Solved

D2 Authoritative Restore

Posted on 2013-05-28
13
479 Views
Last Modified: 2013-05-28
Hey guys

Ok, I was having FRS issues on my domain controller and so I followed the advise of a support forum and they said that my event logs were saying I should do a D2 Restore.  So I backed up the sysvol\policies and sysvol\domain and did the D2 Restore.  Now the DC is having MORE issues and no one can login.  Can I stop the NTFRS and Net Logon Services and do a restore from backup of the 2 directories I backed up or am I screwed?

I tried logging into my Partner website from Microsoft but they ARE DOWN (yes, I am pissed) and the phone number they have goes to some Dish Network crap.

Thanks
0
Comment
Question by:jonmenefee
  • 7
  • 5
13 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201723
Is this your only DC?   What errors are you seeing in your logs.

As far as phone numbers for support start here   http://support.microsoft.com/contactus/

Thanks


Mike
0
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 39201743
No, you can not paste your backups because this folders are created by dfs and can not be modified. Is more easy:
- Use a full backup and made a system restore to get back your domain
- Depromote and promote again this DC. You can do this procedure if you have more than one domain controller. If you have got only one DC you can not do this!.

When you restore your DC, some computers may lost his machine account password, this article may help you to restore: http://support.microsoft.com/kb/325850
0
 

Author Comment

by:jonmenefee
ID: 39201778
The other DC I have was having issues and thats why I was trying to get the DFS working on main controller.
The backups started failing two weeks ago and I dont think they are any good.

There are 5 users in the domain and an exchange server.  If it wasnt for the exchange server I would just start all over (but they also have roaming profiles and they cant get their desktops.  This whole thing is just about to drive me nuts
0
 

Author Comment

by:jonmenefee
ID: 39201810
error logs are as follows

application:  EventID 1054 windows cannot obtain the domin controller name for your computer network (this is on the Domain Controller

Application:  eventID  1006  Windows cannot bind to xxx.local domainu [Local Error] Group Policy Abortinug

Application:  EventID  1030 Windows cannot query for the list of Group Policy objects

File Replication Services:  EventID  13566  FRS is scanning the data in the system volume. Computer xxx cnnot become a domain controller until this process is complete

FRS:  EventID  13508
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39201813
Have you tried the D4 to rebuild/authoritative restore?

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39201834
Not yet.  Do I do the same?  Just stop NTFRS and Net Logon and then go to the same registry key and put in D4?
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201864
yes. should be in the same article that you used for the D2 steps.
0
 

Author Comment

by:jonmenefee
ID: 39201920
MKline You are the MAN!!

Ok, its all back up now.  I still cannot replicate to the other DC but at least for now the main one is up and operational :-)
0
 

Author Closing Comment

by:jonmenefee
ID: 39201929
quick and concise :-)
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201936
ok good, for now the pressure is off, users are logging on and working :)

You can try and fight with DC2 and get it fixed or try and demote/repromote.  If the graceful demotion doesn't work  you can force it off and clean it up and then promote it again (sounds worse than it is)

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39202152
I think a demote/promote is what I will do.  Thank you again.  :-)
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39202168
no problem, and if you run into issues with it, open a new Q...we will help you if you need it.

Nice work getting your users back online.

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39202206
I was actually on the Microsoft pay for support website and almost hit the submit link when your answer came.  Ya saved me nearly 300.00. So thank you. :-)
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now