I performed a disaster recovery restoration of Active Directory on a computer with a different hardware configuration. To do this I Performed a full backup of the domain controller, including the system state and the drive that contains the system volume.
The Restore was OK. But netlogon and sysvol share are missing.
Any suggestions are greatly appreciated.
Windows Server 2003Active DirectoryStorage Software
Last Comment
Chris Dent
8/22/2022 - Mon
shniz123
FRS should replicate those folders and content. This link is stated for Windows 2000 but it's information is valid to help you troubleshoot the issue further. I'd start at FRS and check for any replication problems.
Yes this errors are listed in event viewer:
1030, 1006, 1054, ...
One thing that I does not explain is that this is a test for a DRP. In which we simulate to have a Full backup full of a DC, and in a restored alternate place with another computer.
cmadrigal
ASKER
Are there some warnings in Event viewer. File Replication Service:
13566, 13508,
I ready try with the article recommed but did not worked.
Chris Dent
Hey,
Does the AD environment have more servers than one? Is this server attempting to replicate from those?
You can attempt an authoritative rebuild of the FRS Replica set using the D4 flag described in this article:
If there is more than one DC involved you should set the flag on the second to D2 (non-authoritative restore) which will force it to replicate from the server which performed authoritative restore.
You need the FSMO roles, specifically the RID Master but ideally anything that isn't set to be on a live DC.
You're familiar with how to seize them I guess?
Chris
cmadrigal
ASKER
No sir, I have never done this work
Chris Dent
Okay, in that case we should have this bit first :)
If you seize these roles the current role holder can never be restored or brought onto the same network. It would have to be rebuilt as a brand new DC.
That done, this is how we take them over:
Start, Run, cmd
ntdsutil
roles
connections
connect to server <the_current_working_dc>
quit
select operation target
list roles for connected server
quit
This tells you where they are. You need to take over any that aren't accounted for. Continuing on it's time to start taking things over, only do the ones here that you need:
I think for DR it would be better to do the following:
1. Install a clean Win 2003 box - ensure you have DNS
2. Do a DCPROMO
3. Restore system state using http://support.microsoft.com/kb/240363
To test this I would do it on a isolated networ so test it correct and not affect the current environment.