Restoring all DCs in a domain

I am preparing a DR plan for AD.Our root domain has 2 DCs in the same office
(the data cebtre). The DCs hosting the other 4 child domains are in various
locations.

If we had a disaster which wiped out the data centre, both DCs in the root
domain would need restored, but the child domains would be OK as they have
other DCs outwith the data centre.

I know an option is to install a DC in another location for resilience, but
I need to document the best approach to take to restore the whole root
domain - i.e. both DCs (on different hardware) as that is our current set up.

Any advise greatly appreciated.

Iain

Hello IainM,

Start here:
http://technet.microsoft.com/en-us/l...x#RaiseRIDPool

http://support.microsoft.com/kb/263532

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I am preparing a DR plan for AD.Our root domain has 2 DCs in the same
> office (the data cebtre). The DCs hosting the other 4 child domains
> are in various locations.
>
> If we had a disaster which wiped out the data centre, both DCs in the
> root domain would need restored, but the child domains would be OK as
> they have other DCs outwith the data centre.
>
> I know an option is to install a DC in another location for
> resilience, but I need to document the best approach to take to
> restore the whole root domain - i.e. both DCs (on different hardware)
> as that is our current set up.
>
> Any advise greatly appreciated.
>
> Iain
>

What I think I should do is follow http://support.microsoft.com/kb/263532 to
restore each of the 2 DCs in the root domain, then do the same for other DCs
in the child domain.

Or, is it better to do an authoritative restore on the first DC in the root
domain, and a non authoritative restore on the second DC, or just do an
authoritative on both ?

Also, as the child domains have DCs in other physical locations, it is
easier to remove all traces of the destroyed DCs from AD and rebuild new ones
using the same name and IP addresses? Or is a restore better?

Thanks a lot for replying.

Iain



"Meinolf Weber [MVP-DS]" wrote:

> Hello IainM,
>
> Start here:
> http://technet.microsoft.com/en-us/l...x#RaiseRIDPool
>
> http://support.microsoft.com/kb/263532
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > I am preparing a DR plan for AD.Our root domain has 2 DCs in the same
> > office (the data cebtre). The DCs hosting the other 4 child domains
> > are in various locations.
> >
> > If we had a disaster which wiped out the data centre, both DCs in the
> > root domain would need restored, but the child domains would be OK as
> > they have other DCs outwith the data centre.
> >
> > I know an option is to install a DC in another location for
> > resilience, but I need to document the best approach to take to
> > restore the whole root domain - i.e. both DCs (on different hardware)
> > as that is our current set up.
> >
> > Any advise greatly appreciated.
> >
> > Iain
> >
>
>
>

--
Isaac Oben [MCTIP:EA, MCSE]
"IainM" <IainM@newsgroups.nospam> wrote in message
news:69F6BF10-E9A6-419F-961C-AB8D1C64B409@microsoft.com...
> What I think I should do is follow http://support.microsoft.com/kb/263532
> to
> restore each of the 2 DCs in the root domain, then do the same for other
> DCs
> in the child domain.

I will restore just one DC on the root after verification that is
functioning properly, then dcprom the pther DC using the exisiting DC. For
the Child DC, see below.



> Or, is it better to do an authoritative restore on the first DC in the
> root
> domain, and a non authoritative restore on the second DC, or just do an
> authoritative on both ?
>
> Also, as the child domains have DCs in other physical locations, it is
> easier to remove all traces of the destroyed DCs from AD and rebuild new
> ones
> using the same name and IP addresses? Or is a restore better?

If the child DCs on reomte locations are healthy, I will just seize FSMO
roles and build new DC in the child domain using the current DCs

> Thanks a lot for replying.
>
> Iain
>
>
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello IainM,
>>
>> Start here:
>> http://technet.microsoft.com/en-us/l...x#RaiseRIDPool
>>
>> http://support.microsoft.com/kb/263532
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>
>> > I am preparing a DR plan for AD.Our root domain has 2 DCs in the same
>> > office (the data cebtre). The DCs hosting the other 4 child domains
>> > are in various locations.
>> >
>> > If we had a disaster which wiped out the data centre, both DCs in the
>> > root domain would need restored, but the child domains would be OK as
>> > they have other DCs outwith the data centre.
>> >
>> > I know an option is to install a DC in another location for
>> > resilience, but I need to document the best approach to take to
>> > restore the whole root domain - i.e. both DCs (on different hardware)
>> > as that is our current set up.
>> >
>> > Any advise greatly appreciated.
>> >
>> > Iain
>> >
>>
>>
>>

