admin Console to ... said it could not find an Exchange server... ... >>> restore my brick level backups for the required mailboxes... ...
    (microsoft.public.exchange.admin)
  • Re: AD backup
    ... The best DR strategy is still backups. ... A second DC does nothing to address disaster recovery if you have ... the tombstone value for AD objects. ... "If every server in the domain is destroyed, ...
    (microsoft.public.windows.server.general)
  • Re: SBS2003 rebuild
    ... Bearing in ming that the server is running fine at the moment -what is the best method of backing up and restoring as much as possible - e.g. Active Directory, Exchange options and data, directory structure and permissions. ... Make yourself some full backups, restore a few files at random to verify the backup is good, and then plan on flattening the server. ... Steve Foster [SBS MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Restore tombstoned AD with ASR
    ... The server that I restored the tombstoned AD to by first rolling back the ... I am going to try a restore from ... than the preset AD tombstone lifetime as indicated in your post. ... state backup made according to KB 240363. ...
    (microsoft.public.windows.server.sbs)

Loading