Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Windows 2008 DSRM
Windows 2008 DSRM [message #321295] Wed, 18 November 2009 10:04 Go to next message
Sawyer  is currently offline Sawyer
Messages: 315
Registered: July 2009
Senior Member
Hello

I am reading http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx
the article states that I don't have to restart the DC in DSRM in order to
perform an authoritative restore of an AD object. From my experience with
restoring deleted objects from AD, and when the DC is running Windows 2008,
I have always had to restart the DC in DSRM mode, perform an
nonauthoritative then perform an authoritative restore, in order to restore
the deleted object, but according to article I don't have to do this, all I
have to do is stop AD DS. What could I be doing wrong?


"Mark an object or objects as authoritative
You can stop AD DS if you need to mark an object or objects as
authoritative. Marking an object as authoritative is one step in the process
for performing an authoritative restore. You typically need to perform an
authoritative restore to recover an object that you have accidentally
deleted. In previous versions of Windows Server, you had to start the domain
controller in DSRM and then perform a nonauthoritative restore before you
could mark an object as authoritative. On a domain controller that runs
Windows Server 2008, you can stop AD DS to mark the object as authoritative
instead of starting the domain controller in DSRM"
Re: Windows 2008 DSRM [message #321324 is a reply to message #321295] Wed, 18 November 2009 10:13 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
I have actually spoken to a developer on this and you should be doing a
reboot after a authoritative restore. The o/s isn't sure on what has
changed within the DIT during the restore, including cached information
within LSASS. The only for sure way to ensure things to work properly is a
reboot.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"sawyer" <occompguy@cox.net> wrote in message
news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
> Hello
>
> I am reading
> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
> article states that I don't have to restart the DC in DSRM in order to
> perform an authoritative restore of an AD object. From my experience with
> restoring deleted objects from AD, and when the DC is running Windows
> 2008, I have always had to restart the DC in DSRM mode, perform an
> nonauthoritative then perform an authoritative restore, in order to
> restore the deleted object, but according to article I don't have to do
> this, all I have to do is stop AD DS. What could I be doing wrong?
>
>
> "Mark an object or objects as authoritative
> You can stop AD DS if you need to mark an object or objects as
> authoritative. Marking an object as authoritative is one step in the
> process for performing an authoritative restore. You typically need to
> perform an authoritative restore to recover an object that you have
> accidentally deleted. In previous versions of Windows Server, you had to
> start the domain controller in DSRM and then perform a nonauthoritative
> restore before you could mark an object as authoritative. On a domain
> controller that runs Windows Server 2008, you can stop AD DS to mark the
> object as authoritative instead of starting the domain controller in DSRM"
Re: Windows 2008 DSRM [message #321333 is a reply to message #321324] Wed, 18 November 2009 10:27 Go to previous messageGo to next message
Sawyer  is currently offline Sawyer  United States
Messages: 315
Registered: July 2009
Senior Member
I can understand rebooting after the authoritative restore is done, but my
question was regarding having to reboot the DC into DSRM in order to perform
the authoritative restore. According to the documentation I shouldn't have
to do this, all I should have to do is stop AD DS and then perform the
authoritative restore. Again from my experience I always have to restart the
DC in DSRM first

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
> I have actually spoken to a developer on this and you should be doing a
> reboot after a authoritative restore. The o/s isn't sure on what has
> changed within the DIT during the restore, including cached information
> within LSASS. The only for sure way to ensure things to work properly is
> a reboot.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "sawyer" <occompguy@cox.net> wrote in message
> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>> Hello
>>
>> I am reading
>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>> article states that I don't have to restart the DC in DSRM in order to
>> perform an authoritative restore of an AD object. From my experience with
>> restoring deleted objects from AD, and when the DC is running Windows
>> 2008, I have always had to restart the DC in DSRM mode, perform an
>> nonauthoritative then perform an authoritative restore, in order to
>> restore the deleted object, but according to article I don't have to do
>> this, all I have to do is stop AD DS. What could I be doing wrong?
>>
>>
>> "Mark an object or objects as authoritative
>> You can stop AD DS if you need to mark an object or objects as
>> authoritative. Marking an object as authoritative is one step in the
>> process for performing an authoritative restore. You typically need to
>> perform an authoritative restore to recover an object that you have
>> accidentally deleted. In previous versions of Windows Server, you had to
>> start the domain controller in DSRM and then perform a nonauthoritative
>> restore before you could mark an object as authoritative. On a domain
>> controller that runs Windows Server 2008, you can stop AD DS to mark the
>> object as authoritative instead of starting the domain controller in
>> DSRM"
>
>
Re: Windows 2008 DSRM [message #321422 is a reply to message #321333] Wed, 18 November 2009 11:07 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

