Mark Minasi's Reader Forum
Mark Minasi's Reader Forum
Home | Profile | Register | Active Topics | Active Polls | Members | Search | FAQ | Minasi Forum RSS Feed
Username:
 Password:
Save Password
Forgot your Password?

 All Forums
 HALP! Questions on Windows and Windows Server
 Microsoft Data Protection Manager
 Protecting Active Directory		  New Topic  Reply to Topic
 Printer Friendly
Author Previous Topic Topic Next Topic  

rmoore@afsc.org
Here To Stay

USA
260 Posts
Status: offline
Posted - 02/27/2012 :  11:39:05 AM  Show Profile  Reply with Quote
Any advice about using DPM to protect Active Directory? And also to restore Active Directory?

I've done reading and looking on the web. Everything seems to say you just protect the System State. They say you have to use Windows Backup to restore the System State.

Would I be better off using Bare Metal Recovery to protect AD? Any caveats about restoring AD?

Thanks for any tips.

Rob

NMDANGE
Honorable But Hopeless Addict

USA
2054 Posts
Status: offline
Posted - 02/27/2012 :  12:03:24 PM  Show Profile  Visit NMDANGE's Homepage  Reply with Quote
Bare Metal Recovery is System State on steroids. It's the same thing, except you can install Windows at the same time as the restore, instead of having to do it manually prior to the system state restore.

And as far as caveats about restoring AD, yes absolutely. Read here about USN rollback that can occur: http://technet.microsoft.com/en-us/library/d2cae85b-41ac-497f-8cd1-5fbaa6740ffe(v=ws.10)#usn_and_usn_rollback

It is about using snapshots with virtual domain controllers, but it is the same idea.

Basically, never restore a domain controller unless *every* domain controller has been destroyed and you need to start building 1 new one. Otherwise, do a metadata cleanup, and dcpromo a new domain controller.

For inadvertent object deletions, use the AD Recycle Bin feature of Server 2008.
Michael D'Angelo
(former)MVP-MIIS, Pace University Senior Systems Administrator (Windows)
(MS)NMDANGE
PhoeniX WorX Systems Administrator. If you play Total Annihilation, please join us. http://www.phoenixworx.org
Go to Top of Page

rmoore@afsc.org
Here To Stay

USA
260 Posts
Status: offline
Posted - 02/27/2012 :  12:19:31 PM  Show Profile  Reply with Quote
Thanks. That's about what I thought. Basically, using DPM to restore AD is a last ditch, no other alternative kind of thing.

Thanks,
Rob
Go to Top of Page
  Previous Topic Topic Next Topic  
 New Topic  Reply to Topic
 Printer Friendly
Jump To:
Mark Minasi's Reader Forum © 2002-2011 Mark Minasi Go To Top Of Page
This page was generated in 0.06 seconds. Snitz Forums 2000