Backup and Restore the Schema...?

G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

I am setting up a trial run of restoring our entire Active Directory.
Is there a way to backup the Schema and restore it to a Lab Server?

We are working with Windows 2000 Server SP4 Domain Controllers.
We where able to successfully complete a Non-Authoritative and an
Authoritative Restore of Active Directory.
--
Kind Regards,

MDH
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Do you mean that you want to restore the Schema and just the Schema?

Regards,
/Jimmy
--
Jimmy Andersson, Q Advice AB
Microsoft MVP - Directory Services
---------- www.qadvice.com ----------


"MDH" <horistm@shape-corp.com> wrote in message
news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
>I am setting up a trial run of restoring our entire Active Directory.
> Is there a way to backup the Schema and restore it to a Lab Server?
>
> We are working with Windows 2000 Server SP4 Domain Controllers.
> We where able to successfully complete a Non-Authoritative and an
> Authoritative Restore of Active Directory.
> --
> Kind Regards,
>
> MDH
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Well - we are preparing to extend the schema. Before moving forward we want
to be certain we can restore the previous schema in the event something
should fail.

"Jimmy Andersson [MVP]" wrote:

> Do you mean that you want to restore the Schema and just the Schema?
>
> Regards,
> /Jimmy
> --
> Jimmy Andersson, Q Advice AB
> Microsoft MVP - Directory Services
> ---------- www.qadvice.com ----------
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> >I am setting up a trial run of restoring our entire Active Directory.
> > Is there a way to backup the Schema and restore it to a Lab Server?
> >
> > We are working with Windows 2000 Server SP4 Domain Controllers.
> > We where able to successfully complete a Non-Authoritative and an
> > Authoritative Restore of Active Directory.
> > --
> > Kind Regards,
> >
> > MDH
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

Jimmy,

I think what we have discovered is that if you lose all domain controllers,
your system state backup becomes usless.
At least one domain controller has to survive a disaster in order to recover.

We have tried to recover our domain into a lab environment from only a
System State Restore. It will not work.

"Jimmy Andersson [MVP]" wrote:

> Do you mean that you want to restore the Schema and just the Schema?
>
> Regards,
> /Jimmy
> --
> Jimmy Andersson, Q Advice AB
> Microsoft MVP - Directory Services
> ---------- www.qadvice.com ----------
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> >I am setting up a trial run of restoring our entire Active Directory.
> > Is there a way to backup the Schema and restore it to a Lab Server?
> >
> > We are working with Windows 2000 Server SP4 Domain Controllers.
> > We where able to successfully complete a Non-Authoritative and an
> > Authoritative Restore of Active Directory.
> > --
> > Kind Regards,
> >
> > MDH
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

> We have tried to recover our domain into a lab environment from only a
> System State Restore. It will not work.

What won't work? Can you be more specific? If you're doing an authorative
restore you don't *need* any other DCs -although the KCC will throw a fit
;-)

Just remember that you must have DNS and a GC.

System State is all you need to restore into a lab. However, remember that
things like BackupExec, ArcServe, etc. often depend on domain accounts.

--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


"MDH" <horistm@shape-corp.com> wrote in message
news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
Jimmy,

I think what we have discovered is that if you lose all domain controllers,
your system state backup becomes usless.
At least one domain controller has to survive a disaster in order to
recover.

We have tried to recover our domain into a lab environment from only a
System State Restore. It will not work.

"Jimmy Andersson [MVP]" wrote:

> Do you mean that you want to restore the Schema and just the Schema?
>
> Regards,
> /Jimmy
> --
> Jimmy Andersson, Q Advice AB
> Microsoft MVP - Directory Services
> ---------- www.qadvice.com ----------
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> >I am setting up a trial run of restoring our entire Active Directory.
> > Is there a way to backup the Schema and restore it to a Lab Server?
> >
> > We are working with Windows 2000 Server SP4 Domain Controllers.
> > We where able to successfully complete a Non-Authoritative and an
> > Authoritative Restore of Active Directory.
> > --
> > Kind Regards,
> >
> > MDH
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

We did a system state backup of DC01 which is the holder of the Schema Master
role and the Domain naming role.
We then restarted DC01 and captured (seized) all FSMO roles to it.
We then attempted to dcpromo a second server DC02 into the lab domain and it
failed. We found that Group Policy was not available on DC01.

