Solved

Consequences of Restoring System State from backup

Posted on 2008-10-07
6
1,539 Views
Last Modified: 2012-05-05
I cannot access Active Directory on our SBS2003 domain controller and after some research it appears as though the correct course of action is to restore the system state data from a backup.

What are the side effects of restoring the system state data from a backup from last Friday? Will it effect Exchange anyway?

Any other precautions in doing so? (I've never had to do this before)

On a sidenote this problem seems to be a continuation of a problem I reported yesterday with the SysVol folders permissions.

http://www.experts-exchange.com/Networking/Protocols/DNS/Q_23791187.html

Any help is greatly appreciated as we are dead in the water.
0
Comment
Question by:waltb123
  • 4
  • 2
6 Comments
 
LVL 24

Expert Comment

by:ryansoto
ID: 22660210
What exactly is the ongoing issue at this point?
Reading your previous post it looks you can try to rebuild the sysvol and netlogon folders
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B315457
0
 

Author Comment

by:waltb123
ID: 22660277
The issue is that I cannot load AD on the DC at all. One of the side effects of that issue is that everyone is getting authentication errors while trying to access applications such as CRM that are on another server.

I'm reading your link now.

I've found information I think may be related to my problem, regarding FRS tombstones preventing a DC from becoming a DC. I've just tried this below

1. Stop the File Replication service on the domain controller.
2. Start Registry Editor (Regedt32.exe).
3. Locate and then click the BurFlags value under the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
4. On the Edit menu, click DWORD, click Hex, type D4, and then click OK.
5. Quit Registry Editor.
6. Move data out of the PreExisting folder.
7. Restart the File Replication Service.

However I still cannot access AD. I think a reboot may be in order and will do so shortly.
0
 
LVL 24

Expert Comment

by:ryansoto
ID: 22660330
Yup that does work well, reboot and post back
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:waltb123
ID: 22660370
Now that I'm thinking about it, I think I know what may have caused this problem in the first place (but I still dont know how to fix for sure).  Nearly a year ago our BDC crashed and burned.

The server itself was replaced. I never did promote the new fileserver to a BDC and I've seen errors in the event viewer regarding FRS trying to replicate with the now non-existent BDC. I removed every trace of the old server from AD and DNS but apparently this isnt where FRS info is stored because I still saw errors trying to replicate with the old server.

I'm going to open a new question in regards to how to properly remove the old BDC from FRS.
0
 

Author Comment

by:waltb123
ID: 22660385
reboot in 30 minutes, I'll be back with an update.
0
 

Accepted Solution

by:
waltb123 earned 0 total points
ID: 22660830
Reboot wasnt necessary. All is ok now after the above mentioned procedure and some help with how to remove a failed BDC from AD via this link.

http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23794168.html

0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question