Active Directory failed and Can Not Be restored from Tape

Posted on 2008-11-17
Last Modified: 2012-05-05
Active Directory failed and Can Not Be restored from Tape

The Firm has 1 Domain Controller, 1 exchange Server, and a few application server 2 are windows 2000 servers and 1 is windows 2003 server. All servers are part of the domain, but only one is a Domain Controller, and it runs also DHCP and DNS services.

If the Active directory failed on the domain controller, what and how should one approach this issue, if one wants to bring up the operation, and rebuild the fasiling domain controller later on.

Question by:jfk1959
    LVL 35

    Expert Comment

    by:Joseph Daly
    Ideally the best way to prevent something like this happening would be to add a secondary DC so that you have at least a little failover.

    If you are going to be running with a single DC I would highly reccomend taking complete backups daily of the entire system including system state. If you cant do it to tape back it up to an external disk or another server.
    LVL 70

    Accepted Solution

    I agree the simplest way is to have a second domain controller so you don't get into this situation in the first place - prevention is better then cure. You can make onr of the existing servers a domain controller by promting it to be a DC

    From the command line promote the new machine to a domain controller with the DCPROMO command from the command line and  Select Additional Domain Controller in an existing Domain

    Assuming that you are using Active Directory Integrated DNS on the first Domain Controller, Just install DNS on the new DC (from the control panel->Windows Components->Networking Services->DNS, or Configure my server wizard), DNS will then replicate to the new domain controller along with Active Directory.

    To make the new machine a global catalog server, go to Administrative Tools, Active Directory Sites and Services, Expand, Sites, Default first site and Servers. Right click on the new server and select properties and tick the Global Catalog checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)

    Even with two DCs in place you still need to do regular backups though.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Suggested Solutions

    This is my first article in EE and english is not my mother tongue so any comments you have or any corrections you would like to make, please feel free to speak up :) For those of you working with AD, you already are very familiar with the classi…
    Synchronize a new Active Directory domain with an existing Office 365 tenant
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now