Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1071
  • Last Modified:

Domain Controller with FSMO (What to backup using BackUp Exec 12.5)?

Good day everyone. As the title states. I am looking at creating a backup job for the DC that holds all the FSMO roles in case the server goes down, I can reinstall the roles on another DC or bring up a new server as a DC and install roles on there.

All I see to backup is the System State, Shadow Copy Components, and the C drive. What do I need to backup?

Also, is there a good guide that could walk me through the process of restoring the FSMO roles on another box if the disaster occurred?

By the way, the server is a Windows 2000 server which we will be looking at migrating the FSMO roles to another server with newer OS and demoting this server soon enough.
0
mig1980
Asked:
mig1980
5 Solutions
 
Mike KlineCommented:
so pick system state, that will get you everything you need for AD.   If the box crashes hard  you would seize the FSMO roles   http://www.petri.co.il/seizing_fsmo_roles.htm

and go through metadata cleanup

***again above steps is if disaster occurs that you asked about....otherwise transfer them gracefully/normally and demote it using dcpromo

Having backups is important but if a server dies hard it is often easier to just do the seize/cleanup and rebuild.

The AD team just addressed this last week in their mailsack

http://blogs.technet.com/b/askds/#rebuildrestore

Thanks

Mike
0
 
djsharmaTechnical ConsultantCommented:
Configure backup of server using ntbackup.exe
http://technet.microsoft.com/en-us/library/cc875807.aspx.


Transfer the FSMO roles on the newer OS.
http://support.microsoft.com/kb/255690
0
 
mig1980Author Commented:
Thank you all for your response. mkline71, I took a look at the http://www.petri.co.il article on seizing the roles but I have a few questions I am confused about.

I would be backing up the DC with the FSMO roles in case it went down. If it went down and I couldn't get it backup, where would I seize the roles from? How do the backups come into play and where do you restore them (on a new DC or existing DC)?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Mike KlineCommented:
If it didn't come back up and you were not going to restore you would seize the roles on the server/domain controller that you wanted to have the roles.

You would use the backup on the existing DC if you wanted to restore.  You would not use it on a new DC.

The backup is more important if for example you deleted objects and wanted to restore them.  In Windows 2008 R2 the recycle bin helps with that.

Thanks


Mike
0
 
sharjeel ashrafSenior Network EngineerCommented:
when moving FSMO roles, you would need to have at least 2 DC's in the domain, if you have one then you can not build a new DC's in the current forest / domain as there would be no server to talk to.

if you have 2 servers, then it is ideal to split the FSMO roles across both, use PDC, RID, infrastrictre master on the DC that you authenticate to, which normally would have your DHCP and Primary DNS roles, and kepp the other 2 Roles on the secodn DC's scheme and domain naming master. this way not all the roles are in one place, and should you have a failure then it is easier to either move or seize the roles to the remaining server.

backup exec is a good product but in the past i have come across issues when restoring a full system backup on the same hardware. it doesnt always recreate the shares properly. alos if you are looking to use backup exec, i would look at DR restore options, this would create a boot disk normally a CD, that you boot from and then restore the server without having to load any OS. if you dont then loading OS covers most of the work the backup exec job would have done, and at this stage its quicker to just run DCPROMO and go through the options of adding this server to the existing domain.
0
 
mig1980Author Commented:
so, then are you guys saying that backing up the DC with the FSMO roles or any DC (which we currently have four) is not needed or a waste of time and space?

I mean, if I can seize the roles and transfer them over to another DC, then why would I need backups?
0
 
Mike KlineCommented:
No we are not saying that at all, always good to have a backup of at least two DCs.

What if you deleted a user or users. That backup will save you because you can restore those users.  In case of a full server failure...then you have other options (seize/rebuild)

Thanks

Mike
0
 
mig1980Author Commented:
That makes sense. OK. I will follow this practice. Much appreciated guys. I will leave this open for a few days until I complete my backups and then I will assign points.
0
 
mig1980Author Commented:
One more question...you mention to have a backup of at least two DCs. Why would I backup more than one DC? I was under the impression that all DCs shared the same information (with the exception of the FSMO roles holder).
0
 
NetfloCommented:
As a general recommendation for your domain controllers in your environment, they should all be backed up. The fact that you can seize roles should not be a supplement to not backing up a domain controller.

You'll find in the event of disaster it can be a messy process of cleaning up the AD, updating your DHCP, DNS, etc. Updating the DNS for any statically assigned machines, devices, etc would also need to be taken into account too.

If your domain controllers are strictly that and not file servers or print servers then a simple Windows Backup or NT Backup will suffice and generally I don't see it take much space either. Plus you don't necessarily need to buy additional Remote Agent for Windows Systems, a simple NAS or removable USB drive will be okay.

At the end of the day you're managing your environment and you know what resources you have available to you. You can backup just the FSMO DC, two DCs or all.
0
 
mig1980Author Commented:
Thank you very much for the details. That was exactly what i was looking for.
0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now