Restore DC offline to view AD info

HI Experts,

As the title suggest i need to restore a DC to view AD info.  Basically i need to look at AD from 3 months prior to today to look up permission info on some deleted users.

I have restored a Virtual DC (offline) but when i open AD it gives the naming information error and shows no info in AD.

Is there a way i can restore a virtual DC whilst keeping it offline (don't want it on the existing network incase it overwrites the current DC's) and still be able to view the AD Info?

How do i go about this?

Thanks
LVL 6
rick81Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Alessandro ScafariaInfrastructure Premier Field AdministratorCommented:
I have restored a Virtual DC (offline) but when i open AD it gives the naming information error and shows no info in AD.
1. In you real world scenario is this the only DC in your domain?

2. Where did you perform your virtual recovery?

I would suggest to download a trial of VMware workstation 11 and perform a virtual recovery inside there.....
Inside VMware workstation you may choose for each virtual ethernet nic how they have to be connected (bridging with your PC network, in a NAT private network or in an isolated network with your PC).......
0
rick81Author Commented:
We have multiple DCs. 6+ across multiple locations.
I've restored to Hyper V and have the Network adapter disabled. Obviously I don't want a restored DC taking to the live DCs
0
Will SzymkowskiSenior Solution ArchitectCommented:
What you need to do is restore the DC into an isolated environment that is not accessible from your Production network. When you restore the domain controller you need to ensure that you do an Authoritative Restore of the Sysvol folder. You will also need to make sure that the DC is also holding all of the roles. If you are doing this with a non-fsmo role holder then you need to seize the roles to this DC. If this is the current FSMO role holder then you should be fine.

However you still need to ensure that you are performing an Authoritative Restore and it will work. I have done this several times to perform testing.

Check fsmo role holder
netdom query fsmo

Seizing fsmo roles
https://technet.microsoft.com/en-us/library/cc816779%28v=ws.10%29.aspx

Will.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.