sawyer schrieb:
> I can understand rebooting after the authoritative restore is done, but
> my question was regarding having to reboot the DC into DSRM in order to
> perform the authoritative restore. According to the documentation I
> shouldn't have to do this, all I should have to do is stop AD DS and
> then perform the authoritative restore. Again from my experience I
> always have to restart the DC in DSRM first

Yeah, that is new to Server 2008 and above. They've implemented Active
Directory as kind of a service where you're able to start and stop it.
In order to do a restore, you need to have the AD database offline. The
only method to shut down AD and have the database offline in Server 2003
and below was to reboot in DSRM mode. That's not needed in Server 2008
any more.

Though I haven't heard of any recommendations that Paul mentioned, I can
imagine that a mass restore of a huge number of objects and a change of
data that previously was cached by AD in the memory, there could arise
issues. I never heard of issues relating to that but something to
probably think about when dealing with mass rollbacks.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Re: Windows 2008 DSRM [message #322156 is a reply to message #321333] Thu, 19 November 2009 06:14 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
The reason you go into DSRM is to stop AD, which you can now do via a
service within in 2008 and beyond.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"sawyer" <occompguy@cox.net> wrote in message
news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>I can understand rebooting after the authoritative restore is done, but my
>question was regarding having to reboot the DC into DSRM in order to
>perform the authoritative restore. According to the documentation I
>shouldn't have to do this, all I should have to do is stop AD DS and then
>perform the authoritative restore. Again from my experience I always have
>to restart the DC in DSRM first
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>> I have actually spoken to a developer on this and you should be doing a
>> reboot after a authoritative restore. The o/s isn't sure on what has
>> changed within the DIT during the restore, including cached information
>> within LSASS. The only for sure way to ensure things to work properly is
>> a reboot.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "sawyer" <occompguy@cox.net> wrote in message
>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>> Hello
>>>
>>> I am reading
>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>> article states that I don't have to restart the DC in DSRM in order to
>>> perform an authoritative restore of an AD object. From my experience
>>> with restoring deleted objects from AD, and when the DC is running
>>> Windows 2008, I have always had to restart the DC in DSRM mode, perform
>>> an nonauthoritative then perform an authoritative restore, in order to
>>> restore the deleted object, but according to article I don't have to do
>>> this, all I have to do is stop AD DS. What could I be doing wrong?
>>>
>>>
>>> "Mark an object or objects as authoritative
>>> You can stop AD DS if you need to mark an object or objects as
>>> authoritative. Marking an object as authoritative is one step in the
>>> process for performing an authoritative restore. You typically need to
>>> perform an authoritative restore to recover an object that you have
>>> accidentally deleted. In previous versions of Windows Server, you had to
>>> start the domain controller in DSRM and then perform a nonauthoritative
>>> restore before you could mark an object as authoritative. On a domain
>>> controller that runs Windows Server 2008, you can stop AD DS to mark the
>>> object as authoritative instead of starting the domain controller in
>>> DSRM"
>>
>>
Re: Windows 2008 DSRM [message #322163 is a reply to message #321422] Thu, 19 November 2009 06:23 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

Florian Frommherz [MVP] wrote:
> In order to do a restore, you need to have the AD database offline. The
> only method to shut down AD and have the database offline in Server 2003
> and below was to reboot in DSRM mode. That's not needed in Server 2008
> any more.

