• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 128
  • Last Modified:

DNS question

So, could you please confirm. If DNS is ADI then it is included in the system state backup but if NOT, then the zones are stored under this directory for 2003 server?


%systemroot%\winnt\system32\dns

So, by backing up system state and this directory, we should be able to restore DNS completely in case of complete failure. IS it correct?
0
creative555
Asked:
creative555
2 Solutions
 
Cliff GoekeSr Technical AnalystCommented:
No.  Microsoft DNS is tricky.  Even restoring the DNS database after a crash may not bring the service back on line correctly.  I have seen where the only way to get DNS back up after a crash was to manually rebuild.  .
0
 
Axis52401Security AnalystCommented:
Cliff is corect, the systemstate backup DOES NOT include DNS. I reference this article when telling people about the shortcomings of a systemstate backup, https://u-tools.com/help/SystemState.asp.

Here is an article that shows how to backup and restore DNS https://windowsdiary.wordpress.com/2012/03/14/strategy-for-dns-server-backup-in-an-ad-environment/

By combining systemstate and the manual backup for DNS you should have what you need to get up and running. If you have services like sharepoint it gets a bit trickier as you need the IIS metadata info. There are vb scripts you can get to do that backup. But you could also build a new IIS and import the raw data back in. Same as DHCP, that can be built pretty easily.
0
 
creative555Author Commented:
from 2003 server when i ran dnscmd it says unrecognized command
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
creative555Author Commented:
do i need to backup DNS from FSMO holder or and DC? WE have ADI zones
0
 
creative555Author Commented:
I tried running command DNS on 2008DC and I get Error access Denied 5 0x5

for 2003 DC, do I need support tools installed
0
 
creative555Author Commented:
do you have a script to backup dns zones?
0
 
MaheshArchitectCommented:
The AD system state backup does contains AD integrated DNS zones because these zone data is already stored in active directory (ntds.dit file)
The standard primary zones and secondary zones need to be backed up separately with dnscmd zoneexport command so that they can be restored in case

If you want to try, you can take AD system state backup of server and try to restore it on another server, may be you need t install DNS role on that computer later on and which should populate all AD integrated zones
0
 
creative555Author Commented:
Thank you very much!
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now