Restore Domain Controller
Hello
In our domain - which is part of a multi-domain forest - we have about 8 Domain Controllers. Most are GC's, but the one that holds the PDC/Infrastructure Master/RID Roles (dc1.domain2.com) is not a GC.
Let's say we lose all of our DC's in the domain due to a virus.
What would be quicker?
1) Restore dc1.domain2.com from a backup, then build another DC from scratch and upgrade that to a GC?
2) Restore dc1.domain2.com from a backup, and also restore dc2.domain.com (a GC) from a backup?Also - let's say we only backed up dc1.domain2.com - could we use the System State of that to build more DC's? Or can you only restore from a System State once, since that data can be tied to one servername only?
Domain/Functional level is Windows 2003, and also servers are Windows 2003.
Odpovědi
- Joe,
the http://support.microsoft.com/default.aspx/kb/311078 lists advantages of IFM promotion as:
- Reduced use of network resources when new domain controllers are promoted in an existing domain.
- Faster sourcing of Active Directory directory service and global catalog data to a new domain controller.
- Improved recovery of Windows Server 2003-based domain controllers after a hardware or a software failure.
As far as I recall, IFM does not eliminate the need for full SYSVOL refresh until Windows Server 2008 R2 - which means that in your case, entire content of SYSVOL would need to be replicated following the DCPROMO with IFM option...hth
Marcin- Označen jako odpověďJoe Budden 4. prosince 2009 13:20
Všechny reakce
Restoring a DC from its local backup is typically quicker since it limits volume of AD replication required to make the AD DC fully operational - however relevance of this benefit is limited if you employ IFM during DCPromo (http://support.microsoft.com/kb/311078). Note that this does not include SYSVOL...
IMF also comes into play when leveraging System State backup to build another DC - refer to the link above for more details...
You can find more info regarding AD forest recovery at http://technet.microsoft.com/en-us/library/cc786327(WS.10).aspx
hth
MarcinHi Marcin
Excellent, thanks for that.
So, just to confirm, if we take a System State backup of DC1.domain2.com, then we can use that System State to build DC2.domain2.com - this limit the volume of AD replication? Does this apply to Global Catalog data as well?What is the relevance of not including SYSVOL data?
Thanks
- Joe,
the http://support.microsoft.com/default.aspx/kb/311078 lists advantages of IFM promotion as:
- Reduced use of network resources when new domain controllers are promoted in an existing domain.
- Faster sourcing of Active Directory directory service and global catalog data to a new domain controller.
- Improved recovery of Windows Server 2003-based domain controllers after a hardware or a software failure.
As far as I recall, IFM does not eliminate the need for full SYSVOL refresh until Windows Server 2008 R2 - which means that in your case, entire content of SYSVOL would need to be replicated following the DCPROMO with IFM option...hth
Marcin- Označen jako odpověďJoe Budden 4. prosince 2009 13:20
