Solved

Server 2008 Active Directory integrity check

Posted on 2010-09-17
9
2,777 Views
Last Modified: 2012-05-10
Receiving an error in Symantec Backup Exec 12.5:

Final error: 0xe000035a - The consistency check of the snapshot for the Microsoft Active Directory, ADAM or AD LDS database has failed. You should check for possible data corruption in the Active Directory, ADAM or AD LDS Server that is online.


The following error is received when trying to backup the System of the Domain Controller with the GRT option for Active directory selected and Active Directory Recovery Agent (ADRA) license is not installed.
Final error: 0xe000035a - The consistency check of the snapshot for the Microsoft Active Directory, ADAM or AD LDS database has failed. You should check for possible data corruption in the Active Directory, ADAM or AD LDS Server that is online.


This error points to the Active Directory Reocvery Agent in Backup Exec, we have not had this agent installed nor do we have a license for it.

Symantec support pondered this for approx. 4 months then decided that this was not their issue.  They referred me to:

http://technet.microsoft.com/en-us/library/cc780814.aspx
http://technet.microsoft.com/en-us/library/cc770715.aspx

I guess my question is what is the easiest way to Detect/Repair the integrity of the Active Directory?
0
Comment
Question by:Cyber_Junkie
  • 4
  • 3
  • 2
9 Comments
 
LVL 39

Expert Comment

by:Adam Brown
ID: 33704729
I don't know if their support pointed you to this, but it's worth a look (and to make sure something wasn't overlooked by them, since Symantec is...yeeaaah...): http://seer.entsupport.symantec.com/docs/286216.htm
0
 
LVL 39

Expert Comment

by:Adam Brown
ID: 33704744
Basically, that link says you should disable the option to restore individual items in Active Directory when taking your backups. Without the Granular Restore Technology used by the Active Directory Recovery Agent, you will only be able to run full backups of Active Directory rather than backing up individual objects.
0
 

Author Comment

by:Cyber_Junkie
ID: 33704745
Thx but we are not using backup to Disk, we are still using tape and we don't have exchange installed on this server.
0
Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

 
LVL 39

Expert Comment

by:Adam Brown
ID: 33704763
The fix still applies. Without the Active Directory Recovery Agent, GRT is just screwing up your backup because it doesn't know how to view individual objects in Active Directory. Turning off the option to "Enable the restore of individual objects from Active Directory backups" will disable the GRT check prior to backup. This should fix your problem. And it's not a difficult thing to just try out.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 33704792
Start with ntdsutil and check it first. Using the procedures outlined http://technet.microsoft.com/en-us/library/cc961819.aspx (see Ensuring file integrity...)
On a 2008 box you can stop the AD service and check. In 2003/2000 you would have to boot and hit F8 and go into DSRM mode
If it fails http://technet.microsoft.com/en-us/library/cc816754(WS.10).aspx
If I'm betting I'd say your DB is ok
Thanks
Mike
0
 

Author Comment

by:Cyber_Junkie
ID: 33704826
I have gone through the backup job and I don't see the option to remove the check for "Enable the restore of individual objects from Active Directory backups."  I found online under settings Microsoft Dicrectory where it should be, but in my backup job, the Microsoft Active Directory line item is not there.
0
 

Author Comment

by:Cyber_Junkie
ID: 33705042
Will stopping the NTDS service also allow me to run the integrity check, it state in the article that it has to be run in Directory Services restore mode?

I stopped the NTDS service, started following the produre.  Typed in Ntdsutil <Enter> then Files <Enter> received Active Instance not set.  To set an active instance use "Activate Instance ".  I an only assume that there is a step missing and Activate Instance should be entered before files.  
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 33706474
Yeah stopping the service will also do it. (mentioned that in my comment) That article is not updated for 2008.

You are right you have to first set an active instance.  See my screenshot from my 2008 R2 lab DC.  I reproduced your error then activated the ntds instance.

Thanks
Mike
Integrity-Check.png
0
 

Author Comment

by:Cyber_Junkie
ID: 33712512
Successful, no errors
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article explains the steps required to use the default Photos screensaver to display branding/corporate images
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question