Solved

Active Directory Backup

Posted on 2003-11-26
5
397 Views
Last Modified: 2011-09-20
In a few days Im going to redo my PDC.  I would like to backup a few of the organizational units of the active directory and not all of it.  Is there a way to only back up parts up the directory and restore them later?

Or do i have to backup everything and then from the restore only do the parts I want?
0
Comment
Question by:jamesPeck
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 18

Expert Comment

by:chicagoan
ID: 9824952
NTBackup can only backup the whole AD.
Why wouldn't you just prune the directory 1st ?
0
 
LVL 34

Expert Comment

by:PsiCop
ID: 9825039
Yeah, with AD you're stuck with a monolithic directory. Its not like Novell Directory Services (aka eDirectory) where you can partition the directory. Also, with AD, you have to make a server a DC or not a DC, and once you make that choice you can't change it without rebuilding the server. With eDirectory, you can move the directory replicas around pretty much at will.
0
 

Author Comment

by:jamesPeck
ID: 9825124
Are there any utilities out there for backing up and restoring the directory?  Other the NT BACKup of Veritas?
0
 

Accepted Solution

by:
littleBuddha512 earned 50 total points
ID: 9831558
0
 
LVL 5

Expert Comment

by:tstaddon
ID: 9858003
Unless your AD is a monolithic one with tens of thousands of objects, you can simply backup the System State Data.

But the database itself is a single file - NTDS.DIT - and on your PDC it will probably be holding a number of master roles (eg PDC emulator, Global Catalog, Schema Master, Infrastructure Master, RID Master etc), so it's always going to be better if you backup the entire database.

As long as you have at least one other domain controller in the same domain, ideally providing at least one of the FSMO roles (I'm thinking the GC) you can ensure that restoring the system state data will be enough.
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question