Solved

Restoring a DC after FSMO roles moved to another DC in the domain

Posted on 2010-09-23
5
751 Views
Last Modified: 2012-06-21
Hi there,
I need some advice on a failed domain controller. This is basically the scenario of what happened.

We had an HDD failure on the primary DC and the server were taken down.
Whilst the server were down we seized the FSMO roles over to secondary DC, ensured it was a GC and ensured that all the servers point to this DNS.

We are now trying to restore the old DC from Symantic backup, but in order to do this the old DC needs to be a DC so that we can do restore in directory service restore mode. We want to restore the old DC, specifically as this were the CA server. Yes I am aware that bringing this server back into the domain can cause havoc, but we will do the restore and then before the server start back up we will unplug from the network.

My question is basically how feasible does this solution sound and if there is anyone that has done some dort of similar restore before where all the roles has been moved from the primary DC and then trying to restore the primary DC back again from backup?

Looking forward to a response.
0
Comment
Question by:msiebrits
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 33744766
Since you seized all the FSMO roles off that box, do not bring it back online.  That will cause issues like you already noted,  consider that server dead and gone.
What you will want to do is run a metadata cleanup of it from yoru good DC   http://www.petri.co.il/delete_failed_dcs_from_ad.htm
Then you wipe the box and you can rebuild and promote it again.
Thanks
Mike
0
 

Author Comment

by:msiebrits
ID: 33744935
Thank you for the advice Mike. The problem we have is that that server were the only CA certificate server and we need to get the certificates back somehow, hence the reason why we were trying to restore it. Then once restored we wanted to backup the CA certification authority to another server.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 33745138
Won't blow smoke on this one...I've never tested or gone through that scenario (seized FSMO with CA).  Brining the seized RID master back online will definitely  cause issues.
See if you get any other responses...may eventually need a PSS call.
Thanks
Mike
 
0
 

Author Comment

by:msiebrits
ID: 33745501
Right, we might have to look at this from a different perspective then. If I were to create a new CA then on a new DC what will be the implications with the current certificates out there? Will we have to add certificates onto every device again? Is there any way of say restoring the cersrv folder onto this new CA, and might this help?
Just looking for ideas and if anyone knows of a possible solution.
0
 

Author Closing Comment

by:msiebrits
ID: 33858153
I did not receive any other solutions regarding this question
0

Featured Post

MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question