AD Recovery doc updated

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=afe436fa-8e8a-443a-9027-c522dee35d85

AD Recovery Docs

Taken from Jorge’s blog

Best Practices: Active Directory Forest Recovery (W2K)

• http://www.microsoft.com/downloads/details.aspx?FamilyID=3eda5a79-c99b-4df9-823c-933feba08cfe&displaylang=en

Planning for Active Directory Forest Recovery (W2K3)

• http://www.microsoft.com/downloads/details.aspx?familyid=afe436fa-8e8a-443a-9027-c522dee35d85&displaylang=en

Planning for Active Directory Forest Recovery (W2K8)

• http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=326C8A7A-DCAD-4333-9050-A6303FF3155C&displaylang=en

AD Recovery

So my progress to date has been good.  I have used the Quest Recovery Manager for AD in my home lab to recover a child domain and two domain controllers.  To be honest it was a very simple process and after a few nervous minutes while the existing DCs sorted themselves out everything was ok.  I have some screen shots and a short guide that I will post early next week. It was intersting to see the invocation guid changing as the DC worked out it had been restored.

Active Directory has been restored from backup media, or has been configured to host an application partition. The invocationID attribute for this domain controller has been changed. The highest update sequence number at the time the backup was created is as follows.
InvocationID attribute (old value):
216d1df4-db3d-4326-8026-dfba0ca6a881
InvocationID attribute (new value):
d880386d-0385-4171-9ff3-9ab353c029f7
Update sequence number:
6410833

The invocationID is changed when a domain controller is restored from backup media or is configured to host a writeable application directory partition.

 

AD Recovery – W2008 – Netbackup

http://technet.microsoft.com/en-us/magazine/cc462796.aspx

So I have to admit I am a little behind in terms of W2k8 and AD.  It looks like the whole recovery mechanism has changed, it looks interesting and I will be giving the recovery a go over the weekend to see how it fits into the overall AD Recovery picture. Does this mean we don’t need third party products???

 

Chris

Active Directory – Recovery

I wonder how many people out there have a proven domain and/or forest recovery process. We can all follow the MS White paper but it’s a lengthly process. What happens if your company wants a 4 hour turn around of a multi domain globally distributed forest. How likely is domain or forest failure anyhow? I think a schema change is a possibility but a very remote one. I guess more likely is user error, deleting an Ou perhaps.

So really we need object recovery, and potentialy worst case scenario recovery for a corrupt schema.

I have used the Quest product and also normal ntbackup. The Quest product is v cool but also costs money which in these times is tricky.

I am going to have a play in my VM lab at home and upload my results

Cheers
Chris