Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2916
  • Last Modified:

Server 2008 Active Directory integrity check

Receiving an error in Symantec Backup Exec 12.5:

Final error: 0xe000035a - The consistency check of the snapshot for the Microsoft Active Directory, ADAM or AD LDS database has failed. You should check for possible data corruption in the Active Directory, ADAM or AD LDS Server that is online.


The following error is received when trying to backup the System of the Domain Controller with the GRT option for Active directory selected and Active Directory Recovery Agent (ADRA) license is not installed.
Final error: 0xe000035a - The consistency check of the snapshot for the Microsoft Active Directory, ADAM or AD LDS database has failed. You should check for possible data corruption in the Active Directory, ADAM or AD LDS Server that is online.


This error points to the Active Directory Reocvery Agent in Backup Exec, we have not had this agent installed nor do we have a license for it.

Symantec support pondered this for approx. 4 months then decided that this was not their issue.  They referred me to:

http://technet.microsoft.com/en-us/library/cc780814.aspx
http://technet.microsoft.com/en-us/library/cc770715.aspx

I guess my question is what is the easiest way to Detect/Repair the integrity of the Active Directory?
0
Cyber_Junkie
Asked:
Cyber_Junkie
  • 4
  • 3
  • 2
1 Solution
 
Adam BrownSr Solutions ArchitectCommented:
I don't know if their support pointed you to this, but it's worth a look (and to make sure something wasn't overlooked by them, since Symantec is...yeeaaah...): http://seer.entsupport.symantec.com/docs/286216.htm
0
 
Adam BrownSr Solutions ArchitectCommented:
Basically, that link says you should disable the option to restore individual items in Active Directory when taking your backups. Without the Granular Restore Technology used by the Active Directory Recovery Agent, you will only be able to run full backups of Active Directory rather than backing up individual objects.
0
 
Cyber_JunkieAuthor Commented:
Thx but we are not using backup to Disk, we are still using tape and we don't have exchange installed on this server.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
Adam BrownSr Solutions ArchitectCommented:
The fix still applies. Without the Active Directory Recovery Agent, GRT is just screwing up your backup because it doesn't know how to view individual objects in Active Directory. Turning off the option to "Enable the restore of individual objects from Active Directory backups" will disable the GRT check prior to backup. This should fix your problem. And it's not a difficult thing to just try out.
0
 
Mike KlineCommented:
Start with ntdsutil and check it first. Using the procedures outlined http://technet.microsoft.com/en-us/library/cc961819.aspx (see Ensuring file integrity...)
On a 2008 box you can stop the AD service and check. In 2003/2000 you would have to boot and hit F8 and go into DSRM mode
If it fails http://technet.microsoft.com/en-us/library/cc816754(WS.10).aspx
If I'm betting I'd say your DB is ok
Thanks
Mike
0
 
Cyber_JunkieAuthor Commented:
I have gone through the backup job and I don't see the option to remove the check for "Enable the restore of individual objects from Active Directory backups."  I found online under settings Microsoft Dicrectory where it should be, but in my backup job, the Microsoft Active Directory line item is not there.
0
 
Cyber_JunkieAuthor Commented:
Will stopping the NTDS service also allow me to run the integrity check, it state in the article that it has to be run in Directory Services restore mode?

I stopped the NTDS service, started following the produre.  Typed in Ntdsutil <Enter> then Files <Enter> received Active Instance not set.  To set an active instance use "Activate Instance ".  I an only assume that there is a step missing and Activate Instance should be entered before files.  
0
 
Mike KlineCommented:
Yeah stopping the service will also do it. (mentioned that in my comment) That article is not updated for 2008.

You are right you have to first set an active instance.  See my screenshot from my 2008 R2 lab DC.  I reproduced your error then activated the ntds instance.

Thanks
Mike
Integrity-Check.png
0
 
Cyber_JunkieAuthor Commented:
Successful, no errors
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

  • 4
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now