|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
AD Disaster RecoveryWe are currently palnning a disaster recovery site. We currently have a
single forest with 3 domains. We have a empty root, a accounts domain, and a workstation domain. If we lose all domain controllers can we restore AD accounts domain to a differnet hardware server? Does anyone have any suggestions on restoring to different hardware and no other domain controllers to replicate from? Thanks Arun You can restore to different hardware but it does not always go smoothly
depending on how different the hardware is. The following kb discusses it http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 I suggest that you read the AD operations guide. It has an AD disaster recovery section http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en There is also a webcast Disaster recovery webcast http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 -- Show quoteHide quote-- Tim Hines, MCSE, MCSA ===================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... > We are currently palnning a disaster recovery site. We currently have a > single forest with 3 domains. We have a empty root, a accounts domain, and a > workstation domain. If we lose all domain controllers can we restore AD > accounts domain to a differnet hardware server? Does anyone have any > suggestions on restoring to different hardware and no other domain > controllers to replicate from? > > Thanks > Arun Thanks I will try the suggestion...do I have to restore the root domain
controller before I restore the child(accounts)?. If I restore the child will AD complain of the missing root domain? Thanks Arun Show quoteHide quote "Tim Hines [MSFT]" wrote: > You can restore to different hardware but it does not always go smoothly > depending on how different the hardware is. The following kb discusses it > http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 > > I suggest that you read the AD operations guide. It has an AD disaster > recovery section > http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en > > There is also a webcast > Disaster recovery webcast > http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 > > > -- > -- > Tim Hines, MCSE, MCSA > ===================================================== > When responding to posts, please "Reply to Group" via > your newsreader so that others may learn and benefit > from your issue. > ===================================================== > This posting is provided "AS IS" with no warranties, and confers no rights. > > > > "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message > news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... > > We are currently palnning a disaster recovery site. We currently have a > > single forest with 3 domains. We have a empty root, a accounts domain, and > a > > workstation domain. If we lose all domain controllers can we restore AD > > accounts domain to a differnet hardware server? Does anyone have any > > suggestions on restoring to different hardware and no other domain > > controllers to replicate from? > > > > Thanks > > Arun > > > I don't believe it will matter which you restore first but the forest root
domain with the schema and domain name master fsmo roles holder would be the best dc in the forest to complete first. There will be replication attempts, etc... that will be going on and dc's complaining if any of the dc's are missing. It is just that the fsmo role holders have special significance in both the forest and domain. -- Show quoteHide quotePaul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA This posting is provided "AS IS" with no warranties, and confers no rights. "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message news:4FCB64B4-5C3A-4D04-9A53-1462F268529C@microsoft.com... > Thanks I will try the suggestion...do I have to restore the root domain > controller before I restore the child(accounts)?. If I restore the child > will > AD complain of the missing root domain? > > Thanks > Arun > > "Tim Hines [MSFT]" wrote: > >> You can restore to different hardware but it does not always go smoothly >> depending on how different the hardware is. The following kb discusses >> it >> http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 >> >> I suggest that you read the AD operations guide. It has an AD disaster >> recovery section >> http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en >> >> There is also a webcast >> Disaster recovery webcast >> http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 >> >> >> -- >> -- >> Tim Hines, MCSE, MCSA >> ===================================================== >> When responding to posts, please "Reply to Group" via >> your newsreader so that others may learn and benefit >> from your issue. >> ===================================================== >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> >> >> >> "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message >> news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... >> > We are currently palnning a disaster recovery site. We currently have a >> > single forest with 3 domains. We have a empty root, a accounts domain, >> > and >> a >> > workstation domain. If we lose all domain controllers can we restore AD >> > accounts domain to a differnet hardware server? Does anyone have any >> > suggestions on restoring to different hardware and no other domain >> > controllers to replicate from? >> > >> > Thanks >> > Arun >> >> >> Thanks, so I can't just restore the accounts domain, I have to restore the
