RE: [ActiveDir] cloning DC's

2005-09-08 Thread Almeida Pinto, Jorge de
Funny how this topic comes up now and then...
I may even be worth creating a KB article on this issue or is that
useless?

Windows 2000/2003 DCs should NEVER, NEVER, NEVER be imaged for
backup/restore purposes! Imaging is NOT AD aware backup/restore solution
and thus not MS approoved!
A W2K3 pre-SP1 hotfix, a W2K post-SP4 hotfix and W2K3 SP1 will stop DCs
replicating by disabling replication when USN rollback is detected. As I
know the detection is not guaranteed, but when it detects it does that
to prevent further damage. 

The same problem CAN occur when DCs are used in a virtual environment
and snapshots are used for example

Be very carefull with this! 

Read more at:
MS-KBQ875495_How to detect and recover from a USN rollback in Windows
Server 2003
MS-KBQ885875_How to detect and recover from a USN rollback in Windows
2000 Server

If you don't pay attention to this mail or to mail from others about
this and still want to do it... Well, be sure you get enough coffee,
painkillers (for the headache you will get from it), dust off your ABBA
collection ;-) and afterwards possibly search for a new job or be ready
to get yelled at.

Cheers
Jorge

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 23:03
To: activedirectory
Subject: [ActiveDir] cloning DC's

I know i read this thread before but i can't seem to find it.

we are creating a new forest root and the IBM consultants here created
the first root dc and now they want to clone it using Disk Image and
sysprep to create the other DC's in the root.

I think i heard this is a bad idea. Am I right?

I can't seem to find any article on this but I do remember this being
spoken of on the list and I don't remeber what the conculsion was.

thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/


This e-mail and any attachment is for authorised use by the intended 
recipient(s) only. It may contain proprietary material, confidential 
information and/or be subject to legal privilege. It should not be copied, 
disclosed to, retained or used by, any other party. If you are not an intended 
recipient then please promptly delete this e-mail and any attachment and all 
copies and inform the sender. Thank you.
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


Re: [ActiveDir] cloning DC's

2005-09-08 Thread Phil Renouf
A KB article might be a good idea actually. Definitely be good to be able to point to a definitive article on the subject when consultants bring this up as a possibility.

Phil
On 9/8/05, Almeida Pinto, Jorge de [EMAIL PROTECTED] wrote:
Funny how this topic comes up now and then...I may even be worth creating a KB article on this issue or is that
useless?Windows 2000/2003 DCs should NEVER, NEVER, NEVER be imaged forbackup/restore purposes! Imaging is NOT AD aware backup/restore solutionand thus not MS approoved!A W2K3 pre-SP1 hotfix, a W2K post-SP4 hotfix and W2K3 SP1 will stop DCs
replicating by disabling replication when USN rollback is detected. As Iknow the detection is not guaranteed, but when it detects it does thatto prevent further damage.The same problem CAN occur when DCs are used in a virtual environment
and snapshots are used for exampleBe very carefull with this!Read more at:MS-KBQ875495_How to detect and recover from a USN rollback in WindowsServer 2003MS-KBQ885875_How to detect and recover from a USN rollback in Windows
2000 ServerIf you don't pay attention to this mail or to mail from others aboutthis and still want to do it... Well, be sure you get enough coffee,painkillers (for the headache you will get from it), dust off your ABBA
collection ;-) and afterwards possibly search for a new job or be readyto get yelled at.CheersJorge-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Tom KernSent: Wednesday, August 17, 2005 23:03To: activedirectorySubject: [ActiveDir] cloning DC's
I know i read this thread before but i can't seem to find it.we are creating a new forest root and the IBM consultants here createdthe first root dc and now they want to clone it using Disk Image and
sysprep to create the other DC's in the root.I think i heard this is a bad idea. Am I right?I can't seem to find any article on this but I do remember this beingspoken of on the list and I don't remeber what the conculsion was.
thanksList info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:http://www.mail-archive.com/activedir%40mail.activedir.org/This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: 
http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-21 Thread joe
Uh... I hope they brought a lot of pixie dust

They will need it and no amount of calls to MS will help out when this
blows.

Does anyone on this list work for Itsy Bitsy Machine? Go talk to your
people!