Hello IainM,

I would restore the DC which has the FSMO roles and promote the second fresh
installed as additional DC. For the child domain choose Isaac's advice. As
long as you have running DC's i would go that way.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> What I think I should do is follow
> http://support.microsoft.com/kb/263532 to restore each of the 2 DCs in
> the root domain, then do the same for other DCs in the child domain.
>
> Or, is it better to do an authoritative restore on the first DC in the
> root domain, and a non authoritative restore on the second DC, or just
> do an authoritative on both ?
>
> Also, as the child domains have DCs in other physical locations, it is
> easier to remove all traces of the destroyed DCs from AD and rebuild
> new ones using the same name and IP addresses? Or is a restore better?
>
> Thanks a lot for replying.
>
> Iain
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello IainM,
>>
>> Start here:
>> http://technet.microsoft.com/en-us/l...x#RaiseRIDPool
>> http://support.microsoft.com/kb/263532
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I am preparing a DR plan for AD.Our root domain has 2 DCs in the
>>> same office (the data cebtre). The DCs hosting the other 4 child
>>> domains are in various locations.
>>>
>>> If we had a disaster which wiped out the data centre, both DCs in
>>> the root domain would need restored, but the child domains would be
>>> OK as they have other DCs outwith the data centre.
>>>
>>> I know an option is to install a DC in another location for
>>> resilience, but I need to document the best approach to take to
>>> restore the whole root domain - i.e. both DCs (on different
>>> hardware) as that is our current set up.
>>>
>>> Any advise greatly appreciated.
>>>
>>> Iain
>>>

The rule of thumb seems to be to get one DC up and running via a restore (if
there isn't a DC running already), tidy up AD by removing all references to
the crashed DCs, and reinstall new servers and dcpromo them.
It would save all that hassle of restoring DCs onto new hardware.

Thanks again for the replies.
Iain

"Meinolf Weber [MVP-DS]" wrote:

> Hello IainM,
>
> I would restore the DC which has the FSMO roles and promote the second fresh
> installed as additional DC. For the child domain choose Isaac's advice. As
> long as you have running DC's i would go that way.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > What I think I should do is follow
> > http://support.microsoft.com/kb/263532 to restore each of the 2 DCs in
> > the root domain, then do the same for other DCs in the child domain.
> >
> > Or, is it better to do an authoritative restore on the first DC in the
> > root domain, and a non authoritative restore on the second DC, or just
> > do an authoritative on both ?
> >
> > Also, as the child domains have DCs in other physical locations, it is
> > easier to remove all traces of the destroyed DCs from AD and rebuild
> > new ones using the same name and IP addresses? Or is a restore better?
> >
> > Thanks a lot for replying.
> >
> > Iain
> >
> > "Meinolf Weber [MVP-DS]" wrote:
> >
> >> Hello IainM,
> >>
> >> Start here:
> >> http://technet.microsoft.com/en-us/l...x#RaiseRIDPool
> >> http://support.microsoft.com/kb/263532
> >>
> >> Best regards
> >>
> >> Meinolf Weber
> >> Disclaimer: This posting is provided "AS IS" with no warranties, and
> >> confers
> >> no rights.
> >> ** Please do NOT email, only reply to Newsgroups
> >> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
> >>> I am preparing a DR plan for AD.Our root domain has 2 DCs in the
> >>> same office (the data cebtre). The DCs hosting the other 4 child
> >>> domains are in various locations.
> >>>
> >>> If we had a disaster which wiped out the data centre, both DCs in
> >>> the root domain would need restored, but the child domains would be
> >>> OK as they have other DCs outwith the data centre.
> >>>
> >>> I know an option is to install a DC in another location for
> >>> resilience, but I need to document the best approach to take to
> >>> restore the whole root domain - i.e. both DCs (on different
> >>> hardware) as that is our current set up.
> >>>
> >>> Any advise greatly appreciated.
> >>>
> >>> Iain
> >>>
>
>
>