Brett, thanks for post reply
ADC - ex2k3 active directory connector
CA - is connection agreement defined within ADC
> ... So is the CA data perhaps in attributes that are not set on the backup
> objects? - YES
"Ergo it kind of works as a merge of old attributes that were set and new attributes that were set post backup. "
do i read this right in that the authoritative restore allows data to be replicated back from a DC ?? - don't see how this can work unless of course an attribute that has no data in it has a null USN (as on my restored backup set ?) which is not incremented by the authoritative restore command, and which is therefore overwritten by another server which has some data in it
this would seem to contradict the concept of authoritative restore ?
Thanks
GT
> do i read your post correctly in that the attribute data that is being (in my view incorrectly) replicated back is
----- Original Message -----
From: [EMAIL PROTECTED]
Date: Mon, 16 Aug 2004 11:25:05 -0700 (PDT)
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] w2k authoritative restore
> Auth restore will auth restore attributes that _exist_ in the
> backup as they were at the time of backup, but not auth restore attributes
> that didn't exist. Ergo it kind of works as a merge of old attributes
> that were set and new attributes that were set post backup.
>
> ... So is the CA data perhaps in attributes that are not set on the backup
> objects?
>
> Further like we merge the attributes that are auth restored over any
> existing ones, we also merge in objects as well. So a new object post
> backup will not get "auth restored" (i.e. the c
loses thing woudl be to
> delete the new object)
>
> Just grasping at straws, don't know much specifics about CA or ADC.
>
> Cheers,
> Brett Shirley (msft)
> AD Developer
>
> On Mon, 16 Aug 2004 [EMAIL PROTECTED] wrote:
>
> > dear all, sorry to "bomb" the list with queries, but was hoping to get
> > a heads up on this issue of authoritative restore subsequent to a
> > directory modification using ADC
> >
> > we are testing the procedure of rollback of a domain that has been
> > modified using an ADC connection agreement
> >
> > i have a backup set taken prior to the processing of the ADC CA and
> > can confirm the successful restore of a DC to the prior state. (no
> > email address in the user objects no CA objects etc)
> >
> > despite the fact that this data is restored authoritati
vely as soon as
> > the restored DC is attached to the network with its DS started the
> > data prior to the CA processing is overwritten with the data from an
> > another server
> >
> > have followed what seems to be a simple process of auth restore;
> >
> > 1. boot into DS restore
> > 2. restore system state and c: using the original location / always overwrite
> > 3. restart
> > 4. boot into DS restore mode
> > 5. run ntdsutil / authoritative restore / restore database
> >
> > my first thought was that the ADC has created that many chages that
> > the default version increment of auth restore (7000000) is not enough
> > for the restored DC to have higher USN than the server that is left
> > online
> >
> > have tried auth restore with the verinc value of 10000000 but still
> > the old d
ata gets overwritten
> >
> > any clues ??
> >
> > GT
> >
> >
> >
> >
> >
> > List info : http://www.activedir.org/mail_list.htm
> > List FAQ : http://www.activedir.org/list_faq.htm
> > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
> >
>
> List info : http://www.activedir.org/mail_list.htm
> List FAQ : http://www.activedir.org/list_faq.htm
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
