Exportar (0) Imprimir
Expandir Todos

Planning for Active Directory Forest Recovery

Actualizado: Setembro de 2011

Aplica-se a: Windows Server 2000, Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2008, Windows Server 2008 R2

This guide contains best-practice recommendations for recovering an Active Directory® forest if forest-wide failure renders all domain controllers in the forest incapable of functioning normally. The steps it contains serve as a template for your forest recovery plan, which you can customize for your particular environment. These steps apply to domain controllers that run Microsoft® Windows® 2000 Server, Windows Server® 2003, or Windows Server 2008 operating systems.

noteNota
In Windows 2000 Server and Windows Server 2003, the directory service is named Active Directory. In Windows Server 2008, the directory service is named Active Directory Domain Services (AD DS). The rest of this guide refers to AD DS, but the steps are also applicable to Active Directory.

To download Planning for Active Directory Forest Recovery as a printable .doc file, see Planning for Active Directory Forest Recovery (http://go.microsoft.com/fwlink/?LinkId=152459).

The following table summarizes the revision history for this guide, including its original publication on Microsoft TechNet.

 

Date

Revision

October 2006

Original publication on Technet

May 2009

An additional instance of this guide was published in the Windows Server 2008 Technical Library. The guidelines were also updated to reflect new functionality for Windows Server 2008, including the following:

  • In Deciding When to Perform Forest Recovery and Recovering Your Active Directory Forest, added information about how read-only domain controllers (RODCs) can help to maintain business continuity during the forest recovery process.

  • In the section “Determining which backups to use,” added information about using the Active Directory Database Mounting Tool (Dsamain.exe) and the ntdsutil snapshot command.

  • In the section “Recovery Roadmap,” added information about a new method for creating installation media for install from media (IFM) operations by using the ntdsutil ifm command.

  • In the sections “Restore the first domain controller for the forest root domain” and “Restore the first domain controller in each of the remaining domains,” added information about how to perform the restore on a domain controller that runs Windows Server 2008, including how to perform an authoritative restore of SYSVOL, and how to perform metadata cleanup more simply by using the version of Active Directory Users and Computers that is included with Windows Server 2008.

  • In the section “Recover additional domain controllers in the forest by installing AD DS,” added information about the Source Domain Controller page that appears in the Active Directory Domain Services Installation Wizard.

  • In Appendix A: Forest Recovery Procedures, added information about new methods in Windows Server 2008 for performing backup and restore, metadata cleanup, and deleting a domain controller object.

  • In Appendix B: Frequently Asked Questions, added information about new functionality provided in Windows Server 2008 and a new method for performing an integrity check and checksum verification on a domain controller that runs Windows Server 2008 by stopping AD DS and using the ntdsutil command.

November 2009

The topics Recovering Your Active Directory Forest and Appendix A: Forest Recovery Procedures were revised with information about how to perform an authoritative restore of SYSVOL without using Wbadmin.exe.

The section “Restore the first domain controller for the forest root domain,” was revised to include adding the Repl Perform Initial Synchronizations registry entry in the steps for recovering the first writable domain controller in the forest root domain.

The topic Appendix B: Frequently Asked Questions, had information added about using full server recovery instead of system state restore to recover servers more quickly.

The section “Determining which backups to use,” was revised to include a warning to not perform a system state restore to a different server than the server that was used to create the backup, along with other best practices for choosing a backup.

March 2010

Recovering Your Active Directory Forest and Appendix A: Forest Recovery Procedures were revised with information about how to install and configure DNS server for Windows Server 2008.

Feb 2011

Recovering Your Active Directory Forest was corrected to indicate metadata clean up should be performed for all writable domain controllers that are not restored from backup.

May 2011

Added link to Microsoft Knowledge Base article 2549833 at the procedure for resetting the krbtgt account.

Sept 2011

Add list of resources for verifying that replication is working correctly.

Considera isto útil?
(1500 caracteres restantes)
Obrigado pelos seus comentários

Conteúdo da Comunidade

Mostrar:
© 2014 Microsoft