Solved

Restore a child domain from parent

Posted on 2008-10-27
12
943 Views
Last Modified: 2012-05-05
Is there anyway to restore a child domain from the parent domain? Our China office lost it's server and they had not done any backups. Am I stuck rebuilding the whole domain for them?
0
Comment
Question by:kevlause
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
  • 4
12 Comments
 
LVL 70

Expert Comment

by:KCTS
ID: 22811825
No - and you will have to do a metadata cleanup to remove the traces of the failed domain and server form your domain before you attempt the re-create it - see http://www.petri.co.il/delete_failed_dcs_from_ad.htm
0
 

Author Comment

by:kevlause
ID: 22811830
Is there anyway to log into the old DC as it's still up and running?
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22811833
Unfortunately, yes. If you had Exchange database - we might have used Mailbox Recovery Centre to recreate users for you, however without backup - you cannot restore domain partition ever.

Please check on any of the boxes if a system state backup has EVER been taken - again, i am not talking about disk level / file level.

Keeping my fingers crossed.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 70

Expert Comment

by:KCTS
ID: 22811857
If its still up and running you should be able to login as the domain administrator - if this does not work then you may be able to re-start and log-in in safe mode
0
 

Author Comment

by:kevlause
ID: 22811878
When I try it just says the domain does nto exist or can not be contacted. I'm not sure what the guy out there did as we had two domain controllers and now neither of them are working.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 22811914
It sounds like either AD has stopped or DNS is misconfigured - not much you can do without restarting - (and hope it re-starts)
0
 

Author Comment

by:kevlause
ID: 22811937
He has restarted both server repeatedly and all he can't log into either, it just says DC isn't there. He just told me he has a system state backup. I'm going to have him turn off both, rebuil done, and resote AD to it, then rebuild the other under a new name and dc promo it. Then we will remove all links to the old DC.Does that make sense? That way the second one won't overwrite the restored one?
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22812030
Those errors can be mis leading. Please do not take conclusions by what those errors state.

Why not ask some one out there to reboot into safe mode with networking OR directory service restore mode - check using any of these methods are you able to enter the box.

Try some of these steps.
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22812077
Ooops i didnt read your comment.

"He has restarted both server repeatedly and all he can't log into either, it just says DC isn't there. He just told me he has a system state backup."

IF this be the scenario - simply perform a authoritative restore of one DC, and ask him to promote the other DC with same name OR promote it with new name - dcpromo.

Do not worry about the second one - simply concentrate on first DC.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 22812275
Make sure you do an authoritative restore, see http://support.microsoft.com/kb/241594
0
 

Author Comment

by:kevlause
ID: 22820626
Well I think we are scewed here. The language barrier is getting in the way and I don't know what my couter part in China is actually doing any more. He said he has done "everything" I have suggested but won't answer any direct questions so I don't know what has worked and what hasn't. Is there anyway to just recreate the domain and readd all the users manually? If I did that could I ever get the mailboxes back?
0
 
LVL 33

Accepted Solution

by:
Exchange_Geek earned 500 total points
ID: 22824833
Well, as i said earlier you can get back all your users from your mailboxes - this is just a 15mins story. However, you will lose all your computer account + permissions (customized) in your AD.

you would have to manually add all those computers once again - reset all those group polices (if created any) - reset all those permissions (if created any).

Do not worry about those users - there are loads of step-by-step documentation that would help you get back all those information from Exchange.

Oh and talking barriers - please stop emailing such people - get on phone.
0

Featured Post

Enroll in May's Course of the Month

May’s Course of the Month is now available! Experts Exchange’s Premium Members and Team Accounts have access to a complimentary course each month as part of their membership—an extra way to increase training and boost professional development.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question