We restored AD to an alternate dir and to the original dir.

"ptwilliams" wrote:

> > We have tried to recover our domain into a lab environment from only a
> > System State Restore. It will not work.
>
> What won't work? Can you be more specific? If you're doing an authorative
> restore you don't *need* any other DCs -although the KCC will throw a fit
> ;-)
>
> Just remember that you must have DNS and a GC.
>
> System State is all you need to restore into a lab. However, remember that
> things like BackupExec, ArcServe, etc. often depend on domain accounts.
>
> --
>
> Paul Williams
>
> http://www.msresource.net
> http://forums.msresource.net
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
> Jimmy,
>
> I think what we have discovered is that if you lose all domain controllers,
> your system state backup becomes usless.
> At least one domain controller has to survive a disaster in order to
> recover.
>
> We have tried to recover our domain into a lab environment from only a
> System State Restore. It will not work.
>
> "Jimmy Andersson [MVP]" wrote:
>
> > Do you mean that you want to restore the Schema and just the Schema?
> >
> > Regards,
> > /Jimmy
> > --
> > Jimmy Andersson, Q Advice AB
> > Microsoft MVP - Directory Services
> > ---------- www.qadvice.com ----------
> >
> >
> > "MDH" <horistm@shape-corp.com> wrote in message
> > news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> > >I am setting up a trial run of restoring our entire Active Directory.
> > > Is there a way to backup the Schema and restore it to a Lab Server?
> > >
> > > We are working with Windows 2000 Server SP4 Domain Controllers.
> > > We where able to successfully complete a Non-Authoritative and an
> > > Authoritative Restore of Active Directory.
> > > --
> > > Kind Regards,
> > >
> > > MDH
> >
> >
> >
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

tell us more about the promovation of the second DC ... do you have some
specific error? do you have errors on the DC01? What do you mean by "group
Policy was not available" ?


--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

"MDH" <horistm@shape-corp.com> wrote in message
news:756AAD0E-D409-4ED0-BE33-B4DE092F10AF@microsoft.com...
> We did a system state backup of DC01 which is the holder of the Schema
> Master
> role and the Domain naming role.
> We then restarted DC01 and captured (seized) all FSMO roles to it.
> We then attempted to dcpromo a second server DC02 into the lab domain and
> it
> failed. We found that Group Policy was not available on DC01.
>
> We restored AD to an alternate dir and to the original dir.
>
> "ptwilliams" wrote:
>
>> > We have tried to recover our domain into a lab environment from only a
>> > System State Restore. It will not work.
>>
>> What won't work? Can you be more specific? If you're doing an
>> authorative
>> restore you don't *need* any other DCs -although the KCC will throw a fit
>> ;-)
>>
>> Just remember that you must have DNS and a GC.
>>
>> System State is all you need to restore into a lab. However, remember
>> that
>> things like BackupExec, ArcServe, etc. often depend on domain accounts.
>>
>> --
>>
>> Paul Williams
>>
>> http://www.msresource.net
>> http://forums.msresource.net
>>
>>
>> "MDH" <horistm@shape-corp.com> wrote in message
>> news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
>> Jimmy,
>>
>> I think what we have discovered is that if you lose all domain
>> controllers,
>> your system state backup becomes usless.
>> At least one domain controller has to survive a disaster in order to
>> recover.
>>
>> We have tried to recover our domain into a lab environment from only a
>> System State Restore. It will not work.
>>
>> "Jimmy Andersson [MVP]" wrote:
>>
>> > Do you mean that you want to restore the Schema and just the Schema?
>> >
>> > Regards,
>> > /Jimmy
>> > --
>> > Jimmy Andersson, Q Advice AB
>> > Microsoft MVP - Directory Services
>> > ---------- www.qadvice.com ----------
>> >
>> >
>> > "MDH" <horistm@shape-corp.com> wrote in message
>> > news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
>> > >I am setting up a trial run of restoring our entire Active Directory.
>> > > Is there a way to backup the Schema and restore it to a Lab Server?
>> > >
>> > > We are working with Windows 2000 Server SP4 Domain Controllers.
>> > > We where able to successfully complete a Non-Authoritative and an
>> > > Authoritative Restore of Active Directory.
>> > > --
>> > > Kind Regards,
>> > >
>> > > MDH
>> >
>> >
>> >
>>
>>
>>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

ptwilliams,

Does this mean we need to have a DNS server and a GC server in the LAB
before attempting an Auth. Restore of AD? Because we did not have either...
could be why it failed?

