Brett,

What is your basis for not being able to restore a DC from a image?  If the
DC has an old copy of the directory data, it will check its USN's and update
its copy.  What could cause havok if anything?  We are about to institute
this very same concept here to turn DR into a 10 minute process when it
comes to operating system recovery.  We will image the servers monthly and
restore from said image whenever one crashes.  What could cause a problem by
restoring a DC, it will be timestamped to be old and AD will synchronize it
with the rest of the domain.  

Please elaborate on your basis for comment.

Nathaniel Bahta

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brett Shirley
Sent: Wednesday, May 04, 2005 11:47 AM
To: [email protected]
Subject: RE: [ActiveDir] best practice?

jlc,

You can't restore a single DC via an image based backup, either.  It is not
supported, it is not allowed ... it is bad mojo.

Well, it wouldn't cause issues if the forest had ONLY that one DC (seems
unlikely the case), or for a multi-DC forest, you'd have to shutdown all the
DCs in the forest at the same time, when you took your backup images.  
And then on restore, restore them all at the same time.  Basically a pretty
infeasible suggestion.

Cheers,
-Brett Shirley [msft]

This posting is provided "AS IS" with no warranties, and confers no rights. 


On Wed, 4 May 2005, Joseph L. Casale wrote:

> Exactly, I do it for DR purposes, the old one dies - I reimage it and 
> put it back out there.
> No poblem...
> jlc
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Phil Renouf
> Sent: Wednesday, May 04, 2005 7:01 AM
> To: [email protected]
> Subject: Re: [ActiveDir] best practice?
> 
> On 5/4/05, John Shukovsky Jr <[EMAIL PROTECTED]> wrote:
> > BUT....as for DC's. I do "image" dc's using Symantec Livestate 
> > Recovery ( formerly PowerQuest V2i ). It works wonderfully. I 
> > primarily use for backups. I have not had to recover a server in 
> > production ( and hope I do not have to ) but I have in lab 10+ times
> and servers are as clean as ever.
> > You should take a look.
> 
> When Brett mentioned imaging DCs being a bad idea and to never ever do 
> it I believe that he was meaning don't Image a DC and try to use that 
> Image to build other new DCs and just trying to change the SID like 
> you would for a desktop. Bad idea!
> 
> Phil
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info   : http://www.activedir.org/List.aspx
> List FAQ    : http://www.activedir.org/ListFAQ.aspx
> List archive: 
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> 

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to