Solved

Non-Authoritative Restoration for a VM Domain Controller

Posted on 2012-03-21
2
559 Views
Last Modified: 2012-03-21
We had one of our 2003 Child Domain Controllers go down for a week.  This DC is "Primary" (holds the three roles) for the Child Domain.  I would like someone to make me feel better in how I would go about restoring this DC.  Which one should I do

1. Restore my VM Backup of this DC, then do a Non-Authoritative Restoration.   With this, I would not do any NTBACKUP Restore, cause of VM being before it went down.


or

2.  Seize the Roles on another Child DC and then Recreate a New Child DC and Seize the Roles Back.


Please direct me, also if you have comments or concerns.
0
Comment
Question by:teknorapex
2 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 250 total points
Comment Utility
I'd go with number 2 but

1.  You would have to metadata cleanup that dead DC http://www.petri.co.il/delete_failed_dcs_from_ad.htm

2.  When you put the new DC on the network you don't have to seize the roles back you can gracefully transfer the roles (don't seize in that case)

Thanks

Mike
0
 
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 50 total points
Comment Utility
I agree with mkline71.  Just create a new DC with the old server's IP.  If you have 2008 DCs, the metadata cleanup is supposed to be automatic when you delete the failed DCs computer object in ADUC.

http://technet.microsoft.com/en-us/library/cc816907(v=ws.10).aspx#bkmk_graphical
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now