Domain Controller backup

This is a multi-part message in MIME format.

------=_NextPart_000_02C0_01C88DBC.1CF44E00
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Hi All

I know this may not be practical but I hope someone can advise on my =
issue. What has to be backed up from a DC if the domain only has a =
single DC in order to recover in case of any failure to that only DC ? =
Can a daily backup fully recover the AD at a restore point ?

Thanks
Johnny

------=_NextPart_000_02C0_01C88DBC.1CF44E00
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6000.16609" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi All</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I know this may not be practical but I =
hope someone=20
can advise on my issue.  What has to be backed up from a DC if the =
domain=20
only has a single DC in order to recover in case of any failure to that =
only DC=20
?  Can a daily backup fully recover the AD at a restore point=20
?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Johnny</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV></BODY></HTML>

------=_NextPart_000_02C0_01C88DBC.1CF44E00--

Cary
Mon Mar 24 04:19:44 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_0013_01C88D7F.6F148D40
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Johhny,

The System State would be a good start. Does the DC do anything else? =
Meaning, is it a File Server? or a DHCP Server?

The built-in NTBackup will handle these things very nicely for you. =
Also, if you are to use NTBackup make sure that you make the three =
registry entry changes to effectively double the speed.

HTH,

Cary
"Johnny " <johnny@apex.com> wrote in message =
news:eopGQkXjIHA.1164@TK2MSFTNGP02.phx.gbl...
Hi All

I know this may not be practical but I hope someone can advise on my =
issue. What has to be backed up from a DC if the domain only has a =
single DC in order to recover in case of any failure to that only DC ? =
Can a daily backup fully recover the AD at a restore point ?

Thanks
Johnny

------=_NextPart_000_0013_01C88D7F.6F148D40
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6000.16608" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Johhny,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The System State would be a good =
start.  Does=20
the DC do anything else?  Meaning, is it a File Server? or a DHCP=20
Server?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The built-in NTBackup will handle these =
things very=20
nicely for you.  Also, if you are to use NTBackup make sure that =
you make=20
the three registry entry changes to effectively double the =
speed.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>HTH,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Cary</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Johnny " <<A =
href=3D"mailto:johnny@apex.com">johnny@apex.com</A>>=20
wrote in message <A=20
=
href=3D"news:eopGQkXjIHA.1164@TK2MSFTNGP02.phx.gbl">news:eopGQkXjIHA.1164=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Hi All</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I know this may not be practical but =
I hope=20
someone can advise on my issue.  What has to be backed up from a =
DC if=20
the domain only has a single DC in order to recover in case of any =
failure to=20
that only DC ?  Can a daily backup fully recover the AD at a =
restore=20
point ?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Johnny</FONT></DIV>
<DIV><FONT face=3DArial =
size=3D2></FONT> </DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0013_01C88D7F.6F148D40--

Johnny
Mon Mar 24 05:52:44 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_02D9_01C88DF1.025B6D00
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Hi Cary

Does the system state include everything in the AD database ? In fact, =
I only concern the AD (users, groups, etc...) and let's forget about =
other share points or DHCP, etc...

Could you tell me which three registry entries ? and what do they do ?

Thanks
Johnny
"Cary Shultz" <cshultz@nospam.outsourceitcorp.com> wrote in message =
news:ecL$3DajIHA.5660@TK2MSFTNGP02.phx.gbl...
Johhny,

The System State would be a good start. Does the DC do anything else? =
Meaning, is it a File Server? or a DHCP Server?

The built-in NTBackup will handle these things very nicely for you. =
Also, if you are to use NTBackup make sure that you make the three =
registry entry changes to effectively double the speed.

HTH,

Cary
"Johnny " <johnny@apex.com> wrote in message =
news:eopGQkXjIHA.1164@TK2MSFTNGP02.phx.gbl...
Hi All

I know this may not be practical but I hope someone can advise on my =
issue. What has to be backed up from a DC if the domain only has a =
single DC in order to recover in case of any failure to that only DC ? =
Can a daily backup fully recover the AD at a restore point ?

