what is the best way to export prod AD and all objects including GPOs to the test lab for testing?

Posted on 2014-12-10
Last Modified: 2014-12-14
what is the best way to export prod AD and all objects including GPOs to the test lab for testing?

Could you please let me know the possible scenarios such as coping AD database, using scripts, etc What are the best way to export AD into the isolated lab for testing the restructure. Thank you very much.
Question by:claudiamcse
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
LVL 37

Expert Comment

by:Neil Russell
ID: 40492633
take a backup of the AD server and restore it to a Virtual machine in an isolated network that can not connect to anything AT ALL.
You now have an exact copy of your AD server.  No real way to copy it in any other form really.

Author Comment

ID: 40492780
What back up do you recommend so that it restores AD database with all GPOs?
LVL 37

Expert Comment

by:Neil Russell
ID: 40493617
Depends on where you are going to restore it to.
You could just use a windows server backup,  you could do a P2V migration, you can use ANY BACKUP SOFTWARE that will do a barebones recovery onto new hardware or into a Virtual machine if thats what you are doing.

If you backup and restore the AD Controller just be 100% sure that it can NOT talk on the same network as your normal computers and AD controllers.  That would be a disaster.
NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

LVL 37

Expert Comment

by:Neil Russell
ID: 40493623
Is your current DC a physical server or on VMWare/Hyper-V?

Author Comment

ID: 40494643
THank you! Our DC is VMware esxi. Also, would it back up and restore all GPOs with ALL its links?

GPOs and links are most important in our case since we are doing GPOs consolidation and restructure.

Please let me know if by restoring from backup would recreate all GPOs and links in the test lab.

Also, unfortunately we will be utilizing a computer joined to the workgroup with VMs running on it. Will it work in this scenario?
LVL 37

Accepted Solution

Neil Russell earned 500 total points
ID: 40494665
If you clone the vm and then set it up with a different virtual NIC BEFORE you ever power it on, making sure that that virtual network has NO connection at all to your actual live network you are done.
A full back up and restore will include everything, including gpo but best would be to Clone the vm

Just remember to change it to a seep rate network before you first power it on.

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With User Account Control (UAC) enabled in Windows 7, one needs to open an elevated Command Prompt in order to run scripts under administrative privileges. Although the elevated Command Prompt accomplishes the task, the question How to run as script…
A company’s centralized system that manages user data, security, and distributed resources is often a focus of criminal attention. Active Directory (AD) is no exception. In truth, it’s even more likely to be targeted due to the number of companies …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question