This question already has an answer here:
- How do I deal with a compromised server? 12 answers
Our main server got hit with a virus last week and although I cleared it the server is acting very slow and getting tons of reg errors. We have a back up server that only has the OS installed on it. (2003)
What are some options on moving AD,DNS,DC to the back up server? I`ve looked up AD migration but does this move over all the documents and such too?
We are still using the server that was infected just so people can work. Would it be wise to install all the software and documents on the backup and then migrate over? Anyone know of a good guide to do this?
Or is just starting from scratch more secure?
Install DNS,AD,DC to back up server under a new domain and then entering all the users installing the license server, terminal server etc... And then move everyone's information over...
I plan on formatting the server that was infected and making it a second DC in case this happens again.