Solved

Backing up/Restoring Windows Server 2008 Active Directory

Posted on 2009-05-14
3
285 Views
Last Modified: 2012-05-07
Hello,

I have 4 Windows Server 2008 Domain Controllers (all the same Hardware/HP Proliant Server) on my single Domain network.  I read the Microsoft Technet article (http://technet.microsoft.com/en-us/library/cc816584.aspx) about Backing Up Active Directory Domain Service, but I wanted to ask the experts if this was necessary since I have 4 Domain Controllers that replicate with each other.

I have three quick questions:

#1:  What would be the best practice with Backing up these Domain Controllers, and how would you have it set up.

#2:  Also, lets say that one of the Domain Controllers crashed, how would I get it back up and running?  Would I use the backup I created from the Technet article, or would I start from scratch, then have that server rejoin the domain and replicate with the other Domain Controllers?

#3:   What if the Domain controller that held all of the roles crashed, what would be the best way to get him back online.

I would just like to know what is the quickest, safest, and easiest way to get a Domain Controller back online after it has crashed.

Thank you!


Randy
0
Comment
Question by:rgutwein
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 24385102
#1  Backing up at least one DC gives you what you need but I'd at least backup up two of them.   Where I am we have 20 DCs and we backup the 4 DCs in our hub site
If you backup all 4 that is ok too but you don't need to
#2  You could do either although it is easier just to rebuild and let AD replicate.  If you need to restore an object you would do an authoritative restore.
#3 - If it crashed and you couldn't bring him back you could seize the roles http://support.microsoft.com/kb/255504  and then do a metadata cleanup on it http://support.microsoft.com/kb/216498   Then you can rebuild (similar to #2)
You could also try a restore.
Thanks
Mike
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 24385128
Caveat to #2 about the authoritative restore.  Since you are at 2008 soon R2 will be out and you also can use the recycle bin option for object restores (you have to be at Windows 2008 forest functional level)
 
http://technet.microsoft.com/en-us/library/dd392261.aspx
 Thanks
Mike
0
 
LVL 5

Author Closing Comment

by:rgutwein
ID: 31581446
Thank you so much!
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article outlines the process to identify and resolve account lockout in an Active Directory environment.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question