We have quite a bit of documentation on Recovering your Active Directory
from disaster, but it seems that more of the documents we have found conflict
each other in some way.

Do you have any docs that you think are clear on this subject?

Kind Regards,

MDH

"ptwilliams" wrote:

> > We have tried to recover our domain into a lab environment from only a
> > System State Restore. It will not work.
>
> What won't work? Can you be more specific? If you're doing an authorative
> restore you don't *need* any other DCs -although the KCC will throw a fit
> ;-)
>
> Just remember that you must have DNS and a GC.
>
> System State is all you need to restore into a lab. However, remember that
> things like BackupExec, ArcServe, etc. often depend on domain accounts.
>
> --
>
> Paul Williams
>
> http://www.msresource.net
> http://forums.msresource.net
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
> Jimmy,
>
> I think what we have discovered is that if you lose all domain controllers,
> your system state backup becomes usless.
> At least one domain controller has to survive a disaster in order to
> recover.
>
> We have tried to recover our domain into a lab environment from only a
> System State Restore. It will not work.
>
> "Jimmy Andersson [MVP]" wrote:
>
> > Do you mean that you want to restore the Schema and just the Schema?
> >
> > Regards,
> > /Jimmy
> > --
> > Jimmy Andersson, Q Advice AB
> > Microsoft MVP - Directory Services
> > ---------- www.qadvice.com ----------
> >
> >
> > "MDH" <horistm@shape-corp.com> wrote in message
> > news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> > >I am setting up a trial run of restoring our entire Active Directory.
> > > Is there a way to backup the Schema and restore it to a Lab Server?
> > >
> > > We are working with Windows 2000 Server SP4 Domain Controllers.
> > > We where able to successfully complete a Non-Authoritative and an
> > > Authoritative Restore of Active Directory.
> > > --
> > > Kind Regards,
> > >
> > > MDH
> >
> >
> >
>
>
>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

I will be short:
-AD will not work without DNS
-GC is required for user authentication

Try to search "active directory disaster recovery" using Google.

regards,

--
Andrei Ungureanu
www.eventid.net
Free Windows event logs reports
http://www.altairtech.ca/evlog/

"MDH" <horistm@shape-corp.com> wrote in message
news:BB0DE124-8A8A-4B2F-8986-0EC2131976F6@microsoft.com...
> ptwilliams,
>
> Does this mean we need to have a DNS server and a GC server in the LAB
> before attempting an Auth. Restore of AD? Because we did not have
> either...
> could be why it failed?
>
> We have quite a bit of documentation on Recovering your Active Directory
> from disaster, but it seems that more of the documents we have found
> conflict
> each other in some way.
>
> Do you have any docs that you think are clear on this subject?
>
> Kind Regards,
>
> MDH
>
> "ptwilliams" wrote:
>
>> > We have tried to recover our domain into a lab environment from only a
>> > System State Restore. It will not work.
>>
>> What won't work? Can you be more specific? If you're doing an
>> authorative
>> restore you don't *need* any other DCs -although the KCC will throw a fit
>> ;-)
>>
>> Just remember that you must have DNS and a GC.
>>
>> System State is all you need to restore into a lab. However, remember
>> that
>> things like BackupExec, ArcServe, etc. often depend on domain accounts.
>>
>> --
>>
>> Paul Williams
>>
>> http://www.msresource.net
>> http://forums.msresource.net
>>
>>
>> "MDH" <horistm@shape-corp.com> wrote in message
>> news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
>> Jimmy,
>>
>> I think what we have discovered is that if you lose all domain
>> controllers,
>> your system state backup becomes usless.
>> At least one domain controller has to survive a disaster in order to
>> recover.
>>
>> We have tried to recover our domain into a lab environment from only a
>> System State Restore. It will not work.
>>
>> "Jimmy Andersson [MVP]" wrote:
>>
>> > Do you mean that you want to restore the Schema and just the Schema?
>> >
>> > Regards,
>> > /Jimmy
>> > --
>> > Jimmy Andersson, Q Advice AB
>> > Microsoft MVP - Directory Services
>> > ---------- www.qadvice.com ----------
>> >
>> >
>> > "MDH" <horistm@shape-corp.com> wrote in message
>> > news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
>> > >I am setting up a trial run of restoring our entire Active Directory.
>> > > Is there a way to backup the Schema and restore it to a Lab Server?
>> > >
>> > > We are working with Windows 2000 Server SP4 Domain Controllers.
>> > > We where able to successfully complete a Non-Authoritative and an
>> > > Authoritative Restore of Active Directory.
>> > > --
>> > > Kind Regards,
>> > >
>> > > MDH
>> >
>> >
>> >
>>
>>
>>
 
