Restoring Active Directory

By Author: kennie
Total Articles: 129
Comment this article

To authoritatively restore the entire directory and override the version increase, type restore database verinc version_inerease and press Enter. To authoritatively restore a subtree of the directory and override the version increase, type restore subtree subtree MCSA exams and press Enter. The authoritative restore opens the Ntds.dit file, increases version numbers, counts the records that need updating, verifies the number of records updated, and reports completion. If a version number increase is not specified, one is automatically calculated. 12. Type quit and press Enter to exit the Ntdsutil utility and close the Command Prompt window. 13- Restart the domain controller in normal mode and connect the restored domain controller to the network. When the restored domain controller is online and con?nected to the network, normal replication brings the restored domain controller up to date with any changes from the additional domain controllers that were not overridden by the authoritative restore. Replication also propagates the authoritatively restored object(s) to other domain controllers ...
... in the forest. The deleted objects that were marked as authoritative are replicated from the restored domain controller to the additional domain controllers. Because the objects that are restored have the same free 70-270 test questions object globally unique identifier (GUID) and object SID, security remains intact, and object dependencies are maintained. 14. Ensure the integrity of the computer's Group Policy by performing one of the following: Q If you authoritatively restored the entire Active Directory database, copy the Sysvol directory on the alternate location over the existing one after the Sys-vol share is published. Q If you authoritatively restored specific Active Directory objects, copy only the policy folders (identified by the GUID) corresponding to the restored policy objects from the alternate location after the Sysvol share is published. Then, copy them over the existing ones. When authoritatively restoring either the entire Active Directory database or selected objects, it is important that you copy the Sysvol and policy data from the alternate location after the Sysvol share is published. If the computer is in a replicated domain, it may take several minutes before the Sysvol share is published because it needs to syn?chronize with its replication partners. If all computers in the domain are authoritatively restored and restarted at the same time, then each will be waiting (indefinitely) to synchronize with each other. In this case, restore one of the domain controllers first so that its Sysvol share can be published; then restore the other free Microsoft questions computers nonauthoritatively.