Solved

Restore Active Directory

Posted on 2011-03-24
5
356 Views
Last Modified: 2012-05-11
Points of My Scenario
1. I am admin of a Windows Server 2003 domain
2. The domain has 4 domain controllers: all different server models
3. One server has failed, and I need to restore Active Directory to it from system state backup
4. I need system state restore to restore ONLY Active Directory data & NOT drivers, which cause system boot failure.
QUESTION: How do I restore system state data that is related ONLY to Active Directory?
0
Comment
Question by:waforbes100
  • 2
  • 2
5 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35210471
So you can use the procedures for a non-authoritative restore  http://technet.microsoft.com/en-us/library/cc784922(WS.10).aspx

When you say "it failed" what does that mean?  If it is a catastrophic hardware failure for example you can just cleanup that dead DC using metadata cleanup procedures (can provide more info on that)

Thanks

Mike
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 35210516
You have to restore the entire System State. You can't pick that apart.

Is it an option to reinstall the DC (including Metadata Cleanup) and promote it back as a DC?
0
 

Author Comment

by:waforbes100
ID: 35210925
To Mkline71: the error I get just before logon is the following - "Security Accounts Manager initialization failed because of the followng error: Directory Service cannot start. Error Status: 0xc00002e1. Please click OK to shutdown this system and reboot into Directory Services Restore Mode, check the event log for more detailed information."

To Snusgubben: after I click OK on the above error, the system reboots. I can get into Directory Services Restore Mode, but I am not able to find a 'smoking gun' (i.e. critical clue).
0
 
LVL 21

Accepted Solution

by:
snusgubben earned 500 total points
ID: 35211043
Have you looked at the KB regarding 0xc00002e1?

http://support.microsoft.com/kb/258062

If the database has become corrupt, it is not sure you can save it with.

The semantic checker will only fix minor errors. Leaving you to either restore the entire System State or rebuild the DC. Rebuilding is maybe the easiest option if this is a dedicated DC.
0
 

Author Closing Comment

by:waforbes100
ID: 35215047
I will have to rebuild the DC.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Synchronize a new Active Directory domain with an existing Office 365 tenant
This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

786 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question