Directory Services Restore Mode

[patris1]

http://utools.com/help/DSRM.asp

What is DSRM?

Directory Services Restore Mode (DSRM) is a special boot mode for repairing or recovering Active Directory. It is used to log on to the computer when Active Directory has failed or needs to be restored.
You can log on to DSRM by using a special DSRM password that you set when you promoted the domain controller. Use the logon account name MyComputer\Administrator (language may vary). For MyComputer use the name of the computer.
Windows Server 2000 or 2003: To load Active Directory you must boot DSRM. UMove will offer to automatically reboot the computer to DSRM and resume the interview where it left off.
Windows Server 2008: DSRM is rarely needed on Windows Server 2008 (W2K8). AD can be stopped and re-started on W2K8 without a reboot, making DSRM completely unnecessary. On W2K8 DSRM is only needed when doing a domain-wide restore or a forest-wide restore, or when AD is so damaged that it will not boot.
How to Boot DSRM

To manually boot in Directory Services Restore Mode, press the F8 key repeatedly. Do this immediately after BIOS POST screen, before the Windows logo appears. (Timing can be tricky; if the Windows logo appears you waited too long.) A text menu menu will appear. Use the up/down arrow keys to select Directory Services Restore Mode or DS Restore Mode. Then press the Enter key.
For your convenience on Windows Server 2000 and 2003, UMove will add a menu item to your C:\BOOT.INI file so you can select DSRM without hitting the F8 key.
How to Log on Using Windows Server 2008

After booting DSRM (see above) click on Switch User -> Other User. When prompted for the logon account name type MyComputer\Administrator, where MyComputer is the name of the computer.
The initial logon prompt will show the account name MyDomain\Administrator, where MyDomain is the name of the domain. This is incorrect and will not work. You must click on Switch User and manually type the name MyComputer\Administrator. You must use the name of the computer, not the name of the domain.
See also Changing the Domain Administrator Password.

---

موضوعات مشابه:

• تغییر Restore Mode administrator's password در اکتیو دایرکتوری
• خطا در Active Directory پس از Restore کردن
• active directory backup and restore
• Active Directory Application Mode (ADAM)
• مشکل در Restore کردن Active Directory ؟

---

[patris1]

http://utools.com/help/ChoiceRestore.asp

Restore on Same Computer

When run on the same computer, UMove will restore the Active Directory database and related files only. It does not require you to restore the entire operating system (also called the System State).
UMove restores only the data files associated with Active Directory. It preserves all unrelated operating system files, such as EXE files and DLL files. This gives you the fastest and safest way to recover the Active Directory database with minimal side effects.
UMove can restore Active Directory in emergency situations. For example, UMove can read damaged or corrupt .BKF files that NTBACKUP cannot read. And UMove can restore a backup made more than 60-180 days ago that has expired.
Restore From a Daily Snapshot

UMove can restore Active Directory from the daily snapshot. A snapshot is a small .BKF file. The .BKF file contains the minimum information needed to restore Active Directory. The size of a snapshot is typically only 100MB plus the size of the NTDS.DIT file. To create a daily snapshot see Scheduled Backup.
Restore From a Full Backup

UMove can read standard .BKF backup files created with NTBACKUP or third party compatible backup applications. The backup application must be compatible with the Microsoft Tape Format (MTF) Specification.
UMove can extract Active Directory from Windows Server 2008 using Windows Server Backup.
Restore Method: Simple or Comprehensive

UMove can do a simple restore of just Active Directory, or it can do a comprehensive restore that will recover additional data that is related to Active Directory. On the same computer choose a simple restore. On a different computer choose a comprehensive restore. For more information see Simple vs Comprehensive Restore.
Restore Scope

For additional instructions, select the scope of the restore operation:

• Restore Active Directory for a single computer.
• Restore Active Directory for a whole domain.
• Restore Active Directory for the entire forest.

For more information

See also Restoring DNS from a backup more than 7 days old.

[patris1]

http://utools.com/help/RestoreComputer.asp

Restoring a Single Computer

Restoring Active Directory on a single computer is a relatively easy operation.
UMove loads only the Active Directory database files (not the entire System State), giving you a safe and fast way to recover the Active Directory database.
To restore the AD database:

1. Find the most recent .BKF file or tape/media backup that contains a backup copy of Active Directory. It can be a daily snapshot or a full backup of the System State. Or have a Windows Server Backup ready (Windows Server 2008).
2. Install and run UMove. Do a simple restore.
3. Enter the path to the .BKF file or the Windows Server Backup, and load Active Directory.
4. Clean up and un-install UMove.

If you do not have a backup available see Emergency Instructions.

[patris1]

http://utools.com/help/RestoreDomain.asp

Restoring a Whole Domain

If you deleted or damaged a section of Active Directory, and you have more than one domain controller (DC) for the domain, the damage will have likely replicated to all of the domain controllers (DCs) in the domain.
The main difference between restoring a single DC and restoring the whole domain is that you should first boot all of the domain's DCs into Directory Services Restore Mode (DSRM). Do this before you begin the restore process. (Or temporarily disconnect the network cables from the domain controllers.) Otherwise when you restore a DC one of the bad DCs will immediately attempt to replicate the bad changes to the newly restored DC and “infect” it.
To avoid “infection” of the restored DCs, use the following procedure:

1. Install UMove on each DC.
2. Boot all of the DCs into Directory Services Restore Mode (DSRM). Or ensure they are disconnected from the network.
3. Verify that no domain controllers for the domain are serving Active Directory. (You can allow any DCs serving other domains to continue to run normally.)
4. On each DC do a simple restore to reload AD. Start first with the Primary Domain Controller (PDC).
5. While each DC reboots you can reconnect it to the network.
6. Clean up and un-install UMove.

See also Restoring the Entire Forest.

[patris1]

http://utools.com/help/RestoreForest.asp

Restoring the Entire Forest

In rare cases you may have deleted or damaged a critical section of Active Directory that is shared by the entire forest. Changes that affect the entire forest include elevating the Forest Functional Level or an running an application that changes the schema (such as installing Exchange Server).
Restoring the entire forest in a large organization can be difficult. The best approach is to take preventative steps. See the Algin White Paper Active Directory Recovery Planning in Small and Large Organizations (PDF).
To restore the whole forest you need to first boot all of the domain controllers (DCs) into Directory Services Restore Mode (DSRM). Do this before you begin the restore process. (Or temporarily disconnect the networks cables from the domain controllers.) Otherwise when you restore a DC one of the bad DCs will immediately attempt to replicate the bad changes to the newly restored DC and “infect” it.
To avoid “infection” of the restored DCs, use the following procedure:

1. Install UMove on each DC.
2. Boot all of the DCs into Directory Services Restore Mode (DSRM). Or ensure that they are disconnected from the network.
3. Verify that no domain controllers are serving Active Directory.
4. On each DC do a simple restore to reload AD. Start first with the Primary Domain Controller (PDC) at the root of the forest. Next reload the Global Catalog (GC) server(s).
5. While each DC reboots you can reconnect it to the network.
6. Clean up and un-install UMove.

Alternate procedure: Authoritative Restore

Microsoft provides the option of recovering Active Directory using Authoritative Restore. Use of Authoritative Restore is not recommended. Authoritative Restore requires that you have expert knowledge of NTDSUTIL and the Active Directory tree structure in order to repair duplicate objects and group membership back-links.
For more information see Microsoft Knowledge Base articles KB241594 and KB216243, and the Microsoft white paper Forest Recovery.