G

Guest

Guest
Archived from groups: microsoft.public.win2000.active_directory (More info?)

That depends. If the box you do the full restore of fulfils these roles
then no. If not, then yes.

I believe there's also some issues with the RID master when you restore a
domain (and there's no other DCs available). You'll have to search SM for
this though, as the link's escaped me...

Go with what you think is right is my advice. ...and don't give up if it
doesn't work first time ;-)

Most of the problems are h/w related...


--

Paul Williams

http://www.msresource.net
http://forums.msresource.net


"MDH" <horistm@shape-corp.com> wrote in message
news:BB0DE124-8A8A-4B2F-8986-0EC2131976F6@microsoft.com...
ptwilliams,

Does this mean we need to have a DNS server and a GC server in the LAB
before attempting an Auth. Restore of AD? Because we did not have either...
could be why it failed?

We have quite a bit of documentation on Recovering your Active Directory
from disaster, but it seems that more of the documents we have found
conflict
each other in some way.

Do you have any docs that you think are clear on this subject?

Kind Regards,

MDH

"ptwilliams" wrote:

> > We have tried to recover our domain into a lab environment from only a
> > System State Restore. It will not work.
>
> What won't work? Can you be more specific? If you're doing an
> authorative
> restore you don't *need* any other DCs -although the KCC will throw a fit
> ;-)
>
> Just remember that you must have DNS and a GC.
>
> System State is all you need to restore into a lab. However, remember
> that
> things like BackupExec, ArcServe, etc. often depend on domain accounts.
>
> --
>
> Paul Williams
>
> http://www.msresource.net
> http://forums.msresource.net
>
>
> "MDH" <horistm@shape-corp.com> wrote in message
> news:BEB34DD0-00B0-4DEA-8154-A39EE4C4DFE3@microsoft.com...
> Jimmy,
>
> I think what we have discovered is that if you lose all domain
> controllers,
> your system state backup becomes usless.
> At least one domain controller has to survive a disaster in order to
> recover.
>
> We have tried to recover our domain into a lab environment from only a
> System State Restore. It will not work.
>
> "Jimmy Andersson [MVP]" wrote:
>
> > Do you mean that you want to restore the Schema and just the Schema?
> >
> > Regards,
> > /Jimmy
> > --
> > Jimmy Andersson, Q Advice AB
> > Microsoft MVP - Directory Services
> > ---------- www.qadvice.com ----------
> >
> >
> > "MDH" <horistm@shape-corp.com> wrote in message
> > news:C54AF27D-E5CC-4960-B371-F5F86E112EB3@microsoft.com...
> > >I am setting up a trial run of restoring our entire Active Directory.
> > > Is there a way to backup the Schema and restore it to a Lab Server?
> > >
> > > We are working with Windows 2000 Server SP4 Domain Controllers.
> > > We where able to successfully complete a Non-Authoritative and an
> > > Authoritative Restore of Active Directory.
> > > --
> > > Kind Regards,
> > >
> > > MDH
> >
> >
> >
>
>
>