ntds.dit file is corrupt on one DC. Is it ok to simply copy the same file from a good DC and overwrite it on the bad DC?

Hi,

One of my DC's is failing to boot because the ntds.dit file has become corrupted.  I can only boot the DC in Directory Services Restore mode.  This DC is also the Global Catalog server in my domain of 3 DC's.  I'd rather not do a forced demote on this DC because I'd then have to make another DC the Global Catalog server in the process.

Can I just simply copy the ntds.dit file from one of the other DC's and replace the corrupted file?

Thanks.
kevinfinlayAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

WeHeCommented:
no dont copy it.
boot into ad restore mode.
To use Ntdsutil to recover the Active Directory database, type "ntdsutil files repair" at a command prompt in Directory Service Restore Mode.
After the repair operation is complete, rename the .log files in the NTDS folder by using a different extension such as .bak, and try to start the domain controller in normal mode.
If the repair operation does not appear to finish, you can try to repair the database by using Esentutl.
At the command prompt, type the following command:
"esentutl /p path\ntds.dit"
After the command has finished running, rename the .log files in the NTDS folder by using a different extension such as .bak.
reboot in normal mode.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kevinfinlayAuthor Commented:
Success!

I couldn't get "ntdsutil files repair" to work because I believe it was the wrong syntax.  I believe "repair" should be "recover" but no luck using "recover.

I then followed your instrucstions for "esentutl" and it worked perfectly!

Thank you! Thank you! Thank you!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.