Solved

Backing Up AD?

Posted on 2004-08-26
9
238 Views
Last Modified: 2010-03-18
Is it possible to back up Active Directory, with all the accounts, groups and properties?

What's an easy way to do this, please?

Thanks
Jason
0
Comment
Question by:Jason210
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 3
9 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 11900899
Yes either using the built in backup (ntbackup) or an NT aware backup system, like Vertas :) or ARCServe:(

just make sure you select system state, and the AD database will get backed up

Pete
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 200 total points
ID: 11900913
To back up system state on a domain controller

1.
 Log on to the domain controller by using an account that has Domain Admins, local Administrator, or Backup Operator credentials.
 
2.
 Start the Windows NT Backup Wizard by choosing one of the following options:

• Open a command prompt, type ntbackup and press ENTER.
 
• Click Start, point to Programs, then point to Accessories, then point to System Tools, and then click Backup.
 
 
1.
 Click the Backup Wizard button, and then click Next.
 
2.
 Select Only back up the system state data.
 
3.
 In the Where to Store the Backup box, select the Backup Media Type by choosing one of the following options:

• Choose File if you want to back up to a file. If you do not have a tape backup unit installed, File is selected automatically.
 
• Choose a tape device if you want to back up to tape.
 
 
1.
 In the Backup Media or File Name box, choose one of the following options:

• If you are backing up to a file, type a path and file name for the backup (.bkf) file, or click the Browse button to find a folder or file. If the destination folder or file does not exist, the system creates it.
 
• If you are backing up to a tape unit, choose the tape that you want to use.
 
 
1.
 After you click Next, the Completing the Backup Wizard screen appears. This screen summarizes the options selected for this backup job. Verify that Prompt to replace data is listed in the How category. If it is not, click the Advanced button, click Next until you reach the Media Options screen, and then select Replace the data on the media with this backup.
 
2.
 Complete the remaining wizard screens, and click Finish to begin the backup operation. When a Replace Data dialog box appears, click Yes to overwrite the existing backup on this tape or file path with this backup. A progress indicator shows the status of the backup operation.
 
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/maintain/opsguide/part2/adogdapb.mspx#XSLTsection124121120120
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11900929
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 
LVL 11

Author Comment

by:Jason210
ID: 11901001
Many thanks Pete.

Not quite sure if system state was what I wanted, so should be obliged if you can tell me what "Back Up System State actually means". I put the points up a little here for your trouble.

Say I need to reinstall Windows 2K Server. I start with an install, configure everything, and then put back the file structure from CDs manually. Then, can I use the System state back up to re-create the account structure?

The only thing then left to do is to create the right permissions - I can handle that.

The problem is that if the server software is getting into a hanging state, ghosting or backing up the entire disk doesn't work because you just end up backing up the errors. I want to make provision for a re-install scenario. Are you with me?

0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11906868
>>Say I need to reinstall Windows 2K Server. I start with an install, configure everything, and then put back the file structure from CDs manually. Then, can I use the System state back up to re-create the account structure?

Correct - system state backs up the registry on any PC

BUT!

>>put back the file structure from CDs manually

you dont need to do the above

install the operating system (fresh) then run a full restore (if you backed everything - "all drives & system state" up)

- system state backs up the registry on any PC
on a domain controller system state also backs up the active directory, this is a file called NTDS.DIT - if you have ONE domain controller you can resore in this way if you have two then you only need to resore AD if you know the broken domain controller has the only good copy of AD backed up - this is VERY rare. then you would need to do a restoe in authorative mode (Ive NEVER had to do this and Ive fixed A LOT of servers :)

If your running a domain in a decent size corporate enviroment I STRONGLY suggest you get some "purchased" backup software - its the most important peice of software you can buy (more important than AV!) any system is only as good as its last backup :)

The version built into windows (ntbackup) is a cut down version of veritas - the full version "Veritas backup Exec 9.1" is a truely outstanding peice of kit (allways buy it with the open file option)
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11907049
ThanQ
0
 
LVL 11

Author Comment

by:Jason210
ID: 11907071
Thanks. Good that you are around to save the day!

We're not that big, we started out with just three accounts at our sub-office on a P-2-P system just 3 years ago. There are about 50 accounts now. Fast growing! But they won't spend on software like Veritas. I've already spent more than this years budget for the whole company just in our region.
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 11907168
No problem

If you cant afford backup software continue what you are doing and also get some simple scripts written that back up your users data to a PC on the network - you tend to get in trouble more for loosing user data than applications :)

0
 
LVL 11

Author Comment

by:Jason210
ID: 11910467
Thanks!
0

Featured Post

Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

FIPS stands for the Federal Information Processing Standardisation and FIPS 140-2 is a collection of standards that are generically associated with hardware and software cryptography. In most cases, people can refer to this as the method of encrypti…
Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question