Has restoring AD in R2 changed?
unnamedplayer
Member Posts: 74 ■■□□□□□□□□
Hey guys, I am studying for the 640 and am close to finishing my studies. Working on Active Directory backups and maintenance now and I need some help.
I am labbing the restoration procedures for system state to recover Active Directory objects. My DC is running 2008 R2. I've done authoritative restores before on plain old 2008 before fine. In that case I would go into DSRM mode and restore using wbadmin. Then I could use ntdsutil to perform an authoritative restore using "restore database" or "restore object" if I wanted a specific object.
Did this procedure change in R2? After I perform the system state recovery in DSRM, I am prompted to reboot. This is true no matter if I restore using wbadmin or the GUI.
I assumed that I could just ignore the prompt and open ntdsutil and perform the authoritative restore steps from there, but whenever I try to open a command prompt I receive an error. Which may be part of another issue, because after the system state restore finishes, dialog boxes are missing text and I can't make out what they say.
So, long story short, did authoritative restores change from R1 to R2? And I am aware of the AD recycle bin now, but I would like to be prepared in case I am not running a 2008 R2 forest functional level.
Any help would be great. Thanks guys!
I am labbing the restoration procedures for system state to recover Active Directory objects. My DC is running 2008 R2. I've done authoritative restores before on plain old 2008 before fine. In that case I would go into DSRM mode and restore using wbadmin. Then I could use ntdsutil to perform an authoritative restore using "restore database" or "restore object" if I wanted a specific object.
Did this procedure change in R2? After I perform the system state recovery in DSRM, I am prompted to reboot. This is true no matter if I restore using wbadmin or the GUI.
I assumed that I could just ignore the prompt and open ntdsutil and perform the authoritative restore steps from there, but whenever I try to open a command prompt I receive an error. Which may be part of another issue, because after the system state restore finishes, dialog boxes are missing text and I can't make out what they say.
So, long story short, did authoritative restores change from R1 to R2? And I am aware of the AD recycle bin now, but I would like to be prepared in case I am not running a 2008 R2 forest functional level.
Any help would be great. Thanks guys!
Comments
-
LCA
Member Posts: 215
Hi,
I did the AD exam a couple of weeks back so this stuff is fresh in my mind. I really don't recall any significant changes in the process you ask. This topic did come up specifally in the exam but I cannot say anymore about that because of the NDA I'm bound to honor.
Here's a couple of quite technical articles that go into this topic in detail and discuss any changes made in R2.
Performing Authoritative Restore of Active Directory Objects: Active Directory
Active Directory Domain Services Recovery in Win Server 2008 R2 — ServerWatch.com
That error you encountered may have had some other cause and not because you're using R2.
HTH -
unnamedplayer
Member Posts: 74 ■■□□□□□□□□
Hey thanks for your reply. I agree from all the reading I have done I can't find anything that suggests a change in procedure.
Its weird because like I said, this worked fine on R1, but I've tried on 2 R2 VMs and still after the system state restore completes, I can't open a command prompt to run ntdsutil. I get "The parameter is incorrect" for cmd.exe
On one other note, I noticed the R2 gui for restores allows you to choose if the system state restore is authoritative. Is that essentially doing the same as what the "restore database" command did in ntdsutil?