restore active directory
- From: "Gary Karasik" <gkarasik@xxxxxxx>
- Date: Sun, 28 Oct 2007 09:52:49 -0700
Hi,
Just FYI: I had an ugly scene yesterday. I rebooted an SBS2K3 server, and
when it came up, neither Exchange Info Store nore Exchange System Attendant
would start. Various Exchange, DNS, Security, and LSA errors indicated that
nothing could authenticate, even though I was logged in. Also there were no,
as in zero, records in DNS, and I could recreate any. After many Googles, it
seemed that the problem was that Active Directory had somehow gotten munged
up. That got me to looking up how to restore AD and or System State from a
backup, which thankfully I had. Googling "restore AD" and "restore System
State" led me to confusing articles full of dire and incomprehsible warnings
about the difference between authoritative restores and non-authoritative
restores and more warnings about the dangers of NTDSUTIL, although there
were no clear instructions about how to use NTDSUTIL to restore AD and/or
SS.
I could find no articles about restoring AD or System State that pertained
just to SBS, and most of what there was about restoring AD/SS on Server 2003
was vague and scary and generally unhelpful, not to say discouraging.
I did have a System State only on-disk backup in Backup Exec, but even their
Knowledge Base article implied that I shouldn't do it and cited some MS KBs
about authoritative and non-authoritative restores.
(There was one article about restoring AD/SS from NTBackup, and that's
clearly a good way to go.)
We have a BE support contract, so I called their Tech Support. Vishnu was
happy to find out that I had a bootable system and wanted me to restore the
whole C: drive, including the SS, because, he said, if you didn't have an
up-to-date SS backup, you could end up with a blue-screen and an
unrecoverable mess.
I didn't want to restore the whole C: drive because it was already 11 at
night and would take hours. I couldn't do it anyway because BE has a
tendency to fail on the SS portion of a whole-disk backup, so I have a
separate and fast SS backup-to-disk that runs once a week. Since one backup
was on tape and another on disk, there was no way to do an all-at-once
backup of both, and he said doing them sequentially wouldn't work.
The SS backup was current, so he had me boot into Directory Restore mode,
change all the BE services to Local System Account so they could start,
change a coupe of settings, then run a restore-System-State. The following
reboot was a normal, beautiful thing. No worries about authoritative or
non-authoritative restores when there's just on DC.
The NTBackup System State restore is just as straightforward.
--
GaryK
.
- Follow-Ups:
- Re: restore active directory
- From: Claus
- Re: restore active directory
- Prev by Date: SBS 2003 Built in backup
- Next by Date: Problem with Windows Update: proxy authentication required
- Previous by thread: SBS 2003 Built in backup
- Next by thread: Re: restore active directory
- Index(es):
Relevant Pages
|
