Solved

D2 Authoritative Restore

Posted on 2013-05-28
13
488 Views
Last Modified: 2013-05-28
Hey guys

Ok, I was having FRS issues on my domain controller and so I followed the advise of a support forum and they said that my event logs were saying I should do a D2 Restore.  So I backed up the sysvol\policies and sysvol\domain and did the D2 Restore.  Now the DC is having MORE issues and no one can login.  Can I stop the NTFRS and Net Logon Services and do a restore from backup of the 2 directories I backed up or am I screwed?

I tried logging into my Partner website from Microsoft but they ARE DOWN (yes, I am pissed) and the phone number they have goes to some Dish Network crap.

Thanks
0
Comment
Question by:jonmenefee
  • 7
  • 5
13 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201723
Is this your only DC?   What errors are you seeing in your logs.

As far as phone numbers for support start here   http://support.microsoft.com/contactus/

Thanks


Mike
0
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 39201743
No, you can not paste your backups because this folders are created by dfs and can not be modified. Is more easy:
- Use a full backup and made a system restore to get back your domain
- Depromote and promote again this DC. You can do this procedure if you have more than one domain controller. If you have got only one DC you can not do this!.

When you restore your DC, some computers may lost his machine account password, this article may help you to restore: http://support.microsoft.com/kb/325850
0
 

Author Comment

by:jonmenefee
ID: 39201778
The other DC I have was having issues and thats why I was trying to get the DFS working on main controller.
The backups started failing two weeks ago and I dont think they are any good.

There are 5 users in the domain and an exchange server.  If it wasnt for the exchange server I would just start all over (but they also have roaming profiles and they cant get their desktops.  This whole thing is just about to drive me nuts
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:jonmenefee
ID: 39201810
error logs are as follows

application:  EventID 1054 windows cannot obtain the domin controller name for your computer network (this is on the Domain Controller

Application:  eventID  1006  Windows cannot bind to xxx.local domainu [Local Error] Group Policy Abortinug

Application:  EventID  1030 Windows cannot query for the list of Group Policy objects

File Replication Services:  EventID  13566  FRS is scanning the data in the system volume. Computer xxx cnnot become a domain controller until this process is complete

FRS:  EventID  13508
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39201813
Have you tried the D4 to rebuild/authoritative restore?

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39201834
Not yet.  Do I do the same?  Just stop NTFRS and Net Logon and then go to the same registry key and put in D4?
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201864
yes. should be in the same article that you used for the D2 steps.
0
 

Author Comment

by:jonmenefee
ID: 39201920
MKline You are the MAN!!

Ok, its all back up now.  I still cannot replicate to the other DC but at least for now the main one is up and operational :-)
0
 

Author Closing Comment

by:jonmenefee
ID: 39201929
quick and concise :-)
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39201936
ok good, for now the pressure is off, users are logging on and working :)

You can try and fight with DC2 and get it fixed or try and demote/repromote.  If the graceful demotion doesn't work  you can force it off and clean it up and then promote it again (sounds worse than it is)

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39202152
I think a demote/promote is what I will do.  Thank you again.  :-)
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39202168
no problem, and if you run into issues with it, open a new Q...we will help you if you need it.

Nice work getting your users back online.

Thanks

Mike
0
 

Author Comment

by:jonmenefee
ID: 39202206
I was actually on the Microsoft pay for support website and almost hit the submit link when your answer came.  Ya saved me nearly 300.00. So thank you. :-)
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question