?
Solved

what is the best way to export prod AD and all objects including GPOs to the test lab for testing?

Posted on 2014-12-10
6
Medium Priority
?
113 Views
Last Modified: 2014-12-14
what is the best way to export prod AD and all objects including GPOs to the test lab for testing?

Could you please let me know the possible scenarios such as coping AD database, using scripts, etc What are the best way to export AD into the isolated lab for testing the restructure. Thank you very much.
0
Comment
Question by:claudiamcse
  • 4
  • 2
6 Comments
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40492633
take a backup of the AD server and restore it to a Virtual machine in an isolated network that can not connect to anything AT ALL.
You now have an exact copy of your AD server.  No real way to copy it in any other form really.
0
 

Author Comment

by:claudiamcse
ID: 40492780
What back up do you recommend so that it restores AD database with all GPOs?
0
 
LVL 37

Expert Comment

by:Neil Russell
ID: 40493617
Depends on where you are going to restore it to.
You could just use a windows server backup,  you could do a P2V migration, you can use ANY BACKUP SOFTWARE that will do a barebones recovery onto new hardware or into a Virtual machine if thats what you are doing.

If you backup and restore the AD Controller just be 100% sure that it can NOT talk on the same network as your normal computers and AD controllers.  That would be a disaster.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 37

Expert Comment

by:Neil Russell
ID: 40493623
Is your current DC a physical server or on VMWare/Hyper-V?
0
 

Author Comment

by:claudiamcse
ID: 40494643
THank you! Our DC is VMware esxi. Also, would it back up and restore all GPOs with ALL its links?

GPOs and links are most important in our case since we are doing GPOs consolidation and restructure.

Please let me know if by restoring from backup would recreate all GPOs and links in the test lab.

Also, unfortunately we will be utilizing a computer joined to the workgroup with VMs running on it. Will it work in this scenario?
0
 
LVL 37

Accepted Solution

by:
Neil Russell earned 2000 total points
ID: 40494665
If you clone the vm and then set it up with a different virtual NIC BEFORE you ever power it on, making sure that that virtual network has NO connection at all to your actual live network you are done.
A full back up and restore will include everything, including gpo but best would be to Clone the vm

Just remember to change it to a seep rate network before you first power it on.
0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
Welcome to 2018! Exciting things lie ahead in the world of tech. To start things off, we compiled great member articles on how to stay safe, ways to learn, and much more! Read on to start your new year right.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…

593 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question