Backup Active Directory

[angry_geek]

Ok all, I know there are a million docs out there on how to do this, but none that really work. Here's the scenario: A hdd crashed in the server/domain controller. I was able to recover most of the data. I rebuilt the server and restored the system state backup. Everything is working, but there are a lot of errors. I want to nuke and pave the server to get everything fresh. I want to establish the same domain. Then I want to be able to import a backup of my AD and GPO's. This server is only a terminal server, so I'm not worried about member machines, there aren't any. Do any of you know of, or have experience with, a utility to effectively backup AD and GPO's?

 

[geekhelp4u]

there should be an NTBACKUP tool built in?

 

[brownie]

Was there no secondary DC, only the one? If so, you're on a looser I'm afraid with sorting out your only DC.

How about bringing up a new DC, there should always be two, which will give you chance of sorting the AD issues out on the original DC and keep the customers AD up?

 

[angry_geek]

AD itself isn't having any errors. Just a bunch of various system and app errors. This is the only DC. I thought about bringing up a second DC and allowing it to replicate. Then DC promo it to be the primary. Then n & p the original server, and do the same thing. A lot of work, though. NTBackup only allows an entire sys state backup and restore. The ADMT from MS doesn't quite do what I want it to. With all that being said, I did find a tool that might just do the trick. Have any of you used UMove before?

 

[netadmin]

you can use GPMC if you want to backup your gpo's separately.

 

[brownie]

a bunch of various system and app errors. This is the only DC.

Can you be more specific, maybe post a few of the errors in the event log?

 

[angry_geek]

I figured out the root of most of my problems. When using getdataback, I lost all the attributes and security settings for all files I recovered. One of those d'oh! moments. N & P is in order. The AD and GPOs are ok, so I still need a way to migrated those easily. I'm going to give umove a try. Thanks all.

 

[Nerm]

You could use the ADMT from Microsoft.

 

[netadmin]

gpmc + admt + ntbackup. backup security permissions. of course dont think it might save them unless the user accounts existing in new domain. can also research robocopy. think its an nt tool allowing copy of data with security permissions also.