ACRONIS Backup & Recovery 11.5 Server for Windows User's Guide download pdf (Page 213)

Recovery vs. re-creation

Recreation does not require having a backup. Recovery is normally faster than re-creation. However,

recovery is not possible in the following cases:

 All available backups are older than the tombstone lifetime. Tombstones are used during

replication to ensure that an object deleted on one domain controller becomes deleted on other

domain controllers. Thus, proper replication is not possible after the tombstones have been

deleted.

 The domain controller held a Flexible Single Master Operations (FSMO) role, and you have

assigned that role to a different domain controller (seized the role). In this case, restoring the

domain controller would lead to two domain controllers holding the same FSMO role within the

domain and cause a conflict.

Recovering a domain controller that holds a FSMO role

Some domain controllers hold unique roles known as Flexible Single Master Operations (FSMO) roles

or operations manager roles. For the description of FSMO roles and their scopes (domain-wide or

forest-wide), see Microsoft Help and Support article http://support.microsoft.com/kb/324801.

Before recreating a domain controller that held the PDC Emulator role, you must seize that role.

Otherwise, you will not be able to add the recreated domain controller to the domain. After

recreating the domain controller, you can transfer this role back. For information about how to seize

and transfer FSMO roles, see Microsoft Help and Support article

http://support.microsoft.com/kb/255504.

To view which FSMO roles are assigned to which domain controller, you can connect to any live

domain controller by using the Ntdsutil tool as described in Microsoft Help and Support article

http://support.microsoft.com/kb/234790

of that article:

 For the Windows 2000 Server and Windows Server 2003 operating systems, follow all steps as

they are given.

 For the Windows Server 2008 operating systems, in the step asking you to type

domain management, type roles instead. Follow other steps as they are given.

11.4.2 Recovering a domain controller (no other DCs are available)

If all domain controllers are lost, nonauthoritative restore in fact becomes authoritative: the objects

restored from the backup are the newest available. Replication of Active Directory data cannot take

place because there are no live domain controllers. This means that:

 Changes to Active Directory that occurred after the backup had been made will be lost.

 Recreation of the domain controller is not an option.

 Even a backup with an expired tombstone lifetime can be used.

You need to recover the volumes that store Active Directory database files (p. 202). If these volumes

store other valuable data except Active Directory, copy this data to a different location before the

recovery.

To recover a domain controller when no other domain controllers are available

1. Make sure that the newest available backup is used for recovery. This is important because all

changes made to Active Directory objects after the backup will be lost.

2. Recover the domain controller from the backup by using a bootable media.

1 2 ... 208 209 210 211 212 213 214 215 216 217 218 ... 274 275

No comments

ACRONIS Backup & Recovery 11.5 Server for Windows User's Guide Page 213