root first? Thanks Again Arun Show quoteHide quote "Paul Bergson" wrote: > I don't believe it will matter which you restore first but the forest root > domain with the schema and domain name master fsmo roles holder would be the > best dc in the forest to complete first. > > There will be replication attempts, etc... that will be going on and dc's > complaining if any of the dc's are missing. It is just that the fsmo role > holders have special significance in both the forest and domain. > > -- > > Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA > > This posting is provided "AS IS" with no warranties, and confers no rights. > > "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message > news:4FCB64B4-5C3A-4D04-9A53-1462F268529C@microsoft.com... > > Thanks I will try the suggestion...do I have to restore the root domain > > controller before I restore the child(accounts)?. If I restore the child > > will > > AD complain of the missing root domain? > > > > Thanks > > Arun > > > > "Tim Hines [MSFT]" wrote: > > > >> You can restore to different hardware but it does not always go smoothly > >> depending on how different the hardware is. The following kb discusses > >> it > >> http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 > >> > >> I suggest that you read the AD operations guide. It has an AD disaster > >> recovery section > >> http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en > >> > >> There is also a webcast > >> Disaster recovery webcast > >> http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 > >> > >> > >> -- > >> -- > >> Tim Hines, MCSE, MCSA > >> ===================================================== > >> When responding to posts, please "Reply to Group" via > >> your newsreader so that others may learn and benefit > >> from your issue. > >> ===================================================== > >> This posting is provided "AS IS" with no warranties, and confers no > >> rights. > >> > >> > >> > >> "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message > >> news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... > >> > We are currently palnning a disaster recovery site. We currently have a > >> > single forest with 3 domains. We have a empty root, a accounts domain, > >> > and > >> a > >> > workstation domain. If we lose all domain controllers can we restore AD > >> > accounts domain to a differnet hardware server? Does anyone have any > >> > suggestions on restoring to different hardware and no other domain > >> > controllers to replicate from? > >> > > >> > Thanks > >> > Arun > >> > >> > >> > > > Paul,
I am going to jump in....I answered Arun's question (look at the top of the newsgroup...well, depending on at what time you look and how many new posts have made since the time I answered and you look!) and just happened upon this thread. This is news to me. I was always under the impression that you had to restore the Forest Root Domain first and then any children domains and then any additional domain trees (or, any additional domain trees and then any children domains....point is, Forest Root first!). I will look this up.... -- Show quoteHide quoteCary W. Shultz Roanoke, VA 24012 "Paul Bergson" <pbergson@allete_nospam.com> wrote in message news:OYdPbpaLGHA.208@tk2msftngp13.phx.gbl... >I don't believe it will matter which you restore first but the forest root >domain with the schema and domain name master fsmo roles holder would be >the best dc in the forest to complete first. > > There will be replication attempts, etc... that will be going on and dc's > complaining if any of the dc's are missing. It is just that the fsmo role > holders have special significance in both the forest and domain. > > -- > > Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA > > This posting is provided "AS IS" with no warranties, and confers no > rights. > > "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message > news:4FCB64B4-5C3A-4D04-9A53-1462F268529C@microsoft.com... >> Thanks I will try the suggestion...do I have to restore the root domain >> controller before I restore the child(accounts)?. If I restore the child >> will >> AD complain of the missing root domain? >> >> Thanks >> Arun >> >> "Tim Hines [MSFT]" wrote: >> >>> You can restore to different hardware but it does not always go smoothly >>> depending on how different the hardware is. The following kb discusses >>> it >>> http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 >>> >>> I suggest that you read the AD operations guide. It has an AD disaster >>> recovery section >>> http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en >>> >>> There is also a webcast >>> Disaster recovery webcast >>> http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 >>> >>> >>> -- >>> -- >>> Tim Hines, MCSE, MCSA >>> ===================================================== >>> When responding to posts, please "Reply to Group" via >>> your newsreader so that others may learn and benefit >>> from your issue. >>> ===================================================== >>> This posting is provided "AS IS" with no warranties, and confers no >>> rights. >>> >>> >>> >>> "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message >>> news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... >>> > We are currently palnning a disaster recovery site. We currently have >>> > a >>> > single forest with 3 domains. We have a empty root, a accounts domain, >>> > and >>> a >>> > workstation domain. If we lose all domain controllers can we restore >>> > AD >>> > accounts domain to a differnet hardware server? Does anyone have any >>> > suggestions on restoring to different hardware and no other domain >>> > controllers to replicate from? >>> > >>> > Thanks >>> > Arun >>> >>> >>> > > I believe restoration is restoration. You are restoring a machine, the