 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 5:03 PM
To: activedirectory
Subject: [ActiveDir] cloning DC's

I know i read this thread before but i can't seem to find it.

we are creating a new forest root and the IBM consultants here created the
first root dc and now they want to clone it using Disk Image and sysprep to
create the other DC's in the root.

I think i heard this is a bad idea. Am I right?

I can't seem to find any article on this but I do remember this being spoken
of on the list and I don't remeber what the conculsion was.

thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-18 Thread Eric Fleischman
Title: RE: [ActiveDir] cloning DC's






I'm not equating it with 
cloning in the impact to the directory nor steps followed, only in the typically 
desired result of most who try and clone (most who try and clone typically do so 
to bring up a DC fast, which is effectively what IFM gives you, just in a safe 
manner via a different set of steps of course).

~Eric



From: [EMAIL PROTECTED] on 
behalf of [EMAIL PROTECTED]Sent: Wed 8/17/2005 10:22 
PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] 
cloning DC's

Eric,I just want to be sure that you are not equating 
backup with cloning. I amafraid that the OP may take your "eat cake" 
statement to mean that you areagreeing with the cloning proposal. Install 
from media was not made forcloning. Unless I am wrong again, the install 
from media is not done (nor isit supposed to be done) on a cloned image of 
existing DCs. "Cloned" in thiscase means something like Ghost image of a DC 
taken from who knows when. Thisis completely different from a backup of a 
DC, backup being NTBackup orsimilar.So, I am not very sure that he 
is not going to be eating some very stalecakes if he reads you 
literally.Sincerely,Dèjì Akómöláfé, MCSE+M MCSA+M 
MCP+IMicrosoft MVP - Directory Serviceswww.readymaids.com - we know 
ITwww.akomolafe.comDo you now realize that Today is the Tomorrow you 
were worried aboutYesterday? 
-anonFrom: 
[EMAIL PROTECTED] on behalf of Eric FleischmanSent: Wed 
8/17/2005 9:52 PMTo: ActiveDir@mail.activedir.orgSubject: RE: 
[ActiveDir] cloning DC'sThere is a way to have your cake and eat 
it too, however.Take a backup of the DC, then use the install from media 
(IFM) featureto dcpromo more machines in to the environment using the backup 
taken asa seed for the dataset. This will allow you to rapidly bring up new 
DCswithout having to re-source all of the info yet still not do damage 
toyour environment (with the definition of "do damage" left out 
forbrevity, as it has been covered on this DL previously if memory 
servesme correctly).IFM was added in WS2003 to address scenarios 
such as this.~Eric-Original Message-From: 
[EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] 
On Behalf Of Rick KingslanSent: Wednesday, August 17, 2005 7:57 PMTo: 
ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] cloning DC'sTom 
-Regardless of the scenario and how it's done - you never, never, 
never,clone DCs. This will lead to very bad things - possibly 
including theappearance of the Anti-Christ, opening of Black Holes, ABBA 
coming backtoprominence.Do NOT do this. Do NOT allow IBM 
to do it. Period.Rick-Original Message-From: 
[EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] 
On Behalf Of Tom KernSent: Wednesday, August 17, 2005 7:56 PMTo: 
activedirectorySubject: Re: [ActiveDir] cloning DC'sI went back and 
i saw B. Shirley's remarks on cloning dc's.I'm wondering if this applies to 
my senario below-cloning a DC with Disk Image and sysprep and creating 
new DC's thatway?Is this very very bad? is there an article or paper 
explaining why?or anyone care to explain why.or is this 
ok?thanks. sorry to harp but these AD consultants from IBM want to 
gothis route tomorrow and I'm thinking its not a good idea for 
somereason but I'd like to be sure before i bring it up.Thanks 
againOn 8/17/05, Tom Kern [EMAIL PROTECTED] wrote: I know 
i read this thread before but i can't seem to find it. we are 
creating a new forest root and the IBM consultants here created the 
first root dc and now they want to clone it using Disk Image and sysprep 
to create the other DC's in the root. I think i heard this is a 
bad idea. Am I right? I can't seem to find any article on this 
but I do remember this being spoken of on the list and I don't remeber 
what the conculsion was. thanksList info 
: http://www.activedir.org/List.aspxList 
FAQ : http://www.activedir.org/ListFAQ.aspxList 
archive:http://www.mail-archive.com/activedir%40mail.activedir.org/List 
info : http://www.activedir.org/List.aspxList 
FAQ : http://www.activedir.org/ListFAQ.aspxList 
archive:http://www.mail-archive.com/activedir%40mail.activedir.org/List 
info : http://www.activedir.org/List.aspxList 
FAQ : http://www.activedir.org/ListFAQ.aspxList 
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/List 
info : http://www.activedir.org/List.aspxList 
FAQ : http://www.activedir.org/ListFAQ.aspxList 
archive: http://www.mail-archive.com/activedir%40mail.activedir.org/




