Updating a DR DC from a live DC?

Hello,

I built a Domain Controller a few months back which was just an image of our
live DC, it all works fine. However I need to update it to reflect our live
DC's again. Rather than build the DC again can I easily update it?

Thanks

Hello Gonzo,

NEVER use images from a DC. This is a not supported way of backup. See here
about USN rollback:
http://support.microsoft.com/kb/875495

For a qualified backup follow this:
http://technet.microsoft.com/en-us/l...72(WS.10).aspx

Also you should have at least 2 DC/DNS/GC per domain.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I built a Domain Controller a few months back which was just an image
> of our live DC, it all works fine. However I need to update it to
> reflect our live DC's again. Rather than build the DC again can I
> easily update it?
>
> Thanks
>

It's only for DR purposes we have done it for years and works well, we use a
metadata clean up tool that MS gave us too that also fixes the FSMO roles
and sysvol errors.

Our live network has 3 DC's and all are DNS/GC's.


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911d703d8cc147e12b45084@msnews.microsoft.com...
> Hello Gonzo,
>
> NEVER use images from a DC. This is a not supported way of backup. See
> here about USN rollback:
> http://support.microsoft.com/kb/875495
>
> For a qualified backup follow this:
> http://technet.microsoft.com/en-us/l...72(WS.10).aspx
>
> Also you should have at least 2 DC/DNS/GC per domain.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> I built a Domain Controller a few months back which was just an image
>> of our live DC, it all works fine. However I need to update it to
>> reflect our live DC's again. Rather than build the DC again can I
>> easily update it?
>>
>> Thanks
>>
>
>

Hello Gonzo,

Also for DR use the AD aware backup solutions as listed in the article.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> It's only for DR purposes we have done it for years and works well, we
> use a metadata clean up tool that MS gave us too that also fixes the
> FSMO roles and sysvol errors.
>
> Our live network has 3 DC's and all are DNS/GC's.
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911d703d8cc147e12b45084@msnews.microsoft.com...
>
>> Hello Gonzo,
>>
>> NEVER use images from a DC. This is a not supported way of backup.
>> See
>> here about USN rollback:
>> http://support.microsoft.com/kb/875495
>> For a qualified backup follow this:
>> http://technet.microsoft.com/en-us/l...72(WS.10).aspx
>> Also you should have at least 2 DC/DNS/GC per domain.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> I built a Domain Controller a few months back which was just an
>>> image of our live DC, it all works fine. However I need to update
>>> it to reflect our live DC's again. Rather than build the DC again
>>> can I easily update it?
>>>
>>> Thanks
>>>

As Meinolf pointed out, this is not a supported, recommend or good idea. It
is laden with pitfalls. Use a AD aware backup system (Tape) and pay someone
to store it offiste in a well protected vault.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Gonzo" <andrewwhite@btinternet.com> wrote in message
news:%23uibQJmRKHA.1792@TK2MSFTNGP04.phx.gbl...
> It's only for DR purposes we have done it for years and works well, we use
> a metadata clean up tool that MS gave us too that also fixes the FSMO
> roles and sysvol errors.
>
> Our live network has 3 DC's and all are DNS/GC's.
>
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911d703d8cc147e12b45084@msnews.microsoft.com...
>> Hello Gonzo,
>>
>> NEVER use images from a DC. This is a not supported way of backup. See
>> here about USN rollback:
>> http://support.microsoft.com/kb/875495
>>
>> For a qualified backup follow this:
>> http://technet.microsoft.com/en-us/l...72(WS.10).aspx
>>
>> Also you should have at least 2 DC/DNS/GC per domain.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hello,
>>>
>>> I built a Domain Controller a few months back which was just an image
>>> of our live DC, it all works fine. However I need to update it to
>>> reflect our live DC's again. Rather than build the DC again can I
>>> easily update it?
>>>
>>> Thanks
>>>
>>
>>
>

I backup using the windows backup (bkf) slecting all the drives and system
state, I thought this was a kind of image file?

The link you provided seem ask to backup the drives and system state so I
think I was wrong when I said image.

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:%23jnytIoRKHA.4028@TK2MSFTNGP05.phx.gbl...
> As Meinolf pointed out, this is not a supported, recommend or good idea.
> It is laden with pitfalls. Use a AD aware backup system (Tape) and pay
> someone to store it offiste in a well protected vault.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Gonzo" <andrewwhite@btinternet.com> wrote in message
> news:%23uibQJmRKHA.1792@TK2MSFTNGP04.phx.gbl...
>> It's only for DR purposes we have done it for years and works well, we
>> use a metadata clean up tool that MS gave us too that also fixes the FSMO
>> roles and sysvol errors.
>>
>> Our live network has 3 DC's and all are DNS/GC's.
>>
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911d703d8cc147e12b45084@msnews.microsoft.com...
>>> Hello Gonzo,
>>>
>>> NEVER use images from a DC. This is a not supported way of backup. See
>>> here about USN rollback:
>>> http://support.microsoft.com/kb/875495
>>>
>>> For a qualified backup follow this:
>>> http://technet.microsoft.com/en-us/l...72(WS.10).aspx
>>>
>>> Also you should have at least 2 DC/DNS/GC per domain.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> Hello,
>>>>
>>>> I built a Domain Controller a few months back which was just an image
>>>> of our live DC, it all works fine. However I need to update it to
>>>> reflect our live DC's again. Rather than build the DC again can I
>>>> easily update it?
>>>>
>>>> Thanks
>>>>
>>>
>>>
>>
>
>

Hello Gonzo,

No, an image is a backup from the complete harddisk, cluster by cluster.
This can be restored only to the same level, resulting in USN rollback, whereas
a system state backup can be restored AD aware authoritative or non-authoritative.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I backup using the windows backup (bkf) slecting all the drives and
> system state, I thought this was a kind of image file?
>
> The link you provided seem ask to backup the drives and system state
> so I think I was wrong when I said image.
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:%23jnytIoRKHA.4028@TK2MSFTNGP05.phx.gbl...
>
>> As Meinolf pointed out, this is not a supported, recommend or good
>> idea. It is laden with pitfalls. Use a AD aware backup system (Tape)
>> and pay someone to store it offiste in a well protected vault.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Gonzo" <andrewwhite@btinternet.com> wrote in message
>> news:%23uibQJmRKHA.1792@TK2MSFTNGP04.phx.gbl...
>>
>>> It's only for DR purposes we have done it for years and works well,
>>> we use a metadata clean up tool that MS gave us too that also fixes
>>> the FSMO roles and sysvol errors.
>>>
>>> Our live network has 3 DC's and all are DNS/GC's.
>>>
>>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>> news:6cb2911d703d8cc147e12b45084@msnews.microsoft.com...
>>>
>>>> Hello Gonzo,
>>>>
>>>> NEVER use images from a DC. This is a not supported way of backup.
>>>> See
>>>> here about USN rollback:
>>>> http://support.microsoft.com/kb/875495
>>>> For a qualified backup follow this:
>>>> http://technet.microsoft.com/en-us/l...72(WS.10).aspx
>>>> Also you should have at least 2 DC/DNS/GC per domain.
>>>>
>>>> Best regards
>>>>
>>>> Meinolf Weber
>>>> Disclaimer: This posting is provided "AS IS" with no warranties,
>>>> and
>>>> confers no rights.
>>>> ** Please do NOT email, only reply to Newsgroups
>>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>>> Hello,
>>>>>
>>>>> I built a Domain Controller a few months back which was just an
>>>>> image of our live DC, it all works fine. However I need to update
>>>>> it to reflect our live DC's again. Rather than build the DC again
>>>>> can I easily update it?
>>>>>
>>>>> Thanks
>>>>>

I would NOT/NEVER connect that clone to the live network!

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

"Gonzo" <andrewwhite@btinternet.com> wrote in message
news:OQ0S2UlRKHA.5052@TK2MSFTNGP06.phx.gbl...
> Hello,
>
> I built a Domain Controller a few months back which was just an image of
> our live DC, it all works fine. However I need to update it to reflect
> our live DC's again. Rather than build the DC again can I easily update
> it?
>
> Thanks
>
> __________ Information from ESET Smart Security, version of virus
> signature database 4507 (20091014) __________
>
> The message was checked by ESET Smart Security.
>
> http://www.eset.com
>
>
>

__________ Information from ESET Smart Security, version of virus signature database 4507 (20091014) __________

The message was checked by ESET Smart Security.

http://www.eset.com