Lemme get that straight: you're still supposed to shutdown and reboot in
Server 2008 (and beyond) in order to restore a backup from tape and mark
it as authoritative. That's the only supported restore method from there.

Start&Stop functionality is for maintenance tasks.

Cheers,
Florian
Re: Windows 2008 DSRM [message #322169 is a reply to message #322163] Thu, 19 November 2009 06:29 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Yeah, I would NEVER even consider doing a tape restore in anything but DSRM.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Florian Frommherz [MVP]" <florian@frickelsoft.net> wrote in message
news:eW5Z8tRaKHA.4924@TK2MSFTNGP05.phx.gbl...
> Howdie!
>
> Florian Frommherz [MVP] wrote:
>> In order to do a restore, you need to have the AD database offline. The
>> only method to shut down AD and have the database offline in Server 2003
>> and below was to reboot in DSRM mode. That's not needed in Server 2008
>> any more.
>
> Lemme get that straight: you're still supposed to shutdown and reboot in
> Server 2008 (and beyond) in order to restore a backup from tape and mark
> it as authoritative. That's the only supported restore method from there.
>
> Start&Stop functionality is for maintenance tasks.
>
> Cheers,
> Florian
Re: Windows 2008 DSRM [message #322355 is a reply to message #322156] Thu, 19 November 2009 09:41 Go to previous messageGo to next message
Sawyer  is currently offline Sawyer
Messages: 315
Registered: July 2009
Senior Member
Im actually doing the authoritative restore using wbadmin and restoring from
a local backup on a separate disk in the server, so the restore is not from
tape (not sure if that makes a difference or not?) Its still not clear to me
why I am having to reboot the server into DSRM to perform the authoritative
restore? again according to the documentation I shouldn't have to do this,
all I should have to do is stop AD DS and then perform the authoritative
restore. I can understand having to do a reboot once the restore is done,
but I shouldt have to reboot to get into DSRM in the first place.

Am I missing something here? I have read the reply's to my post and you guys
know your stuff, but I don't think my question has been answered?

