Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 126
  • Last Modified:

DNS question

So, could you please confirm. If DNS is ADI then it is included in the system state backup but if NOT, then the zones are stored under this directory for 2003 server?


%systemroot%\winnt\system32\dns

So, by backing up system state and this directory, we should be able to restore DNS completely in case of complete failure. IS it correct?
0
creative555
Asked:
creative555
2 Solutions
 
Cliff GoekeCommented:
No.  Microsoft DNS is tricky.  Even restoring the DNS database after a crash may not bring the service back on line correctly.  I have seen where the only way to get DNS back up after a crash was to manually rebuild.  .
0
 
Axis52401Security AnalystCommented:
Cliff is corect, the systemstate backup DOES NOT include DNS. I reference this article when telling people about the shortcomings of a systemstate backup, https://u-tools.com/help/SystemState.asp.

Here is an article that shows how to backup and restore DNS https://windowsdiary.wordpress.com/2012/03/14/strategy-for-dns-server-backup-in-an-ad-environment/

By combining systemstate and the manual backup for DNS you should have what you need to get up and running. If you have services like sharepoint it gets a bit trickier as you need the IIS metadata info. There are vb scripts you can get to do that backup. But you could also build a new IIS and import the raw data back in. Same as DHCP, that can be built pretty easily.
0
 
creative555Author Commented:
from 2003 server when i ran dnscmd it says unrecognized command
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
creative555Author Commented:
do i need to backup DNS from FSMO holder or and DC? WE have ADI zones
0
 
creative555Author Commented:
I tried running command DNS on 2008DC and I get Error access Denied 5 0x5

for 2003 DC, do I need support tools installed
0
 
creative555Author Commented:
do you have a script to backup dns zones?
0
 
MaheshArchitectCommented:
The AD system state backup does contains AD integrated DNS zones because these zone data is already stored in active directory (ntds.dit file)
The standard primary zones and secondary zones need to be backed up separately with dnscmd zoneexport command so that they can be restored in case

If you want to try, you can take AD system state backup of server and try to restore it on another server, may be you need t install DNS role on that computer later on and which should populate all AD integrated zones
0
 
creative555Author Commented:
Thank you very much!
0

Featured Post

NEW Veeam Backup for Microsoft Office 365 1.5

With Office 365, it’s your data and your responsibility to protect it. NEW Veeam Backup for Microsoft Office 365 eliminates the risk of losing access to your Office 365 data.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now