Ummm ... Ummmm ..... Not sure what I'm allowed to say. Ok, I just had a long conversation with Stuart ... it'll take me awhile to write up something a little more accurate than the below. More to come ...
Cheers, -BrettSh [msft] On Fri, 20 May 2005, Rick Kingslan wrote: > Well - then I guess that I don't have a problem with Recovery Manager > anymore then. :o) > > > > (Cost, however might be an issue... Don't know - never priced it because of > concern stated.... Now mitigated) > > > > But, I'm not likely to retire my Lag Site, nonetheless! Don't want to fix > what's not broke, Todd. > > > > Rick Kingslan MCSE, MCSA, MCT, CISSP > Microsoft MVP: > Windows Server / Directory Services > Windows Server / Rights Management > Windows Security (Affiliate) > Associate Expert > Expert Zone - www.microsoft.com/windowsxp/expertzone > WebLog - www.msmvps.com/willhack4food > > _____ > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd > (NIH/CC/DNA) > Sent: Friday, May 20, 2005 11:51 AM > To: [email protected]; [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site----Why not? > > > > Disagree Rick, > > > > MS changed the verbiage in the Q article to say they would support it. I > think it was when Stewart and I got into it a little here that caused them > to rethink the Q article... but I don't want to take the credit. > > > > Todd > > > > > > > > > > _____ > > From: Rick Kingslan [mailto:[EMAIL PROTECTED] > Sent: Thu 5/19/2005 11:12 AM > To: [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site----Why not? > > Todd - > > I personally don't have a problem with Recovery Manager. > > That being said - Last I checked, Microsoft still didn't allow it as a > SUPPORTABLE solution for the purpose under discussion. > > With our company being an Enterprise Agreement customer with a PSS agreement > > scaled to 'Get Ballmer out of bed - we've got a CritSit case!" response, I > can't allow anything into the environment that would put us at risk. > > Besides, being an EA customer has the benefit of the solution that I > proposed being pretty low-cost, given the overall benefits. And, I don't > find NTDSUTIL overly difficult or intensive to use. > > But, that's just me. > > -rtk > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Myrick, Todd > (NIH/CC/DNA) > Sent: Thursday, May 19, 2005 8:34 AM > To: [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site----Why? > > Is it cheaper and more efficient to go the replication lag site route than > buy a proper backup and object level restore solution? > > I mean not to toot a vendor's horn, but Quest recovery manager turns the > process of restoring objects into a 15 minute click click operation. I > would hate to think of the number of steps you all must do to reanimate the > object in a directory using the "Recovery Site". > > >>From a operations standpoint, there is no substitute for a proper backup > solution and object level restore utility for AD. > > Thanks, > > Todd Myrick > > -----Original Message----- > From: TIROA YANN [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 19, 2005 4:20 AM > To: [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site > > Neil, > > I now understand... I'm a new man by now thanks to the mysterious lag site > that have been revealed to me :-)) > > Thanks a lot for your explanations. > > Cordialement, > > Yann TIROA > > Centre de Ressources Informatique. > Campus Scientifique de la DOUA. > B�t. Gabriel Lippmann - 2 �me �tage - salle 238. > 43, Bd du 11 Novembre 1918. > 69622 Villeurbanne Cedex. > > > > -----Message d'origine----- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la part de Ruston, Neil > Envoy� : jeudi 19 mai 2005 10:09 > � : '[email protected]' > Objet : RE: [ActiveDir] AD DR - replication lag site > > If the deletion occurs on DC1, then a DC (DC2) in the lag site will not > receive the deletion immediately. You therefore have a window of opportunity > > in which the deletion may be 'undone'. > > The deleted object may be auth restored on DC2 and thus replicated / > reanimated on DC1 (and any other DC which has received the deletion). > > [My terminology may not be acceptable to some - I have deliberately > explained this in simplistic terms :)] > > neil > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of TIROA YANN > Sent: 19 May 2005 08:54 > To: [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site > > > > Hello, > > I must apologize, but i'm a little bit confused. You said "With a lag site, > you ONLY have to do an authoritative restore (NTDSUTIL)". > > Do you mean if i delete my OU in DC in site A, all i have to do is do an > autoritative restore, not on site A, BUT on DC on lag site, reboot, and > dforce replication to site A ? And the non-autoritative restore will be in > fact the data on the lag site, that explain your pr�vious sentence ? Waou! > That's very celver !! > > Am I right ? > > Regards, > > Yann > > > > -----Message d'origine----- > De : [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] De la part de Dan Holme Envoy� : > > jeudi 19 mai 2005 08:51 � : [email protected] Objet : RE: > [ActiveDir] AD DR - replication lag site > > The major issue is the SPEED of recovery. With a lag site, you ONLY have to > > do an authoritative restore (NTDSUTIL). > > Without a lag site, you must first restore the AD from backup tape ('normal' > > restore), which can take quite some time!!!! Then, and only then, can you do > > the auth restore. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of TIROA YANN > Sent: Wednesday, May 18, 2005 11:46 PM > To: [EMAIL PROTECTED]; [email protected] > Subject: RE: [ActiveDir] AD DR - replication lag site > > Hello, > > Thanks for this interesting tips, but i didn't really understand the "behind > > the techno" of a lag site in case of just a deletion of an entire OU with > many objects. > > For example,if I have AD 2003 domain with 2 sites: > Site A has 2 DCs > Site B has one DC and is the lag site > Between 2 sites, i scheduled repl to appear every 1 week. > > In the situation of an OU deletion, i go to the DC i have made the deletion, > > and do an autoritative restore in dsmode and after rebbot, wait for > replication to take place in order to repopulate all my domain with my OU > restored. So what will the lag site help me in this situation ? > > I can understand that a lag site will help me if all my DCs in site A > crashed. So i would take all informations from the lag site to be restored > in site A such as "copy" my domain from the lag site by doing a dcpromo > /adv, and go my freshly installed DCs on site A, and restored my whole > domain. > However, I think i will have more updated information by restoring from my > yerterday backup than from the lag site... > > So, could you help me better understand the behind the techno of a lag site, > > i thing i misunderstand something important ;-( > > Thank you for your feedback. > > Have a nice day :-) > > Regards, > > Yann > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > ============================================================================ > > == > This message is for the sole use of the intended recipient. If you received > this message in error please delete it and notify us. If this message was > misdirected, Credit Suisse, its subsidiaries and affiliates (CS) do not > waive any confidentiality or privilege. CS retains and monitors electronic > communications sent through its network. Instructions transmitted over this > system are not binding on CS until they are confirmed by us. Message > transmission is not guaranteed to be secure. > ============================================================================ > > == > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