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
> The reason you go into DSRM is to stop AD, which you can now do via a
> service within in 2008 and beyond.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "sawyer" <occompguy@cox.net> wrote in message
> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>I can understand rebooting after the authoritative restore is done, but my
>>question was regarding having to reboot the DC into DSRM in order to
>>perform the authoritative restore. According to the documentation I
>>shouldn't have to do this, all I should have to do is stop AD DS and then
>>perform the authoritative restore. Again from my experience I always have
>>to restart the DC in DSRM first
>>
>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>> I have actually spoken to a developer on this and you should be doing a
>>> reboot after a authoritative restore. The o/s isn't sure on what has
>>> changed within the DIT during the restore, including cached information
>>> within LSASS. The only for sure way to ensure things to work properly
>>> is a reboot.
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "sawyer" <occompguy@cox.net> wrote in message
>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>> Hello
>>>>
>>>> I am reading
>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>>> article states that I don't have to restart the DC in DSRM in order to
>>>> perform an authoritative restore of an AD object. From my experience
>>>> with restoring deleted objects from AD, and when the DC is running
>>>> Windows 2008, I have always had to restart the DC in DSRM mode, perform
>>>> an nonauthoritative then perform an authoritative restore, in order to
>>>> restore the deleted object, but according to article I don't have to do
>>>> this, all I have to do is stop AD DS. What could I be doing wrong?
>>>>
>>>>
>>>> "Mark an object or objects as authoritative
>>>> You can stop AD DS if you need to mark an object or objects as
>>>> authoritative. Marking an object as authoritative is one step in the
>>>> process for performing an authoritative restore. You typically need to
>>>> perform an authoritative restore to recover an object that you have
>>>> accidentally deleted. In previous versions of Windows Server, you had
>>>> to start the domain controller in DSRM and then perform a
>>>> nonauthoritative restore before you could mark an object as
>>>> authoritative. On a domain controller that runs Windows Server 2008,
>>>> you can stop AD DS to mark the object as authoritative instead of
>>>> starting the domain controller in DSRM"
>>>
>>>
>
>
Re: Windows 2008 DSRM [message #322640 is a reply to message #322355] Thu, 19 November 2009 13:57 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Hold on, I'm waiting on confirmation from some sources and will give you the
feedback when I get it.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"sawyer" <occompguy@cox.net> wrote in message
news:118AD2F4-83FA-4B0C-9674-05AE90A621B6@microsoft.com...
> Im actually doing the authoritative restore using wbadmin and restoring
> from a local backup on a separate disk in the server, so the restore is
> not from tape (not sure if that makes a difference or not?) Its still not
> clear to me why I am having to reboot the server into DSRM to perform the
> authoritative restore? again according to the documentation I shouldn't
> have to do this, all I should have to do is stop AD DS and then perform
> the authoritative restore. I can understand having to do a reboot once the
> restore is done, but I shouldt have to reboot to get into DSRM in the
> first place.
>
> Am I missing something here? I have read the reply's to my post and you
> guys know your stuff, but I don't think my question has been answered?
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
>> The reason you go into DSRM is to stop AD, which you can now do via a
>> service within in 2008 and beyond.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "sawyer" <occompguy@cox.net> wrote in message
>> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>>I can understand rebooting after the authoritative restore is done, but
>>>my question was regarding having to reboot the DC into DSRM in order to
>>>perform the authoritative restore. According to the documentation I
>>>shouldn't have to do this, all I should have to do is stop AD DS and
>>>then perform the authoritative restore. Again from my experience I always
>>>have to restart the DC in DSRM first
>>>
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>>> I have actually spoken to a developer on this and you should be doing a
>>>> reboot after a authoritative restore. The o/s isn't sure on what has
>>>> changed within the DIT during the restore, including cached information
>>>> within LSASS. The only for sure way to ensure things to work properly
>>>> is a reboot.
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>
>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>>> Hello
>>>>>
>>>>> I am reading
>>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>>>> article states that I don't have to restart the DC in DSRM in order to
>>>>> perform an authoritative restore of an AD object. From my experience
>>>>> with restoring deleted objects from AD, and when the DC is running
>>>>> Windows 2008, I have always had to restart the DC in DSRM mode,
>>>>> perform an nonauthoritative then perform an authoritative restore, in
>>>>> order to restore the deleted object, but according to article I don't
>>>>> have to do this, all I have to do is stop AD DS. What could I be doing
>>>>> wrong?
>>>>>
>>>>>
>>>>> "Mark an object or objects as authoritative
>>>>> You can stop AD DS if you need to mark an object or objects as
>>>>> authoritative. Marking an object as authoritative is one step in the
>>>>> process for performing an authoritative restore. You typically need to
>>>>> perform an authoritative restore to recover an object that you have
>>>>> accidentally deleted. In previous versions of Windows Server, you had
>>>>> to start the domain controller in DSRM and then perform a
>>>>> nonauthoritative restore before you could mark an object as
>>>>> authoritative. On a domain controller that runs Windows Server 2008,
>>>>> you can stop AD DS to mark the object as authoritative instead of
>>>>> starting the domain controller in DSRM"
>>>>
>>>>
>>
>>
Re: Windows 2008 DSRM [message #322735 is a reply to message #322640] Thu, 19 November 2009 15:37 Go to previous messageGo to next message
Sawyer  is currently offline Sawyer
Messages: 315
Registered: July 2009
Senior Member
Thank you

