Domain controller failed beyond the recoverable point. Now that we have a new server running WIndows 2008, would I need to recreate all of the users to join the domain for AD to work? What would be the best approach?


  • 2
    You didn't back up the DC!?!? If this was my company it would be time for a new systems admin. Just so there is something useful in this comment: directory restore mode didn't work? – Supercereal Mar 1 '11 at 19:27

If you don't have any backup and that was the only domain controller in the domain, then you can't recover it and you have to accept this fact; next time, you'll know why it's considered best pratice to have at least two domain controllers :-)

That said, the situation is not good at all: even if you re-create the domain from scratch using the same domain name, the new domain would still be a completely different thing from the old one (a domain is identified by much more than its name, which can actually be changed); there's no way member computers are going to recognize it: you'll have to remove them from the old domain and join them to the new one, even if they have the same name.

The same is tue for user accounts: the ones you create in the new domain will not be the same you had in the old one, even if their names and passwords match; so your users are going to get new user profiles when logging on to the new domain, and you'll have to re-assign permissions on every network resource.

And I seriously hope you aren't running Exchange, or things are going to get interesting...

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy