Solved

Restore Active Directory

Posted on 2011-03-24
5
354 Views
Last Modified: 2012-05-11
Points of My Scenario
1. I am admin of a Windows Server 2003 domain
2. The domain has 4 domain controllers: all different server models
3. One server has failed, and I need to restore Active Directory to it from system state backup
4. I need system state restore to restore ONLY Active Directory data & NOT drivers, which cause system boot failure.
QUESTION: How do I restore system state data that is related ONLY to Active Directory?
0
Comment
Question by:waforbes100
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35210471
So you can use the procedures for a non-authoritative restore  http://technet.microsoft.com/en-us/library/cc784922(WS.10).aspx

When you say "it failed" what does that mean?  If it is a catastrophic hardware failure for example you can just cleanup that dead DC using metadata cleanup procedures (can provide more info on that)

Thanks

Mike
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 35210516
You have to restore the entire System State. You can't pick that apart.

Is it an option to reinstall the DC (including Metadata Cleanup) and promote it back as a DC?
0
 

Author Comment

by:waforbes100
ID: 35210925
To Mkline71: the error I get just before logon is the following - "Security Accounts Manager initialization failed because of the followng error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information."

To Snusgubben: after I click OK on the above error, the system reboots. I can get into Directory Services Restore Mode, but I am not able to find a 'smoking gun' (i.e. critical clue).
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 500 total points
ID: 35211043
Have you looked at the KB regarding 0xc00002e1?

http://support.microsoft.com/kb/258062

If the database has become corrupt, it is not sure you can save it with.

The semantic checker will only fix minor errors. Leaving you to either restore the entire System State or rebuild the DC. Rebuilding is maybe the easiest option if this is a dedicated DC.
0
 

Author Closing Comment

by:waforbes100
ID: 35215047
I will have to rebuild the DC.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Synchronize a new Active Directory domain with an existing Office 365 tenant
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now