Solved

Restore Active Directory

Posted on 2011-03-24
5
358 Views
Last Modified: 2012-05-11
Points of My Scenario
1. I am admin of a Windows Server 2003 domain
2. The domain has 4 domain controllers: all different server models
3. One server has failed, and I need to restore Active Directory to it from system state backup
4. I need system state restore to restore ONLY Active Directory data & NOT drivers, which cause system boot failure.
QUESTION: How do I restore system state data that is related ONLY to Active Directory?
0
Comment
Question by:waforbes100
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35210471
So you can use the procedures for a non-authoritative restore  http://technet.microsoft.com/en-us/library/cc784922(WS.10).aspx

When you say "it failed" what does that mean?  If it is a catastrophic hardware failure for example you can just cleanup that dead DC using metadata cleanup procedures (can provide more info on that)

Thanks

Mike
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 35210516
You have to restore the entire System State. You can't pick that apart.

Is it an option to reinstall the DC (including Metadata Cleanup) and promote it back as a DC?
0
 

Author Comment

by:waforbes100
ID: 35210925
To Mkline71: the error I get just before logon is the following - "Security Accounts Manager initialization failed because of the followng error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information."

To Snusgubben: after I click OK on the above error, the system reboots. I can get into Directory Services Restore Mode, but I am not able to find a 'smoking gun' (i.e. critical clue).
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 500 total points
ID: 35211043
Have you looked at the KB regarding 0xc00002e1?

http://support.microsoft.com/kb/258062

If the database has become corrupt, it is not sure you can save it with.

The semantic checker will only fix minor errors. Leaving you to either restore the entire System State or rebuild the DC. Rebuilding is maybe the easiest option if this is a dedicated DC.
0
 

Author Closing Comment

by:waforbes100
ID: 35215047
I will have to rebuild the DC.
0

Featured Post

Instantly Create Instructional Tutorials

Contextual Guidance at the moment of need helps your employees adopt to new software or processes instantly. Boost knowledge retention and employee engagement step-by-step with one easy solution.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question