Re: [ActiveDir] cloning DC's

2005-08-17 Thread Tom Kern
I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.
 
 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.
 
 I think i heard this is a bad idea. Am I right?
 
 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.
 
 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread Steve Linehan
Yes this is a very very bad idea and is not supported.  In fact I
believe that sysprep will even block in this scenario and not run.
While you can build the base Operating System and while it is a member
or stand alone server sysprep it and then use that image to build
several servers which can then be DC Promoed you can not image an
existing DC.  If you are running Windows Server 2003 here is what I
suggest doing:

1) Create a base OS image of a standalone or member server.
2) Use this image to create the servers that you will use then promote
to new DCs.
3) Make a system state backup of the original DC.
4) Use the Install From Media(IFM) option to build the new DC/GCs, see
http://support.microsoft.com/default.aspx?scid=kb;en-us;311078 

This is a supported method and should result in an install time that is
very close to the unsupported cloning method. 

Thanks,

-Steve


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 7:56 PM
To: activedirectory
Subject: Re: [ActiveDir] cloning DC's

I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that
way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.
 
 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.
 
 I think i heard this is a bad idea. Am I right?
 
 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.
 
 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread Steve Linehan
As far as documentation that states this please see the following
Knowledge Base Article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;830958

Thanks,

-Steve

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan
Sent: Wednesday, August 17, 2005 8:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] cloning DC's

Yes this is a very very bad idea and is not supported.  In fact I
believe that sysprep will even block in this scenario and not run.
While you can build the base Operating System and while it is a member
or stand alone server sysprep it and then use that image to build
several servers which can then be DC Promoed you can not image an
existing DC.  If you are running Windows Server 2003 here is what I
suggest doing:

1) Create a base OS image of a standalone or member server.
2) Use this image to create the servers that you will use then promote
to new DCs.
3) Make a system state backup of the original DC.
4) Use the Install From Media(IFM) option to build the new DC/GCs, see
http://support.microsoft.com/default.aspx?scid=kb;en-us;311078 

This is a supported method and should result in an install time that is
very close to the unsupported cloning method. 

Thanks,

-Steve


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 7:56 PM
To: activedirectory
Subject: Re: [ActiveDir] cloning DC's

I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that
way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.
 
 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.
 
 I think i heard this is a bad idea. Am I right?
 
 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.
 
 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread Francis Ouellet
I'm thinking out loud here, why not clone/sysprep the server as stand
alone machine then join the root domain and then DCPROMO? Those steps
can be automated and are from my perspective very easy to do. If you
sending DCs to a remote location then use dcpromo with install from
media

Francis

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: August 17, 2005 5:03 PM
To: activedirectory
Subject: [ActiveDir] cloning DC's

I know i read this thread before but i can't seem to find it.

we are creating a new forest root and the IBM consultants here created
the first root dc and now they want to clone it using Disk Image and
sysprep to create the other DC's in the root.

I think i heard this is a bad idea. Am I right?

I can't seem to find any article on this but I do remember this being
spoken of on the list and I don't remeber what the conculsion was.

thanks
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread Rick Kingslan
Tom - 

Regardless of the scenario and how it's done - you never, never, never,
clone DCs.  This will lead to very bad things - possibly including the
appearance of the Anti-Christ, opening of Black Holes, ABBA coming back to
prominence.

Do NOT do this.  Do NOT allow IBM to do it.  Period.

