[Networker] Active Directory Restores with Networker!

AD restores with Networker were a bit of a challenge, but this is our home-
brewed procedure tested and verified to work--


Based on Legato Networker versions:
NT4.0 Server v. 5.5.3
W2k Clients v. 5.7


Non-Authoritative Active Directory Recover

To recover your most recent AD Backup


On the DC, close all programs and restart the computer
Press F8 to display special boot options, selecting Directory Services
Restore Mode (Windows 2000 Domain Controllers Only). Active Directory is
now taken offline.
Open Networker User and mark both the SYSTEM STATE and SYSTEM FILES and
click start.
When the restore is finished, verify that the operation was successful.
Restart the DC, this time in normal mode.

The Active Directory recovery is now complete.




----------------------------------------------------------------------------
----

Authoritative Active Directory Recover

For Domains with multiple domain controllers, you can perform an
authoritative restore to cause your restored Active Directory data to be
replicated to all DC's in the domain. Primary purpose for this type of
restore is to recover any W2k objects that have been inadvertently deleted,
modified or corrupted.


NOTES: After the authoritative restore, the administrator can delete newer
objects that are not needed.
The SYSVOL directory is independent but cannot be separated from the
authoritative restore of the AD.


Restart the DC in Directory Services Restore Mode.
Open Networker User and mark both the SYSTEM STATE and SYSTEM FILES and
click start.
Restart the DC again back into Directory Services Restore Mode.
Run ntdsutil
t the ntdsutil prompt, type: authoritative restore
Next prompt, type: restore database
Exit the ntdsutil utility by typing quit at each successive ntdsutil prompt
until you are back to the OS prompt.
Copy the entire restored SYSVOL\DOMAIN directory and all subdirectories to
an alternate-safe location on the server.
Restart in Normal Mode
Wait for the SYSVOL share to be published. After the SYSVOL has been
published:
Copy the entire SYSVOL\DOMAIN directory tree from the new location
answering YES TO ALL.

--
Note: To sign off this list, send a "signoff" command via email
to listserv AT listmail.temple DOT edu or visit the list's Web site at
http://listmail.temple.edu/archives/networker.html where you can
also view and post messages to the list.
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=