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:uc$MjrVaKHA.2160@TK2MSFTNGP02.phx.gbl...
> Hold on, I'm waiting on confirmation from some sources and will give you
> the feedback when I get it.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "sawyer" <occompguy@cox.net> wrote in message
> news:118AD2F4-83FA-4B0C-9674-05AE90A621B6@microsoft.com...
>> Im actually doing the authoritative restore using wbadmin and restoring
>> from a local backup on a separate disk in the server, so the restore is
>> not from tape (not sure if that makes a difference or not?) Its still not
>> clear to me why I am having to reboot the server into DSRM to perform the
>> authoritative restore? again according to the documentation I shouldn't
>> have to do this, all I should have to do is stop AD DS and then perform
>> the authoritative restore. I can understand having to do a reboot once
>> the restore is done, but I shouldt have to reboot to get into DSRM in the
>> first place.
>>
>> Am I missing something here? I have read the reply's to my post and you
>> guys know your stuff, but I don't think my question has been answered?
>>
>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>> news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
>>> The reason you go into DSRM is to stop AD, which you can now do via a
>>> service within in 2008 and beyond.
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "sawyer" <occompguy@cox.net> wrote in message
>>> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>>>I can understand rebooting after the authoritative restore is done, but
>>>>my question was regarding having to reboot the DC into DSRM in order to
>>>>perform the authoritative restore. According to the documentation I
>>>>shouldn't have to do this, all I should have to do is stop AD DS and
>>>>then perform the authoritative restore. Again from my experience I
>>>>always have to restart the DC in DSRM first
>>>>
>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>>>> I have actually spoken to a developer on this and you should be doing
>>>>> a reboot after a authoritative restore. The o/s isn't sure on what
>>>>> has changed within the DIT during the restore, including cached
>>>>> information within LSASS. The only for sure way to ensure things to
>>>>> work properly is a reboot.
>>>>>
>>>>> --
>>>>> Paul Bergson
>>>>> MVP - Directory Services
>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>
>>>>> http://www.pbbergs.com
>>>>>
>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>> This
>>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>>
>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>>>> Hello
>>>>>>
>>>>>> I am reading
>>>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>>>>> article states that I don't have to restart the DC in DSRM in order
>>>>>> to perform an authoritative restore of an AD object. From my
>>>>>> experience with restoring deleted objects from AD, and when the DC is
>>>>>> running Windows 2008, I have always had to restart the DC in DSRM
>>>>>> mode, perform an nonauthoritative then perform an authoritative
>>>>>> restore, in order to restore the deleted object, but according to
>>>>>> article I don't have to do this, all I have to do is stop AD DS. What
>>>>>> could I be doing wrong?
>>>>>>
>>>>>>
>>>>>> "Mark an object or objects as authoritative
>>>>>> You can stop AD DS if you need to mark an object or objects as
>>>>>> authoritative. Marking an object as authoritative is one step in the
>>>>>> process for performing an authoritative restore. You typically need
>>>>>> to perform an authoritative restore to recover an object that you
>>>>>> have accidentally deleted. In previous versions of Windows Server,
>>>>>> you had to start the domain controller in DSRM and then perform a
>>>>>> nonauthoritative restore before you could mark an object as
>>>>>> authoritative. On a domain controller that runs Windows Server 2008,
>>>>>> you can stop AD DS to mark the object as authoritative instead of
>>>>>> starting the domain controller in DSRM"
>>>>>
>>>>>
>>>
>>>
>
>
Re: Windows 2008 DSRM [message #323217 is a reply to message #322735] Fri, 20 November 2009 06:24 Go to previous messageGo to next message
pbbergs  is currently offline pbbergs  United States
Messages: 1024
Registered: July 2009
Senior Member
Here are the recovery scenario's

If you need to do a full database recovery then you need to boot into DSRM,
restore Active Directory, do an authoritative restore and reboot

If you need to recover and object on a dc, then from a dc with the object
still available (Lag site is one option). Stop Directory Services, perform
the authoritative restore and restart Directory Services. No reboot
required

A very detailed article in the link below:
http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx


