Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We've been using Win2008R2's AD Snapshot feature to perform a nightly backup of our AD domain. I'm trying to figure out the steps that I need to run through to use one of these nightly backups to restore our AD domain on a 2nd server.

These are the commands we used to backup the AD DOM:

1. create a new snapshot

echo **** create a new snapshot **** >> %LOG% 2>>&1
ntdsutil snapshot "activate instance ntds" create quit quit >> %LOG% 2>>&1

2. mount the snapshot

echo **** mount the new snapshot **** >> %LOG% 2>>&1
ntdsutil snapshot "list all" "mount 1" quit quit >> %LOG% 2>>&1

3. copy NTDS snapshot to backup dir

echo **** backup the snapshot files **** >> %LOG% 2>>&1
c:
cd "\*SNAP*\WINDOWS\NTDS"
robocopy . "%BUDIR%" /E /Z /NFL /NDL /R:3 /LOG+:"%LOG%"

What I'm trying to figure out is how do I use ntdsutil to mount/restore this AD snapshot on a 2nd computer so that it's now our Master AD server.

EDIT #1

After more digging it doesn't look like @Greg Askew's method of Installing from Media (IFM) will work for us. I should've mentioned this in the original question, but didn't realize it mattered. We're attempting to create a backup of our existing primary AD DS and would like to be able to restore this to a 2nd server as part of our Disaster Recovery (DR) process. According to this blog:

... is a fast and efficient way to re-install a domain controller and get it up to sync, (that’s the proper way to handle a faulting replicas/domain controllers in most cases). There is some common misunderstandings of the concept “Install from media” I terms of if the operation could be performed entirely offline or online, the short answer is: No. It can’t be performed offline; you have to be online with at least one writable domain controller in the same domain as the IFM source is taken from and even then you may not be able to be fully efficient and cause replication to happen ...

It doesn't look like you can use the IFM method to restore the first server in the domain. One already has to be in the domain. So IFM is only an option for doing "online" restores, not "offline" such is our case.

share|improve this question
    
You know, there is no such Thing as a Primary AD DOM. –  TomTom Jan 6 '13 at 9:27
    
Not sure on the terminology then, the master? –  slm Jan 6 '13 at 9:30
    
Yeah, but that makes no sense beause you can change the master(s) (IIRC there are 5 master designations for different functionality) at will. You are better of to just set up a new DC and let AD handle it normally. Why going with a snapshot to start with? –  TomTom Jan 6 '13 at 9:51
    
I'm not really following you. This is part of our disaster recovery (DR). We're testing out to see if it's possible to setup a new W2008R2 server and restore from backups (snapshots) our master AD setup. –  slm Jan 6 '13 at 15:47
    
Probably be simpler to use the Bare Metal Recovery features of Windows Server Backup. If you do a full backup, you could do a full DC recovery (which would include your AD setup) from scratch with the image and a bootable copy of Windows Server R2. –  MikeAWood Jan 13 '13 at 23:07

1 Answer 1

You need to use the Install From Media (IFM) option:

ntdsutil.exe "act inst NTDS" ifm "Create Sysvol Full C:\IFM” q q

We use this exclusively due to our DIT is 7 GB and it takes a week to perform the initial replication without it.

Installing AD DS from Media
http://technet.microsoft.com/en-us/library/cc770654%28v=ws.10%29.aspx

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2011/10/14/dcpromo-advanced-mode-what-does-it-do.aspx

http://blogs.dirteam.com/blogs/sanderberkouwer/archive/2010/04/26/active-directory-domain-services-command-fu-part-5.aspx#CommandFuIFMSsyvol

share|improve this answer
    
No. Snapshots are for partial recovery, such as using ldp, adsiedit, dsa, or ldifde to extract data dumps of objects that were deleted or modified. –  Greg Askew Jan 6 '13 at 20:05
    
I don't think IFM is going to allow me to setup a 2nd server as the master AD given it needs to have at least one DC online. blogs.chrisse.se/2011/07/08/… –  slm Jan 7 '13 at 0:13
    
Why not use a standard backup/restore, or setup a permanent or semi-permanent recovery dc? –  Greg Askew Jan 7 '13 at 0:33
    
Our idea for DR would be all the existing servers have died, and we're setting up a replacement offsite server using a backup of the AD setup from our offsite storage facility. –  slm Jan 7 '13 at 0:37
    
Then you should use the standard backup/restore. Snapshots are irrelevant in that scenario. –  Greg Askew Jan 7 '13 at 1:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.