ACRONIS Backup & Recovery 11.5 Server for Windows User's Guide Page 215

  • Download
  • Add to my manuals
  • Print
  • Page
    / 275
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 214
215 Copyright © Acronis International GmbH, 2002-2012
7. Restart the domain controller in normal mode. Make sure that the Active Directory service has
started successfully.
8. Change the account for the Acronis service back to the original one, similarly to step 4.
11.4.4 Restoring accidentally deleted information
If the domain has other domain controllers, you can use the Ntdsutil tool to perform an
authoritative restore of certain entries only. For example, you can restore an unintentionally deleted
user account or computer account.
To restore accidentally deleted information
1. Perform steps 15 from "Restoring the Active Directory database" (p. 214) to restart the domain
controller into Directory Services Restore Mode (DSRM) and to restore the Active Directory
database.
2. Without exiting DSRM, run the following command:
Ntdsutil
3. At the tool's command prompt, run the following commands:
activate instance ntds
authoritative restore
4. At the tool's command prompt, run the restore subtree or restore object command with
the necessary parameters.
For example, the following command restores the Manager user account in the Finance
organizational unit of the example.com domain:
restore object cn=Manager,ou=Finance,dc=example,dc=com
For more information about using the Ntdsutil tool, refer to its documentation.
Details. Other objects will be replicated from other domain controllers when you restart the
domain controller. This way, you will restore the unintentionally deleted objects and keep the
other objects up-to-date.
5. Restart the domain controller in normal mode. Make sure that the Active Directory service has
started successfully and that the restored objects have become available.
11.4.5 Avoiding a USN rollback
If the domain has two or more domain controllers and you have recovered one of the controllers or
its database, you need to avoid a situation known as a USN rollback.
Replication and USNs
Active Directory data is constantly replicated between the domain controllers. At any given moment,
the same Active Directory object may have a newer version on one domain controller and an older
version on another. To prevent conflicts and loss of information, Active Directory tracks object
versions on each domain controller and replaces the outdated versions with the up-to-date version.
To track object versions, Active Directory uses numbers called Update Sequence Numbers (USNs).
Newer versions of Active Directory objects correspond to higher USNs. Each domain controller keeps
the USNs of all other domain controllers.
Page view 214
1 2 ... 210 211 212 213 214 215 216 217 218 219 220 ... 274 275

Comments to this Manuals

No comments