replication steps to get them all talking is another matter. You can have a child domain working just fine without the parent domain even existing anymore (Until of course you start having to do forest functions). Another way to think about it is you have a forest with a child (Or children) domain and the forest root domain only has one DC. If the dc in the root crashes then you only have the child domain left, similar to if you restored the child before the root. You can still recover that domain and get it all up and running. I am in agreement that you want to do the forest root first and I don't know why you wouldn't but it can be done. -- Show quoteHide quotePaul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA This posting is provided "AS IS" with no warranties, and confers no rights. "Cary Shultz" <cwshu***@mvps.org> wrote in message news:eeBRSmgLGHA.1048@TK2MSFTNGP10.phx.gbl... > Paul, > > I am going to jump in....I answered Arun's question (look at the top of > the newsgroup...well, depending on at what time you look and how many new > posts have made since the time I answered and you look!) and just happened > upon this thread. > > This is news to me. I was always under the impression that you had to > restore the Forest Root Domain first and then any children domains and > then any additional domain trees (or, any additional domain trees and then > any children domains....point is, Forest Root first!). > > I will look this up.... > > -- > Cary W. Shultz > Roanoke, VA 24012 > > "Paul Bergson" <pbergson@allete_nospam.com> wrote in message > news:OYdPbpaLGHA.208@tk2msftngp13.phx.gbl... >>I don't believe it will matter which you restore first but the forest root >>domain with the schema and domain name master fsmo roles holder would be >>the best dc in the forest to complete first. >> >> There will be replication attempts, etc... that will be going on and dc's >> complaining if any of the dc's are missing. It is just that the fsmo >> role holders have special significance in both the forest and domain. >> >> -- >> >> Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA >> >> This posting is provided "AS IS" with no warranties, and confers no >> rights. >> >> "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message >> news:4FCB64B4-5C3A-4D04-9A53-1462F268529C@microsoft.com... >>> Thanks I will try the suggestion...do I have to restore the root domain >>> controller before I restore the child(accounts)?. If I restore the child >>> will >>> AD complain of the missing root domain? >>> >>> Thanks >>> Arun >>> >>> "Tim Hines [MSFT]" wrote: >>> >>>> You can restore to different hardware but it does not always go >>>> smoothly >>>> depending on how different the hardware is. The following kb discusses >>>> it >>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;249694 >>>> >>>> I suggest that you read the AD operations guide. It has an AD >>>> disaster >>>> recovery section >>>> http://www.microsoft.com/downloads/details.aspx?FamilyID=4a82eccc-76d6-4431-aac4-1ef1ba11dbea&displaylang=en >>>> >>>> There is also a webcast >>>> Disaster recovery webcast >>>> http://support.microsoft.com/default.aspx?scid=kb;en-us;325560 >>>> >>>> >>>> -- >>>> -- >>>> Tim Hines, MCSE, MCSA >>>> ===================================================== >>>> When responding to posts, please "Reply to Group" via >>>> your newsreader so that others may learn and benefit >>>> from your issue. >>>> ===================================================== >>>> This posting is provided "AS IS" with no warranties, and confers no >>>> rights. >>>> >>>> >>>> >>>> "ABudhwani" <ABudhw***@discussions.microsoft.com> wrote in message >>>> news:4037E776-D57D-494A-B99D-45428EC3CFBD@microsoft.com... >>>> > We are currently palnning a disaster recovery site. We currently have >>>> > a >>>> > single forest with 3 domains. We have a empty root, a accounts >>>> > domain, and >>>> a >>>> > workstation domain. If we lose all domain controllers can we restore >>>> > AD >>>> > accounts domain to a differnet hardware server? Does anyone have any >>>> > suggestions on restoring to different hardware and no other domain >>>> > controllers to replicate from? >>>> > >>>> > Thanks >>>> > Arun >>>> >>>> >>>> >> >> > > 
Other interesting topics
mapped drives at logon
ADAM multivalue limit Problems locating PDC on win2k3 server Number of users per container (OU) in ADAM / AD Fresh Install of ADAM SP1 - Can't install without doing an upgrade Push domain account into Local computer user group? Cannot install W2003 admin pak on VS 2005 R2 instance Permissions to join machine to domain Clients get automatically locked Multiple Domain Administration |
|||||||||||||||||||||||