Thx
Laura, Meinolf, Dmitri and Guido

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"sawyer" <occompguy@cox.net> wrote in message
news:12E6B88B-E290-4A63-9D3B-956A94C96615@microsoft.com...
> Thank you
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:uc$MjrVaKHA.2160@TK2MSFTNGP02.phx.gbl...
>> Hold on, I'm waiting on confirmation from some sources and will give you
>> the feedback when I get it.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>>
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup This
>> posting is provided "AS IS" with no warranties, and confers no rights.
>>
>> "sawyer" <occompguy@cox.net> wrote in message
>> news:118AD2F4-83FA-4B0C-9674-05AE90A621B6@microsoft.com...
>>> Im actually doing the authoritative restore using wbadmin and restoring
>>> from a local backup on a separate disk in the server, so the restore is
>>> not from tape (not sure if that makes a difference or not?) Its still
>>> not clear to me why I am having to reboot the server into DSRM to
>>> perform the authoritative restore? again according to the documentation
>>> I shouldn't have to do this, all I should have to do is stop AD DS and
>>> then perform the authoritative restore. I can understand having to do a
>>> reboot once the restore is done, but I shouldt have to reboot to get
>>> into DSRM in the first place.
>>>
>>> Am I missing something here? I have read the reply's to my post and you
>>> guys know your stuff, but I don't think my question has been answered?
>>>
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
>>>> The reason you go into DSRM is to stop AD, which you can now do via a
>>>> service within in 2008 and beyond.
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>
>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>>>>I can understand rebooting after the authoritative restore is done, but
>>>>>my question was regarding having to reboot the DC into DSRM in order to
>>>>>perform the authoritative restore. According to the documentation I
>>>>>shouldn't have to do this, all I should have to do is stop AD DS and
>>>>>then perform the authoritative restore. Again from my experience I
>>>>>always have to restart the DC in DSRM first
>>>>>
>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>>>>> I have actually spoken to a developer on this and you should be doing
>>>>>> a reboot after a authoritative restore. The o/s isn't sure on what
>>>>>> has changed within the DIT during the restore, including cached
>>>>>> information within LSASS. The only for sure way to ensure things to
>>>>>> work properly is a reboot.
>>>>>>
>>>>>> --
>>>>>> Paul Bergson
>>>>>> MVP - Directory Services
>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>
>>>>>> http://www.pbbergs.com
>>>>>>
>>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>>> This
>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>> rights.
>>>>>>
>>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>>>>> Hello
>>>>>>>
>>>>>>> I am reading
>>>>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>>>>>> article states that I don't have to restart the DC in DSRM in order
>>>>>>> to perform an authoritative restore of an AD object. From my
>>>>>>> experience with restoring deleted objects from AD, and when the DC
>>>>>>> is running Windows 2008, I have always had to restart the DC in DSRM
>>>>>>> mode, perform an nonauthoritative then perform an authoritative
>>>>>>> restore, in order to restore the deleted object, but according to
>>>>>>> article I don't have to do this, all I have to do is stop AD DS.
>>>>>>> What could I be doing wrong?
>>>>>>>
>>>>>>>
>>>>>>> "Mark an object or objects as authoritative
>>>>>>> You can stop AD DS if you need to mark an object or objects as
>>>>>>> authoritative. Marking an object as authoritative is one step in the
>>>>>>> process for performing an authoritative restore. You typically need
>>>>>>> to perform an authoritative restore to recover an object that you
>>>>>>> have accidentally deleted. In previous versions of Windows Server,
>>>>>>> you had to start the domain controller in DSRM and then perform a
>>>>>>> nonauthoritative restore before you could mark an object as
>>>>>>> authoritative. On a domain controller that runs Windows Server 2008,
>>>>>>> you can stop AD DS to mark the object as authoritative instead of
>>>>>>> starting the domain controller in DSRM"
>>>>>>
>>>>>>
>>>>
>>>>
>>
>>
Re: Windows 2008 DSRM [message #325733 is a reply to message #323217] Mon, 23 November 2009 15:16 Go to previous messageGo to next message
Sawyer  is currently offline Sawyer
Messages: 315
Registered: July 2009
Senior Member
that's never worked for me, I always end up having to restart the DC in DSRM
and then do the authoritative restore

