ADSM-L

Re: Windows 2000 Active Directory Restore Problem - Please Help!! !

2003-06-26 13:27:36
Subject: Re: Windows 2000 Active Directory Restore Problem - Please Help!! !
From: "Consiglio, Tony" <consigli AT BUFFALO DOT EDU>
To: ADSM-L AT VM.MARIST DOT EDU
Date: Thu, 26 Jun 2003 13:26:25 -0400
Jacques,
        Sorry I got to this late, I hope you do not mind I reply directly,
besides, its faster this way and I know you will see the answer.

Before this question gets answered, a few questions:
1.) Is the entire AD corrupt? why are you trying to restore only one DC's
AD. I ask this because I didn't hear you talk about doing an Authoritative
restore. Because that is what you will need to do if you need to restore the
"entire AD" from last know good backup.

2.)If the customer's AD is fine then do they have more than 2 DC's in their
AD? If so, why not let replication rebuild your DC for you?

3.) If they have more than 2 DC's  (say 3) you will need to make at least 2-
GC's so that step 1 above will work (only if the one in question is a GC and
is down). You also need to know if the DC your doing DR on what roles it
held. If it held the 3 main roles, AND you did not cease or transfer those
roles...you have larger issues on your hands.

IF all of AD is bad, and If they have more than 2 DC and at least 2 are
GC's, and its NOT a main role holder, then I would do the following:

- rebuild the machine as it was before the crash (as a member server.)Then
run DCPromo on it. If your AD is fully corrupted then letting it replicate
will not make a difference. So once you can login to it, no errors, restore
the sys state (including the AD) reboot and do F8.
- Once in F8 - DR mode (AD offline for this DC) run your NTDSUtil command
line and do an Authoritative restore for the DC. This will tell the rest of
AD that they will be getting their info from you not from the networked
GC's.

Does this help?

-----Original Message-----
From: Rushforth, Tim [mailto:TRushforth AT WINNIPEG DOT CA]
Sent: Wednesday, June 04, 2003 10:10 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Re: Windows 2000 Active Directory Restore Problem - Please
Help!! !


I have not tested that version of the TSM client but have tested 5.1.1.3.
The procedure I use is to restore System Objects before rebooting.  So do
step 5 then don't reboot and restore the System Objects.

Also if you back up the system state with msbackup to disk then this gives
you another alternative to restoring the system object from TSM.n

Tim Rushforth
City of Winnipeg

-----Original Message-----
From: Jacques Butcher [mailto:butcherjw AT ANANZI.CO DOT ZA]
Sent: June 4, 2003 6:39 AM
To: ADSM-L AT VM.MARIST DOT EDU
Subject: Windows 2000 Active Directory Restore Problem - Please Help!!!

Hi there.

I currently have a problem at a customer's DR site were I
cannot manage to restore the Active Directory of their W2K
domain controller successfully.  The following steps are
followed;
1. Install a minimum (fresh) installation of Windows 2000
server.
2. Install the TSM Client & configure dsm.opt
3. Install W2K SP3
4. Reboot
5. Restore the whole system partition (C:)
6. Reboot server in "Active Directory Restore Mode (for
Windows 2000 Domain Controllers only)".
7. Restore the whole "System Objects".  During this restore
a collision menu appears even though the replace option
(even when locked) is selected.  Clicking the check box
telling TSM to replace the locked files does not work and
the process has to be cancelled.  What I have noticed is
that the "Server" service does not start.  Within the
dsmerror.log there are entries stating that there was a
problem with the WINNT share (see attached dsmerror.log
file).  The error message that I get when I try to start
the server it is "Error 1130 Not enought server storage is
available to process this command."  I think that the
server service may have something to do with the share.
8. Cancel restore of System Objects.
9. Reboot server in "Active Directory Restore Mode (for
Windows 2000 Domain Controllers only)".
10. Re-Start restore of System Objects - restore completes
successfully.
11. Reboot server normally. When log-on screen appears an
error message appears as well stating that there is a
problem starting the security account manager.  It also
tells me that I must restart the server in "Active
Directory Restore Mode (for Windows 2000 Domain Controllers
only)".  At this screen you can only click on OK which
re-starts the server.  You cannot log in normally at all.
 No matter how many times I restore the System Objects in
AD restore mode the error message appears when booting
normally.

My TSM server is version 5.1.6.2 and the client version is
5.1.5.15

Any help will be greatly appreciated.

Thanks in advance.

Jacques Butcher
TCM (Technology Corporate Management) Software Engineer
Cell:  +27 (0)84 676 0329
Tell:  +27 (0)11 483-2000
Fax:   +27 (0)11 728-3656
Nat. IT Diploma, MCSE, IBM Tivoli Storage Manager 5.1
Certified, NetVault Certified, IPSTor Certified,
IBM Certified Specialist - Enterprise Tape Solutions
Version 2

==
Download ringtones, logos and picture messages at Ananzi Mobile Fun.
http://www.ananzi.co.za/cgi-bin/goto.pl?mobile

<Prev in Thread] Current Thread [Next in Thread>