RE: [ActiveDir] Protecting Active Directory

[GRILLENMEIER,GUIDO (HP-Germany,ex1)]

actually, you need to consider this issue more than others Joe, as you're building all group-memberships on Domain Local Groups (in a multi-domain environment) which will kill you, if you do accidentally delete the wrong objects. Obviously you could still restore all domains - but that's pretty nasty.   And accidents don't only happen to lower privileged admins - it could be one of you three...   /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joe Sent: Mittwoch, 3. M�rz 2004 16:40 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Protecting Active Directory Yes, excellent point. We haven't started worrying about that granularity yet. If something is deleted, we figured the person with the power to delete it intended it. Have a nice day. There are only three people who can really do any huge mass deletes across the board and we all sit within smacking distance of each other so we are careful as we have sensitive ears and don't want to be cuffed. I do think we need some sort of solution for this eventually though. But it is more to reduce nuisance factor for silly OU admins than anything else.   Right now mostly still just worrying about the old South East Michigan was swallowed by a volcano that came out of nowhere... How do we make sure we can recover.   ------------- http://www.joeware.net   (download joeware) http://www.cafeshops.com/joewarenet  (wear joeware)       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GRILLENMEIER,GUIDO (HP-Germany,ex1) Sent: Wednesday, March 03, 2004 3:01 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Protecting Active Directory will only be good for restoring the DC hardware, but depending on your setup won't be sufficient to fully recover accidentally deleted objects.   I've worked with Aelita on this whitepaper to discuss the potential issues: http://www.aelita.com/library/whitepapers/10_Things_to_Know_about_Active_Directory_Recovery.pdf   /Guido From: joe [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 3. M�rz 2004 02:11 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Protecting Active Directory 1. Multiple DCs in diseparate locations.   2. Virtual DC for each domain that is shut down nightly and the disk file for each is copied to some other location.   ------------- http://www.joeware.net   (download joeware) http://www.cafeshops.com/joewarenet  (wear joeware)       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philadelphia, Lynden - Revios Toronto Sent: Tuesday, March 02, 2004 3:49 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Protecting Active Directory Importance: High What is the best way to backup your domain controller so you can restore it in a disaster situation.