Solved

How to reconnect a child domain in a failed PDC

Posted on 2004-09-10
6
477 Views
Last Modified: 2008-01-09
I have single server acting as PDC for the forest and multiple child domains.
The PDC of the forest failed, so I reintalled the operating system, but I am unable to reconnect the child domains to the new PDC.
Please help
0
Comment
Question by:riyami
6 Comments
 
LVL 5

Expert Comment

by:tstaddon
Comment Utility
Have you restored the System State Data from backup?

If you had only one domain controller at the top level of your Active Directory, and you have no backup of its System State Data, then I would imagine you're in rather a lot of trouble.

Think about it this way: all your other domain controllers, workstations and so on, all recognize that machine as the ONLY authoritative description of the directory and it is the only server which can tell them where they reside within the directory. Also, they identify the server by its SID, not by whatever alphabetical name you give it.

Simply put, your child DCs will NOT function properly - not even between each other - until that server's System State Data cannot be retrieved. So, if you do not have that information backed up, you are really going to have to consider rebuilding your directory.
0
 
LVL 25

Expert Comment

by:mikeleebrla
Comment Utility
i agree with tstaddon 100%,,, you can't just rebuild the DC and think it will magically work again,, you have to restore the AD database from backup,,, without doing that,, the newly rebuild DC "knows" nothing about the child domains, workstations, user accounts etc,,, it thinks its a new domain.
0
 

Author Comment

by:riyami
Comment Utility
I have system state, the problem is that the original server physically damaged. I reinstalled the OS then did the system state restore, but when rebooting the machine hang. So I thought the system state is useless since the actual server is diffirent (Hardware wise) then the server I am using as a replacement.
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 4

Accepted Solution

by:
vnicolae earned 500 total points
Comment Utility
You have no choice but to restore the system state. (to my knowledge) There is no way to recreate the implicit trust that exist between a parent and a child domain. If you do not want to restore everything, do a non-autoritative restore and select what exactly you want to recover.


Vlad
0
 

Author Comment

by:riyami
Comment Utility
It is almost true that there is no way but recreate all the trust relation, the problem is that we can not add child domains to the new domain except if we made the childs clean of AD. But what we did is that we installed windows 2k srv on a new machine then used program called newsid.exe to make the new machine SID as the failed server then installed new AD with the same name as the old then used the system state to restore. That steps gave us some time to plan our down time for creating the new domain because the restore is not perfect, we are unable to add users, machines or even look at the users, the restored AD machine complain that there is:
1- NO DNS
2- NO GC
3- NO SYSVOL
I was able to correct 1,3 but 2 the system comlain that it does not have enogh rights to write to it.
in short i did not mind since I will plan my down time.
*** By the way any body knows what went wrong with our original AD server to act that way, not accept system state retore at once, we had to tweak it for more that 2 days.



0
 
LVL 4

Expert Comment

by:vnicolae
Comment Utility
just a quick note... I was never able to restore the AD (system state) with ArcServe. On different ocasions, I was able to do it with NetBackup and with the integrated NTBackup. Not to bitch... but CA's tech support is lousy and they too were unable to help with restoring from ArcServe. The backups were ok, I was able to restore files but not the AD....

Vlad
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Introduction Often we come across situations wherein our batch files would be needing to reboot Windows for a variety of reasons. A few of them would be like: (1) Setup files have been updated whose changes can take effect only after a reboot …
I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension (http://www.experts-exchange.com/discussions/210281/Attachments-with-no-extension.html). This reminded me of questions tha…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now