Solved

Restoring Virtualized Win2k8 DC from backup

Posted on 2013-01-02
16
249 Views
Last Modified: 2013-01-07
Ok, we are backing up our VM DC's every 2 hours.  

Should we need to restore one from backup how long can AD be down for and will we experience problems should we restore from a 2hr backup?  Will take a minute to restore.

and

Should we lose a DC and not be restored within hours or days what is required to restore the DC?  I assume build a new VM and add as a DC and forcibly remove roles from AD?
0
Comment
Question by:CHI-LTD
  • 7
  • 3
  • 3
  • +2
16 Comments
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 167 total points
ID: 38736936
You need to have at least 2 DCs then you don't have to worry about that. If one DC would go down then the other is serving AD services. Just remember that you cannot use restore from snapshot on your 2008 DC, the only allowed option is restore from "System State Backup" which requires new server to be installed and then you may restore it from System State

In case that yo  have more than 1 DC in your network and one of DCs would die, then you may simply do metadata cleanup of that DC and that's all

Regards,
Krzysztof
0
 
LVL 118

Assisted Solution

by:Andrew Hancock (VMware vExpert / EE MVE)
Andrew Hancock (VMware vExpert / EE MVE) earned 83 total points
ID: 38736946
AD DCs used to be 60 days before tombstone, and it would not replicate, it's now 180 days by default.

build a new VM, promote to a DC (dcpromo), depending upon which has failed, sieze the FSMO roles, and remove the old DC from AD.
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38736960
We have 2x DC's at Site A and 2x at Site B (over a VPN).

So no need to backup then?  Using acronis...  Not sure what you mean by system state..
0
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 167 total points
ID: 38736998
You should have at least 2 DCs per Site for more security. If your replication does not work over VPN you would face AD DB missing updates. Mostly inter-site replication (remote locations - different sites) issues face domain environments than intra-site replication (local sites)

Krzysztof
0
 
LVL 118
ID: 38736999
I would recommend a Backup, just in case.
0
 
LVL 37

Assisted Solution

by:Neil Russell
Neil Russell earned 83 total points
ID: 38737017
Personally I dont back up DC's at all now. A restore of an AD VM is more hastle than its worth and can cause issues.
So long as you have multiple DC's, Shoot yourself if you dont, AND you restrict DC's to being just that, no additional applications running on them, no file stores on them, just plain simple AD and DNS/DHCP services.

Now should you lose a DC you just create a new one and as everyone else says, force any FSMO roles that your old one had and meta data clean up to get rid of old one.

A thing to consider is splitting your DHCP role amongst multiple servers and splitting your scopes between them for redundancy. You dont want to lose the only DC on a site with DHCP on it do you!?
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38737020
in case?
If it blue screens or someone deletes the VM, then restoring it a few hours later will be ok then?
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38737028
Yes, split DNS and DHCP...
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 
LVL 118
ID: 38737033
yes, you can do that, restore.
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38737042
But as per neil, surely its at risk of causing issues with AD?
0
 
LVL 18

Accepted Solution

by:
Sarang Tinguria earned 167 total points
ID: 38737082
You need to understand things here

If you restore the DC from image or snapshots then you may face USN rollback issue
To know more on USN rollback follow http://utools.com/help/UsnRollback.asp

It is allways a wise decision and standard practice to have minimum 2 DC's in Domain at a site
I would also prefer to have backup of system state too...It does not cost you anything than some disk space

If you have two DC's and one goes down you can start 2nd DC in 30 Mins thats't too without disrupting services
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38737126
What triggers the event ids and issues with AD?  The amount of time?  The amount of changes made within the database(s)?  Replication?

Not sure what you mean: If you have two DC's and one goes down you can start 2nd DC in 30 Mins thats't too without disrupting services
0
 
LVL 18

Assisted Solution

by:Sarang Tinguria
Sarang Tinguria earned 167 total points
ID: 38737144
I mean you have 2 DC's in same domain and at same site assuming that you have put IP of both DC's in client DNS search order

and your DC1 crashes then all login/authentication and group policies request will be processed by DC2

in meantime you can format the crashed DC and promote that as a new DC ..with clean installation ...
0
 
LVL 1

Author Comment

by:CHI-LTD
ID: 38737153
So consensus is to back them up but in real world you wouldn't restore them, ever.  If failure occurs, build new DC, seize/transfer roles and clear old metadata from AD of failed DC?
0
 
LVL 18

Expert Comment

by:Sarang Tinguria
ID: 38737193
Yes but the backup is taken incase you have any rarest of the rare event when both of your DC's are down
0
 
LVL 1

Author Closing Comment

by:CHI-LTD
ID: 38750225
continuing with backups, every 2-3 hrs, but understand that if the dc fails that we probably wont restore from the backup, unless a last resort.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OfficeMate Freezes on login or does not load after login credentials are input.
Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now