RE: [ActiveDir] seize schema master question

[Pelle, Joe]

Thanks for the feedback everyone….   In retrospect resurrecting the root domain would have been the smart thing to do for many reasons (dependencies).   But since the schema master would in theory never have been online – ever – the seizure would be the appropriate step – I just didn’t know if moving the schema master to a child domain would have any ill effects on the rest of the infrastructure…   Thanks again to all who responded!   Joe Pelle Senior Infrastructure Architect Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.591.7324  Fax 734.632.6151 [EMAIL PROTECTED] http://www.valassis.com/   This message may include proprietary or protected information. If you are not the intended recipient, please notify me, delete this message, and do not further communicate the information contained herein without my express written consent.   From: Jorge de Almeida Pinto [mailto:[EMAIL PROTECTED] Sent: Monday, May 02, 2005 9:30 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] seize schema master question   oops, I forgot..   only seize a FSMO role when really needed. in this case you don't need to seize the schame role why restore a domain if it's working? check only dependencies between the domains   #JORGE#   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jorge de Almeida Pinto Sent: maandag 2 mei 2005 15:11 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] seize schema master question * Ping the Schema master form a child domain DC * Check the trust between the parent domain and the child domain with NETDOM or with Active Directory Domains and Trusts (this should be one of the checks after restoring the child domain) * Ask for the FSMO role owners with NETDOM QUERY FSMO * Run DCDIAG /V on the child DC   By the way: did the complete child domain go back in time?   HINT: think about what happens with objects that were created after the backups use used   TIP: when doing a DR of a certain domain or the complete forest you MUST in both situations take the complete forest and its owners into account. There are dependencies and you cannot work alone   Cheers, #JORGE#   PS.: not so long ago there was a similar thread where I and I think Guido made some suggestions.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pelle, Joe Sent: maandag 2 mei 2005 14:04 To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] seize schema master question W2K3 Domain and E2k3 –   Error related to: unable to contact the active directory   Joe Pelle Senior Infrastructure Architect Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.591.7324  Fax 734.632.6151 [EMAIL PROTECTED] http://www.valassis.com/   This message may include proprietary or protected information. If you are not the intended recipient, please notify me, delete this message, and do not further communicate the information contained herein without my express written consent.   From: Jorge de Almeida Pinto [mailto:[EMAIL PROTECTED] Sent: Monday, May 02, 2005 7:57 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] seize schema master question   A DR test... interesting. I have created such a procedure once for one of my customers...damn what a rush! ;-)   Is this W2K or W2K3 AD? What are the errors or notifications you have experienced when trying to install exchange?   Cheers, #JORGE#     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pelle, Joe Sent: maandag 2 mei 2005 13:25 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] seize schema master question Hello!   Our company recently went through a DR test and had some interesting results.  One in particular is that we couldn’t get Exchange installed because it couldn’t write to the Schema (schema master was not restored).  Here is my question:  we have an empty root (where the schema master lives) that we did NOT restore… and we have our primary domain where users and Exchange lives (this is the domain that we restored).  Could I have seized the Schema master role and moved it to the restored (child domain) or should we have restore the root?   I am going to try this in the lab this week but I wanted some feedback – past experiences, how some of you would recommend doing this, etc. As always, Thanks!   Joe Pelle Senior Infrastructure Architect Information Technology Valassis / IT 19975 Victor Parkway Livonia, MI 48152 Tel 734.591.7324  Fax 734.632.6151 [EMAIL PROTECTED] http://www.valassis.com/   This message may include proprietary or protected information. If you are not the intended recipient, please notify me, delete this message, and do not further communicate the information contained herein without my express written consent.   This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.