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:OBckLTeaKHA.5852@TK2MSFTNGP05.phx.gbl...
> Here are the recovery scenario's
>
> If you need to do a full database recovery then you need to boot into
> DSRM, restore Active Directory, do an authoritative restore and reboot
>
> If you need to recover and object on a dc, then from a dc with the object
> still available (Lag site is one option). Stop Directory Services,
> perform the authoritative restore and restart Directory Services. No
> reboot required
>
> A very detailed article in the link below:
> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx
>
>
> Thx
> Laura, Meinolf, Dmitri and Guido
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "sawyer" <occompguy@cox.net> wrote in message
> news:12E6B88B-E290-4A63-9D3B-956A94C96615@microsoft.com...
>> Thank you
>>
>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>> news:uc$MjrVaKHA.2160@TK2MSFTNGP02.phx.gbl...
>>> Hold on, I'm waiting on confirmation from some sources and will give you
>>> the feedback when I get it.
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>
>>> http://www.pbbergs.com
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup This
>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>
>>> "sawyer" <occompguy@cox.net> wrote in message
>>> news:118AD2F4-83FA-4B0C-9674-05AE90A621B6@microsoft.com...
>>>> Im actually doing the authoritative restore using wbadmin and restoring
>>>> from a local backup on a separate disk in the server, so the restore is
>>>> not from tape (not sure if that makes a difference or not?) Its still
>>>> not clear to me why I am having to reboot the server into DSRM to
>>>> perform the authoritative restore? again according to the documentation
>>>> I shouldn't have to do this, all I should have to do is stop AD DS and
>>>> then perform the authoritative restore. I can understand having to do a
>>>> reboot once the restore is done, but I shouldt have to reboot to get
>>>> into DSRM in the first place.
>>>>
>>>> Am I missing something here? I have read the reply's to my post and you
>>>> guys know your stuff, but I don't think my question has been answered?
>>>>
>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>> news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
>>>>> The reason you go into DSRM is to stop AD, which you can now do via a
>>>>> service within in 2008 and beyond.
>>>>>
>>>>> --
>>>>> Paul Bergson
>>>>> MVP - Directory Services
>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>
>>>>> http://www.pbbergs.com
>>>>>
>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>> This
>>>>> posting is provided "AS IS" with no warranties, and confers no rights.
>>>>>
>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>>>>>I can understand rebooting after the authoritative restore is done,
>>>>>>but my question was regarding having to reboot the DC into DSRM in
>>>>>>order to perform the authoritative restore. According to the
>>>>>>documentation I shouldn't have to do this, all I should have to do is
>>>>>>stop AD DS and then perform the authoritative restore. Again from my
>>>>>>experience I always have to restart the DC in DSRM first
>>>>>>
>>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>>> news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>>>>>> I have actually spoken to a developer on this and you should be
>>>>>>> doing a reboot after a authoritative restore. The o/s isn't sure on
>>>>>>> what has changed within the DIT during the restore, including cached
>>>>>>> information within LSASS. The only for sure way to ensure things to
>>>>>>> work properly is a reboot.
>>>>>>>
>>>>>>> --
>>>>>>> Paul Bergson
>>>>>>> MVP - Directory Services
>>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>>
>>>>>>> http://www.pbbergs.com
>>>>>>>
>>>>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>>>>> This
>>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>>> rights.
>>>>>>>
>>>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>>>>>> Hello
>>>>>>>>
>>>>>>>> I am reading
>>>>>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx the
>>>>>>>> article states that I don't have to restart the DC in DSRM in order
>>>>>>>> to perform an authoritative restore of an AD object. From my
>>>>>>>> experience with restoring deleted objects from AD, and when the DC
>>>>>>>> is running Windows 2008, I have always had to restart the DC in
>>>>>>>> DSRM mode, perform an nonauthoritative then perform an
>>>>>>>> authoritative restore, in order to restore the deleted object, but
>>>>>>>> according to article I don't have to do this, all I have to do is
>>>>>>>> stop AD DS. What could I be doing wrong?
>>>>>>>>
>>>>>>>>
>>>>>>>> "Mark an object or objects as authoritative
>>>>>>>> You can stop AD DS if you need to mark an object or objects as
>>>>>>>> authoritative. Marking an object as authoritative is one step in
>>>>>>>> the process for performing an authoritative restore. You typically
>>>>>>>> need to perform an authoritative restore to recover an object that
>>>>>>>> you have accidentally deleted. In previous versions of Windows
>>>>>>>> Server, you had to start the domain controller in DSRM and then
>>>>>>>> perform a nonauthoritative restore before you could mark an object
>>>>>>>> as authoritative. On a domain controller that runs Windows Server
>>>>>>>> 2008, you can stop AD DS to mark the object as authoritative
>>>>>>>> instead of starting the domain controller in DSRM"
>>>>>>>
>>>>>>>
>>>>>
>>>>>
>>>
>>>
>
>
Re: Windows 2008 DSRM [message #326093 is a reply to message #325733] Mon, 23 November 2009 23:18 Go to previous message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello Sawyer,

