Link to home
Start Free TrialLog in
Avatar of amoos
amoos

asked on

How to restore Active Directory to a new server???

we are running server 2003 r2 enterprise edition.  i want to take a copy of active directory and put it on the r&d server that i have.  now when i backup the system state on my production server everything is fine and then when i restore it the system state on my r&d server the server just constantly reboots.  now i am assuming this is because my production server is IBM and my r&d server is Dell.  so the hardware differs.  since this might be the case then how can i get a copy of my production active directory onto my r&d Dell server without connecting to my production network???   can i do an export and then an import through csvde???
Avatar of DCMBS
DCMBS
Flag of United Kingdom of Great Britain and Northern Ireland image

You can do this in server 2003.  The process is called Restoring a Domain Controller using local media.  Basicaly you take a system state backup of your existing DC, restore this backup to the target DC and run dcpromo /adv to tell it to restore the AD from the local media source
Avatar of amoos
amoos

ASKER

Awesome. That is exactly what I am looking for. Do you have steps on how to do this completely?  Does it matter if the hardware is different??  Do I have to have active directory installed on the new server before I do the restore???  Wonderful help!!!
See http://technet.microsoft.com/en-us/library/cc961934.aspx

The process is really designed for adding an additional DC at a remote location.  You can use this procedure to install active directory on the remote server without having to wait for replication to occur over a slow link, so it doesn't matter if the hardware is different.  You  use this procedure to install active directory on the target server so AD should not already be installed on it
Apologies I think the link above is the wrong link.

The better link is http://www.petri.co.il/install_dc_from_media_in_windows_server_2003.htm
Avatar of amoos

ASKER

ok i have followed the instructions and read the microsoft articles.  i know i am doing everything right but i get the same result everytime.  the server just keeps on rebooting and rebooting.  is there anyway i can get a copy of my active directory onto this new server??  i know it is probably the HAL but when i try to do a repair the administrator password that i use keeps telling me that it is wrong so i cannot even do a repair.

can i use csvde to export a copy of active directory and then import it into the new server????
Avatar of amoos

ASKER

can i use LDIFDE??
You cannot transfer AD from one machine to another.  The only way is to install the second machine as an additional Domain Controller and allow AD to replicate.  The procedure I outlined allows you to install AD from backup media but must be followed exactly.  You cannot just restore AD to the second machine - you must restore to an alternative location and then run dcpromo /adv,  install as an additional DC and select the alternate location as the source for the system files so that AD is installed and the initial replication is done from the system files rather than over the network.  This allows dcpromo to install just the hardware independant parts of AD from the system files.  I should format the target machine to ensure that it is in a clean state and then follow the above procedure.  It could be that you have had issues because of the failed previous attempts which have left the O/s in a dirty state and this is preventing the installation of AD>
Avatar of amoos

ASKER

ok i see now.  sorry i guess i did not follow the instructions you outlined.  sorry it has been a long long day.  ok see my steps below and tell me if i am doing the right thing

1. install server 2003 OS
2. run in directory services mode
3. run ntbackup and restore system state to an alternate location
4. start windows normally
5. run dcpromo /adv
6. in dcpromo run to create a secondary DC and choose the alternate location as the source

can the alternate location be c:\recoveredAD??? instead of the default c:\???  i only have one drive on this server
I am not sure about step 2.  Directory services restore mode is only available if the machine is already a domain controller ?

The alternate location can be any location of your choice. It should not be the default location.

So run ntbackup on existing domain controller and backup system state
the install server 2003 on target server
run ntbackup and restore system state to alternate location.
run dcpromo /adv and install as additional domain controller selecting the alternate location as source
Avatar of amoos

ASKER

ok now  that i followed the directions properly here is what i run into.  since this r&d server is not on my domain, when i go through the dcpromo i get to where it asks me for the domain credentials but wont go any further than that because it is not on the domain.  i cant have this r&d server on my production domain.  is there anyway around this??
If it's not on the domain why do you need the Domain AD on it ?  Can you not just install AD using the same Structure etc for research purposes ?
Otherwise the only way I can see is to temporarily connect it to the domain whislt you install AD and then disconnect it from the network.
Avatar of amoos

ASKER

i am trying to get active directory on my r&d network because i am having to test some software that will conflict with our production enviornment.  my AD has 3000 objects, users, etc in it so i cannot manually replicate it.  is there anyway to do what i am trying to do or is it impossible???

-Connect your server(DEll) to prodution environment.
-Promote the server as an ADC.
-Install DNS & other required service to the ADC.
-After replication & all is well on DELL server,disconnect from the network.
-Take it into separate VLAN & seize the FSMO role on the DELL server as it is separate & it will not affect.
-From production server run metadata cleanup & remove the DELL server.
Metadata is simple & will not affect your network in any way.
http://www.petri.co.il/delete_failed_dcs_from_ad.htm 
-This is the proper way you can do it.
As hardware is different system state back up will not achieve the desired result.
-Restoring or configuring server using Acronis or 3rd party images is not supported ny MS & if its configured you will face USN rolback,netlogon pause.
I think above method is better & much appropriate to get the server in R&D & experiment.
Avatar of amoos

ASKER

you are right this would be the easiest and best way to do what i want to do.  but could you explain 2 things to me that you mentioned??

1. how do i seize the FSMO role once the Dell server is disconnected??

2. i read the metadata cleanup link you posted, can you give me steps on how to do this metadata cleanup so i do not mess anything up??

awesome help
Avatar of amoos

ASKER

the link you gave me for the metadata cleanup is great.  can i use the gui part instead of using the command prompt part??  or do i have to use both??  the gui part will be much easier for me to use.

also how do i seize the FSMO role once the DELL server is disconnectted from the production network?
Using Ntdsutil.exe to transfer or seize FSMO roles to a domain controller
http://support.microsoft.com/kb/255504

Once you have siezed the roles you must not connect the R&D DC to the production domain again under any circumstances.  If you are only going to be using the R&D machine for a short period you may get by without siezing the roles
Avatar of amoos

ASKER

thank you.

the link you gave me for the metadata cleanup is great.  can i use the gui part instead of using the command prompt part??  or do i have to use both to cleanup the metadata??  the gui part will be much easier for me to use.
ASKER CERTIFIED SOLUTION
Avatar of DCMBS
DCMBS
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial