Solved

Active Directory Backup

Posted on 2003-11-26
5
396 Views
Last Modified: 2011-09-20
In a few days Im going to redo my PDC.  I would like to backup a few of the organizational units of the active directory and not all of it.  Is there a way to only back up parts up the directory and restore them later?

Or do i have to backup everything and then from the restore only do the parts I want?
0
Comment
Question by:jamesPeck
5 Comments
 
LVL 18

Expert Comment

by:chicagoan
ID: 9824952
NTBackup can only backup the whole AD.
Why wouldn't you just prune the directory 1st ?
0
 
LVL 34

Expert Comment

by:PsiCop
ID: 9825039
Yeah, with AD you're stuck with a monolithic directory. Its not like Novell Directory Services (aka eDirectory) where you can partition the directory. Also, with AD, you have to make a server a DC or not a DC, and once you make that choice you can't change it without rebuilding the server. With eDirectory, you can move the directory replicas around pretty much at will.
0
 

Author Comment

by:jamesPeck
ID: 9825124
Are there any utilities out there for backing up and restoring the directory?  Other the NT BACKup of Veritas?
0
 

Accepted Solution

by:
littleBuddha512 earned 50 total points
ID: 9831558
0
 
LVL 5

Expert Comment

by:tstaddon
ID: 9858003
Unless your AD is a monolithic one with tens of thousands of objects, you can simply backup the System State Data.

But the database itself is a single file - NTDS.DIT - and on your PDC it will probably be holding a number of master roles (eg PDC emulator, Global Catalog, Schema Master, Infrastructure Master, RID Master etc), so it's always going to be better if you backup the entire database.

As long as you have at least one other domain controller in the same domain, ideally providing at least one of the FSMO roles (I'm thinking the GC) you can ensure that restoring the system state data will be enough.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question