Rick

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 7:56 PM
To: activedirectory
Subject: Re: [ActiveDir] cloning DC's

I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.
 
 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.
 
 I think i heard this is a bad idea. Am I right?
 
 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.
 
 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread Eric Fleischman
There is a way to have your cake and eat it too, however.

Take a backup of the DC, then use the install from media (IFM) feature
to dcpromo more machines in to the environment using the backup taken as
a seed for the dataset. This will allow you to rapidly bring up new DCs
without having to re-source all of the info yet still not do damage to
your environment (with the definition of do damage left out for
brevity, as it has been covered on this DL previously if memory serves
me correctly).

IFM was added in WS2003 to address scenarios such as this.

~Eric



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Wednesday, August 17, 2005 7:57 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] cloning DC's

Tom - 

Regardless of the scenario and how it's done - you never, never, never,
clone DCs.  This will lead to very bad things - possibly including the
appearance of the Anti-Christ, opening of Black Holes, ABBA coming back
to
prominence.

Do NOT do this.  Do NOT allow IBM to do it.  Period.

Rick

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 7:56 PM
To: activedirectory
Subject: Re: [ActiveDir] cloning DC's

I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that
way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.
 
 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.
 
 I think i heard this is a bad idea. Am I right?
 
 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.
 
 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


RE: [ActiveDir] cloning DC's

2005-08-17 Thread deji
Eric,
 
I just want to be sure that you are not equating backup with cloning. I am
afraid that the OP may take your eat cake statement to mean that you are
agreeing with the cloning proposal. Install from media was not made for
cloning. Unless I am wrong again, the install from media is not done (nor is
it supposed to be done) on a cloned image of existing DCs. Cloned in this
case means something like Ghost image of a DC taken from who knows when. This
is completely different from a backup of a DC, backup being NTBackup or
similar.
 
So, I am not very sure that he is not going to be eating some very stale
cakes if he reads you literally.
 
 
Sincerely,

Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I
Microsoft MVP - Directory Services
www.readymaids.com - we know IT
www.akomolafe.com
Do you now realize that Today is the Tomorrow you were worried about
Yesterday?  -anon



From: [EMAIL PROTECTED] on behalf of Eric Fleischman
Sent: Wed 8/17/2005 9:52 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] cloning DC's



There is a way to have your cake and eat it too, however.

Take a backup of the DC, then use the install from media (IFM) feature
to dcpromo more machines in to the environment using the backup taken as
a seed for the dataset. This will allow you to rapidly bring up new DCs
without having to re-source all of the info yet still not do damage to
your environment (with the definition of do damage left out for
brevity, as it has been covered on this DL previously if memory serves
me correctly).

IFM was added in WS2003 to address scenarios such as this.

~Eric



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan
Sent: Wednesday, August 17, 2005 7:57 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] cloning DC's

Tom -

Regardless of the scenario and how it's done - you never, never, never,
clone DCs.  This will lead to very bad things - possibly including the
appearance of the Anti-Christ, opening of Black Holes, ABBA coming back
to
prominence.

Do NOT do this.  Do NOT allow IBM to do it.  Period.

Rick

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern
Sent: Wednesday, August 17, 2005 7:56 PM
To: activedirectory
Subject: Re: [ActiveDir] cloning DC's

I went back and i saw B. Shirley's remarks on cloning dc's.
I'm wondering if this applies to my senario below-
cloning a DC with Disk Image and  sysprep and creating new DC's that
way?

Is this very very bad? is there an article or paper explaining why?
or anyone care to explain why.
or is this ok?

thanks. sorry to harp but these AD consultants from IBM want to go
this route tomorrow and I'm thinking its not a good idea for some
reason but I'd like to be sure before i bring it up.

Thanks again

On 8/17/05, Tom Kern [EMAIL PROTECTED] wrote:
 I know i read this thread before but i can't seem to find it.

 we are creating a new forest root and the IBM consultants here created
 the first root dc and now they want to clone it using Disk Image and
 sysprep to create the other DC's in the root.

 I think i heard this is a bad idea. Am I right?

 I can't seem to find any article on this but I do remember this being
 spoken of on the list and I don't remeber what the conculsion was.

 thanks

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ: http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/