Thanks
Johnny

------=_NextPart_000_02D9_01C88DF1.025B6D00
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6000.16609" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi Cary</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Does the system state include =
everything in the AD=20
database ?  In fact, I only concern the AD (users, groups, etc...) =
and=20
let's forget about other share points or DHCP, etc...</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Could you tell me which three registry =
entries=20
?  and what do they do ?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Johnny</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Cary Shultz" <<A=20
=
href=3D"mailto:cshultz@nospam.outsourceitcorp.com">cshultz@nospam.outsour=
ceitcorp.com</A>>=20
wrote in message <A=20
=
href=3D"news:ecL$3DajIHA.5660@TK2MSFTNGP02.phx.gbl">news:ecL$3DajIHA.5660=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Johhny,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The System State would be a good =
start. =20
Does the DC do anything else?  Meaning, is it a File Server? or a =
DHCP=20
Server?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The built-in NTBackup will handle =
these things=20
very nicely for you.  Also, if you are to use NTBackup make sure =
that you=20
make the three registry entry changes to effectively double the=20
speed.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>HTH,</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Cary</FONT></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Johnny " <<A =
href=3D"mailto:johnny@apex.com">johnny@apex.com</A>>=20
wrote in message <A=20
=
href=3D"news:eopGQkXjIHA.1164@TK2MSFTNGP02.phx.gbl">news:eopGQkXjIHA.1164=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>
<DIV><FONT face=3DArial size=3D2>Hi All</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>I know this may not be practical =
but I hope=20
someone can advise on my issue.  What has to be backed up from =
a DC if=20
the domain only has a single DC in order to recover in case of any =
failure=20
to that only DC ?  Can a daily backup fully recover the =
AD at a=20
restore point ?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Thanks</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Johnny</FONT></DIV>
<DIV><FONT face=3DArial=20
size=3D2></FONT> </DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_02D9_01C88DF1.025B6D00--

Paul
Mon Mar 24 05:58:20 PDT 2008

I would do a full backup including the system state. Just beware you lose
your dc then you will be able to logon locally with cached credentials but
you won't be able to gain access to things such as Exchange, SQL Server,
etc...

I would find an old server and bring up a second dc, they don't have high
demands and it could save your job.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Johnny " <johnny@apex.com> wrote in message
news:eopGQkXjIHA.1164@TK2MSFTNGP02.phx.gbl...
Hi All

I know this may not be practical but I hope someone can advise on my issue.
What has to be backed up from a DC if the domain only has a single DC in
order to recover in case of any failure to that only DC ? Can a daily
backup fully recover the AD at a restore point ?

Thanks
Johnny

Jorge
Mon Mar 24 06:35:38 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_002C_01C88DB3.F22D8130
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Hi
System state is enough for AD DB nd system recovery.

--=20
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
------=_NextPart_000_002C_01C88DB3.F22D8130
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6000.16609" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>Hi</FONT></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>System state is enough =
for AD DB nd=20
system recovery.</FONT></DIV>
<DIV><BR>-- <BR>I hope that the information above helps you.<BR>Have a =
Nice=20
day.</DIV>
<DIV> </DIV>
<DIV>Jorge Silva<BR>MCSE, MVP Directory Services<FONT face=3DArial=20
size=3D2></FONT></DIV></BODY></HTML>

------=_NextPart_000_002C_01C88DB3.F22D8130--

Jorge
Mon Mar 24 07:13:14 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_0027_01C88DC1.94B0D300
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

although not required, I would suggest: SYSTEM STATE and the volume =
containing the Windows DIR

--=20

Cheers,=20
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
-------------------------------------------------------------------------=
-----------------
* How to ask a question --> http://support.microsoft.com/?id=3D555375
-------------------------------------------------------------------------=
-----------------
* This posting is provided "AS IS" with no warranties and confers no =
rights!=20
* Always test before implementing!
-------------------------------------------------------------------------=
-----------------
#################################################
#################################################
-------------------------------------------------------------------------=
-----------------
"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message =
news:FDC9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com...
Hi
System state is enough for AD DB nd system recovery.

--=20
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
------=_NextPart_000_0027_01C88DC1.94B0D300
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6001.18000" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DVerdana size=3D2>although not required, I would =
suggest: SYSTEM=20
STATE and the volume containing the Windows DIR</FONT></DIV>
<DIV><BR>-- <BR><BR>Cheers, <BR>(HOPEFULLY THIS INFORMATION HELPS =
YOU!)</DIV>
<DIV> </DIV>
<DIV># Jorge de Almeida Pinto # MVP Windows Server - Directory =
Services</DIV>
<DIV> </DIV>
<DIV>BLOG (WEB-BASED)--> <A=20
href=3D"http://blogs.dirteam.com/blogs/jorge/default.aspx">http://blogs.d=
irteam.com/blogs/jorge/default.aspx</A><BR>BLOG=20
(RSS-FEEDS)--> <A=20
href=3D"http://blogs.dirteam.com/blogs/jorge/rss.aspx">http://blogs.dirte=
am.com/blogs/jorge/rss.aspx</A><BR>--------------------------------------=
----------------------------------------------------<BR>*=20
How to ask a question --> <A=20
href=3D"http://support.microsoft.com/?id=3D555375">http://support.microso=
ft.com/?id=3D555375</A><BR>----------------------------------------------=
--------------------------------------------<BR>*=20
This posting is provided "AS IS" with no warranties and confers no =
rights! <BR>*=20
Always test before=20
implementing!<BR>--------------------------------------------------------=
----------------------------------<BR>###################################=
##############<BR>#################################################<BR>--=
-------------------------------------------------------------------------=
---------------</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Jorge Silva" <<A=20
=
href=3D"mailto:jorgesilva_pt@hotmail.com">jorgesilva_pt@hotmail.com</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:FDC9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com">news:FDC=
9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com</A>...</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>Hi</FONT></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>System state is =
enough for AD DB nd=20
system recovery.</FONT></DIV>
<DIV><BR>-- <BR>I hope that the information above helps you.<BR>Have a =
Nice=20
day.</DIV>
<DIV> </DIV>
<DIV>Jorge Silva<BR>MCSE, MVP Directory Services<FONT face=3DArial=20
size=3D2></FONT></DIV></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0027_01C88DC1.94B0D300--

Paul
Mon Mar 24 07:56:03 PDT 2008

I second Paul's words on getting the additional DC up & running.

Here's few other things you may want to consider:

-Make sure to backup system state with the full backup.

-Make sure to have the restoring procedure & the Directory Services
Restore Mode password (the password supplied when dcpromo was done) well
documented and available to you.

-Use Automated System Recovery to create an ASR set (see NTBackup
documentation)

-Install the Recovery Console ([W2K3 Cd]:\i386\winnt32 /cmdcons)

-Make an image backup of your original DC on a daily basis, using a tool
such as Acronis. (this can save you heaps of time when disaster hits,
but is no substitute for the above)

Hope this helps.

/ ) Regards,
/ /_________
_|__|__) Paul Weterings
/ (O_)
__/ (O_)
____(O_)

Paul Bergson [MVP-DS] wrote:
> I would do a full backup including the system state. Just beware you lose
> your dc then you will be able to logon locally with cached credentials but
> you won't be able to gain access to things such as Exchange, SQL Server,
> etc...
>
> I would find an old server and bring up a second dc, they don't have high
> demands and it could save your job.
>

Johnny
Mon Mar 24 08:06:28 PDT 2008

This is a multi-part message in MIME format.

------=_NextPart_000_032E_01C88E03.B11468D0
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable

Thanks Paul..

Johnny
"Jorge de Almeida Pinto [MVP - DS]" =
<SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message =
news:%23ZiL%23kbjIHA.5084@TK2MSFTNGP04.phx.gbl...
although not required, I would suggest: SYSTEM STATE and the volume =
containing the Windows DIR

--=20

Cheers,=20
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
=
-------------------------------------------------------------------------=
-----------------
* How to ask a question --> http://support.microsoft.com/?id=3D555375
=
-------------------------------------------------------------------------=
-----------------
* This posting is provided "AS IS" with no warranties and confers no =
rights!=20
* Always test before implementing!
=
-------------------------------------------------------------------------=
-----------------
#################################################
#################################################
=
-------------------------------------------------------------------------=
-----------------
"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message =
news:FDC9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com...
Hi
System state is enough for AD DB nd system recovery.

