test w2k server AD

  • Thread starter Thread starter doob
  • Start date Start date
D

doob

in a test environment with 2 w2k servers currently working fine together
as DCs

if on one of them i delete a load of OU's, then this replicates through
to the other one ... is the correct way to get them back to do an
authoritative restore of either machine to the previous system state
before the deletions occurred providing no other changes were made and
once this is replicated everything will go back as before?

its all purely test at the moment on these, trying to get my head around
various scenarios
 
That is excatly what you should do....

Keep in mind that there are third party tools that can
help you recover deleted objects (users, OUs, etc) within
minutes versus going through the authoritative restore
process. One that works well is Aelita's ERdisk for
Active Directory.

Hope this helps.
 
doob says...
in a test environment with 2 w2k servers currently working fine together
as DCs

if on one of them i delete a load of OU's, then this replicates through
to the other one ... is the correct way to get them back to do an
authoritative restore of either machine to the previous system state
before the deletions occurred providing no other changes were made and
once this is replicated everything will go back as before?

its all purely test at the moment on these, trying to get my head around
various scenarios
Click to expand...
Hello,

there are different ways to restore deleted OUs:
1. If the changes are already replicated to all DCs, you need to boot into
directory services restore mode, restore the system state, and go into ntdsutil
to perform a authoritative restore. Note that there are some issues with groups
and which users are assigned to, so if you have any possibility to do so first
do a authoritative restore of the users, then of the groups.

2. If the changes are not replicated to all DCs, immediatelly boot the DC which
did not receive the changes into DSRM. Then proceed with NTDSUtil as above.

A system state without authoritative restore won't help you because the changes
will be replicated back from the other DCs since their information is more up
to date than the system state backup.

Gruesse - Sincerely,

Ulf B. Simon-Weidner
 
Back
Top