Active Directory Disaster recovery

Site:

 

 Active Directory (DC)

Operating System: Windows server 2003

Site:

 

 ADC (Additional Domain Controller)

Operating System: Windows server 2003

Introduction:

 

A directory is a collection of information that is organized in a particular way.The organizational method makes sorting through the information fast and easy so you can find the desired data.With a directory, users can perform search queries and find network information quickly and easily.The directory contains information

about objects such as users, groups, computers, domains, organizational units and security policies. This information can be published for use by users and administrators. The directory is stored on servers known as domain controllers and can be accessed by network applications or services.

Active Directory is a collection of supporting files including transaction logs and the system volume, or Sysvol, that contains logon scripts and group policy

information. It is the services that support and use the database, including Lightweight Directory Access Protocol (LDAP), Security protocol, Replication processes, and the File Replication Service (FRS).

There are five different FSMO roles that cover the replication exceptions and process handling exceptions of multimaster replication.

The Five FSMO Roles:

Schema Master

Domain Naming Master

Relative ID (RID) Master

PDC Emulator

Infrastructure Master

 

Global Catalogue: Global catalog is the first Domain Controller in each AD forest.

• Schema Master: The schema master domain controller controls all updates and modifications to the schema. To update the schema of a forest, you must have access to the schema master. There can be only one schema master in the whole forest.
• Domain naming master: The domain naming master domain controller controls the addition or removal of domains in the forest. There can be only one domain naming master in the whole forest.
• Infrastructure Master: The infrastructure is responsible for updating references from objects in its domain to objects in other domains. At any one time, there can be only one domain controller acting as the infrastructure master in each domain.
• Relative ID (RID) Master: The RID master is responsible for processing RID pool requests from all domain controllers in a particular domain. At any one time, there can be only one domain controller acting as the RID master in the domain.
• PDC Emulator: The PDC emulator is a domain controller that advertises itself as the primary domain controller (PDC) to workstations, member servers, and domain controllers that are running earlier versions of Windows. For example, if the domain contains computers that are not running Microsoft Windows XP Professional or Microsoft Windows 2000 client software, or if it contains Microsoft Windows NT backup domain controllers, the PDC emulator master acts as a Windows NT PDC. It is also the Domain Master Browser, and it handles password discrepancies. At any one time, there can be only one domain controller acting as the PDC emulator master in each domain in the forest.

  

Failover

1. Primary Domain controller Crashed

2. ADC is running only which is not operational

Steps To Make Global Catalogue for ADC

1. On the domain controller where you want the new global catalog, start the Active Directory Sites and Services snap-in. To start the snap-in, click Start, point toPrograms, point to Administrative Tools, and then click Active Directory Sites and Services. In the console tree, double-click Sites, and then double-click sitename.

  

2. Double-click Servers, click your domain controller, right-click NTDS Settings, and then click Properties.

3. On the General tab, click to select the Global catalog check box to assign the role of global catalog to this server.

Restart the domain controller (Not Necessary)

  

Steps to Transfer FSMO roles

1. Go to run

2. Type cmd

3. Type  “ntdsutil”

4. Then go to roles by typing “roles”

5. Then go to  maintenance “fsmo maintenance”

6. Then make connection to domain controller “connections”

7. Then connect to own ADC domain controller that is running whom you want to make operational server    “connect to server icmphbprgra” (Running Domain controller)

8. If connection succeeded type “quit”

9. Then start  transfer ing roles

10. seize domain naming master  (If prompt for warning press Yes)

11. seize pdc (If prompt for warning press Yes)

12. seize rid master (If prompt for warning press Yes)

13. seize schema master (If prompt for warning press Yes)

ADC is operational now and set to primary DC.

 Chill 