--=20
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
------=_NextPart_000_032E_01C88E03.B11468D0
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5">
<META content=3D"MSHTML 6.00.6000.16609" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>
<DIV>Thanks Paul..</DIV>
<DIV> </DIV>
<DIV>Johnny</DIV></DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Jorge de Almeida Pinto [MVP - DS]" <<A=20
=
href=3D"mailto:SubstituteThisWithMyFullNameSeparatedByDots@gmail.com">Sub=
stituteThisWithMyFullNameSeparatedByDots@gmail.com</A>>=20
wrote in message <A=20
=
href=3D"news:%23ZiL%23kbjIHA.5084@TK2MSFTNGP04.phx.gbl">news:%23ZiL%23kbj=
IHA.5084@TK2MSFTNGP04.phx.gbl</A>...</DIV>
<DIV><FONT face=3DVerdana size=3D2>although not required, I would =
suggest: SYSTEM=20
STATE and the volume containing the Windows DIR</FONT></DIV>
<DIV><BR>-- <BR><BR>Cheers, <BR>(HOPEFULLY THIS INFORMATION HELPS =
YOU!)</DIV>
<DIV> </DIV>
<DIV># Jorge de Almeida Pinto # MVP Windows Server - Directory =
Services</DIV>
<DIV> </DIV>
<DIV>BLOG (WEB-BASED)--> <A=20
=
href=3D"http://blogs.dirteam.com/blogs/jorge/default.aspx">http://blogs.d=
irteam.com/blogs/jorge/default.aspx</A><BR>BLOG=20
(RSS-FEEDS)--> <A=20
=
href=3D"http://blogs.dirteam.com/blogs/jorge/rss.aspx">http://blogs.dirte=
am.com/blogs/jorge/rss.aspx</A><BR>--------------------------------------=
----------------------------------------------------<BR>*=20
How to ask a question --> <A=20
=
href=3D"http://support.microsoft.com/?id=3D555375">http://support.microso=
ft.com/?id=3D555375</A><BR>----------------------------------------------=
--------------------------------------------<BR>*=20
This posting is provided "AS IS" with no warranties and confers no =
rights!=20
<BR>* Always test before=20
=
implementing!<BR>--------------------------------------------------------=
----------------------------------<BR>###################################=
##############<BR>#################################################<BR>--=
-------------------------------------------------------------------------=
---------------</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Jorge Silva" <<A=20
=
href=3D"mailto:jorgesilva_pt@hotmail.com">jorgesilva_pt@hotmail.com</A>&g=
t;=20
wrote in message <A=20
=
href=3D"news:FDC9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com">news:FDC=
9D479-0349-48D9-A3E7-BD5E1DD01C98@microsoft.com</A>...</DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>Hi</FONT></DIV>
<DIV><FONT face=3DArial color=3D#000080 size=3D2>System state is =
enough for AD DB=20
nd system recovery.</FONT></DIV>
<DIV><BR>-- <BR>I hope that the information above helps you.<BR>Have =
a Nice=20
day.</DIV>
<DIV> </DIV>
<DIV>Jorge Silva<BR>MCSE, MVP Directory Services<FONT face=3DArial=20
size=3D2></FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_032E_01C88E03.B11468D0--

Johnny
Mon Mar 24 08:05:59 PDT 2008

Thanks Paul..

Johnny

"Paul Weterings" <Paul-nospam-@syncpuls-dot-com> wrote in message news:47e7c103$0$27435$e4fe514c@dreader29.news.xs4all.nl...
>I second Paul's words on getting the additional DC up & running.
>
> Here's few other things you may want to consider:
>
> -Make sure to backup system state with the full backup.
>
> -Make sure to have the restoring procedure & the Directory Services
> Restore Mode password (the password supplied when dcpromo was done) well
> documented and available to you.
>
> -Use Automated System Recovery to create an ASR set (see NTBackup
> documentation)
>
> -Install the Recovery Console ([W2K3 Cd]:\i386\winnt32 /cmdcons)
>
> -Make an image backup of your original DC on a daily basis, using a tool
> such as Acronis. (this can save you heaps of time when disaster hits,
> but is no substitute for the above)
>
> Hope this helps.
>
>
>
> / ) Regards,
> / /_________
> _|__|__) Paul Weterings
> / (O_)
> __/ (O_)
> ____(O_)
>
> Paul Bergson [MVP-DS] wrote:
>> I would do a full backup including the system state. Just beware you lose
>> your dc then you will be able to logon locally with cached credentials but
>> you won't be able to gain access to things such as Exchange, SQL Server,
>> etc...
>>
>> I would find an old server and bring up a second dc, they don't have high
>> demands and it could save your job.
>>

Jorge
Mon Mar 24 10:50:36 PDT 2008

> -Make an image backup of your original DC on a daily basis, using a tool
> such as Acronis. (this can save you heaps of time when disaster hits, but
> is no substitute for the above)

be very careful with recommendations like these as peiople might/will
interpreter it incorrectly!. A writable DC should never be imaged and that
image should never be restored! If you do....
http://blogs.dirteam.com/blogs/jorge/archive/2006/03/08/597.aspx

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Paul Weterings" <Paul-nospam-@syncpuls-dot-com> wrote in message
news:47e7c103$0$27435$e4fe514c@dreader29.news.xs4all.nl...
>I second Paul's words on getting the additional DC up & running.
>
> Here's few other things you may want to consider:
>
> -Make sure to backup system state with the full backup.
>
> -Make sure to have the restoring procedure & the Directory Services
> Restore Mode password (the password supplied when dcpromo was done) well
> documented and available to you.
>
> -Use Automated System Recovery to create an ASR set (see NTBackup
> documentation)
>
> -Install the Recovery Console ([W2K3 Cd]:\i386\winnt32 /cmdcons)
>
> -Make an image backup of your original DC on a daily basis, using a tool
> such as Acronis. (this can save you heaps of time when disaster hits, but
> is no substitute for the above)
>
> Hope this helps.
>
>
>
> / ) Regards,
> / /_________
> _|__|__) Paul Weterings
> / (O_)
> __/ (O_)
> ____(O_)
>
> Paul Bergson [MVP-DS] wrote:
>> I would do a full backup including the system state. Just beware you
>> lose your dc then you will be able to logon locally with cached
>> credentials but you won't be able to gain access to things such as
>> Exchange, SQL Server, etc...
>>
>> I would find an old server and bring up a second dc, they don't have high
>> demands and it could save your job.
>>

Paul
Mon Mar 24 11:31:20 PDT 2008

I concur with Jorge, never image a DC. Just run your standard backup,
images are special cases where things need to be acquiesced, etc... You
have to really understand everything that is going on before you try and use
an image of a DC. I wouldn't even want to try, just asking for trouble.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Paul Weterings" <Paul-nospam-@syncpuls-dot-com> wrote in message
news:47e7c103$0$27435$e4fe514c@dreader29.news.xs4all.nl...
>I second Paul's words on getting the additional DC up & running.
>
> Here's few other things you may want to consider:
>
> -Make sure to backup system state with the full backup.
>
> -Make sure to have the restoring procedure & the Directory Services
> Restore Mode password (the password supplied when dcpromo was done) well
> documented and available to you.
>
> -Use Automated System Recovery to create an ASR set (see NTBackup
> documentation)
>
> -Install the Recovery Console ([W2K3 Cd]:\i386\winnt32 /cmdcons)
>
> -Make an image backup of your original DC on a daily basis, using a tool
> such as Acronis. (this can save you heaps of time when disaster hits, but
> is no substitute for the above)
>
> Hope this helps.
>
>
>
> / ) Regards,
> / /_________
> _|__|__) Paul Weterings
> / (O_)
> __/ (O_)
> ____(O_)
>
> Paul Bergson [MVP-DS] wrote:
>> I would do a full backup including the system state. Just beware you
>> lose your dc then you will be able to logon locally with cached
>> credentials but you won't be able to gain access to things such as
>> Exchange, SQL Server, etc...
>>
>> I would find an old server and bring up a second dc, they don't have high
>> demands and it could save your job.
>>

Paul
Mon Mar 24 11:55:20 PDT 2008

Jorge & Paul: agreed, I should have been more clear than just state it
wasn't a substiture for the above, keep in mind though that he states
this was his -only- domain controller.

Just to be clear for anyone else: obviously when you have AD running
with more than one DC (as you should!) putting back an image will cause
AD replication problems.

/ ) Regards,
/ /_________
_|__|__) Paul Weterings
/ (O_)
__/ (O_)
____(O_)

Paul Bergson [MVP-DS] wrote:
> I concur with Jorge, never image a DC. Just run your standard backup,
> images are special cases where things need to be acquiesced, etc... You
> have to really understand everything that is going on before you try and use
> an image of a DC. I wouldn't even want to try, just asking for trouble.
>

Jorge
Mon Mar 24 11:55:44 PDT 2008

additionally
http://support.microsoft.com/kb/875495

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Hank
Tue Mar 25 02:40:00 PDT 2008

Paul Bergson [MVP-DS] wrote:
> I would do a full backup including the system state. Just beware you lose
> your dc then you will be able to logon locally with cached credentials but
> you won't be able to gain access to things such as Exchange, SQL Server,
> etc...
>
> I would find an old server and bring up a second dc, they don't have high
> demands and it could save your job.
>

My thoughts exactly. For quite a while, our second DC was on old PII
workstation with 384MB of RAM...... You *DON"T* want to have to deal
with a crashed single DC... Neither will you customers, manager, his/her
manager, the CIO, COO, CEO...... well, you get the message....

Either set up a second DC or keep your resume up to date....

--

Regards,
Hank Arnold
Microsoft MVP
Windows Server - Directory Services

Domain Controller backup

Re: Domain Controller backup by Cary

Re: Domain Controller backup by Johnny

Re: Domain Controller backup by Paul

Re: Domain Controller backup by Jorge

Re: Domain Controller backup by Jorge

Re: Domain Controller backup by Paul

Re: Domain Controller backup by Johnny

Re: Domain Controller backup by Johnny

Re: Domain Controller backup by Jorge

Re: Domain Controller backup by Paul

Re: Domain Controller backup by Paul

Re: Domain Controller backup by Jorge

Re: Domain Controller backup by Hank