Which is exact what you have to do for a full database restore according
to the article.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> that's never worked for me, I always end up having to restart the DC
> in DSRM and then do the authoritative restore
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:OBckLTeaKHA.5852@TK2MSFTNGP05.phx.gbl...
>
>> Here are the recovery scenario's
>>
>> If you need to do a full database recovery then you need to boot into
>> DSRM, restore Active Directory, do an authoritative restore and
>> reboot
>>
>> If you need to recover and object on a dc, then from a dc with the
>> object still available (Lag site is one option). Stop Directory
>> Services, perform the authoritative restore and restart Directory
>> Services. No reboot required
>>
>> A very detailed article in the link below:
>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).aspx
>> Thx
>> Laura, Meinolf, Dmitri and Guido
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>> Microsoft's Thrive IT Pro of the Month - June 2009
>> http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "sawyer" <occompguy@cox.net> wrote in message
>> news:12E6B88B-E290-4A63-9D3B-956A94C96615@microsoft.com...
>>
>>> Thank you
>>>
>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>> news:uc$MjrVaKHA.2160@TK2MSFTNGP02.phx.gbl...
>>>
>>>> Hold on, I'm waiting on confirmation from some sources and will
>>>> give you the feedback when I get it.
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>> http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>> news:118AD2F4-83FA-4B0C-9674-05AE90A621B6@microsoft.com...
>>>>
>>>>> Im actually doing the authoritative restore using wbadmin and
>>>>> restoring from a local backup on a separate disk in the server, so
>>>>> the restore is not from tape (not sure if that makes a difference
>>>>> or not?) Its still not clear to me why I am having to reboot the
>>>>> server into DSRM to perform the authoritative restore? again
>>>>> according to the documentation I shouldn't have to do this, all I
>>>>> should have to do is stop AD DS and then perform the authoritative
>>>>> restore. I can understand having to do a reboot once the restore
>>>>> is done, but I shouldt have to reboot to get into DSRM in the
>>>>> first place.
>>>>>
>>>>> Am I missing something here? I have read the reply's to my post
>>>>> and you guys know your stuff, but I don't think my question has
>>>>> been answered?
>>>>>
>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
>>>>> news:O5BBEpRaKHA.2184@TK2MSFTNGP04.phx.gbl...
>>>>>
>>>>>> The reason you go into DSRM is to stop AD, which you can now do
>>>>>> via a service within in 2008 and beyond.
>>>>>>
>>>>>> --
>>>>>> Paul Bergson
>>>>>> MVP - Directory Services
>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>> http://www.pbbergs.com
>>>>>>
>>>>>> Please no e-mails, any questions should be posted in the
>>>>>> NewsGroup
>>>>>> This
>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>> rights.
>>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>>> news:uy%23g4RHaKHA.2188@TK2MSFTNGP04.phx.gbl...
>>>>>>
>>>>>>> I can understand rebooting after the authoritative restore is
>>>>>>> done, but my question was regarding having to reboot the DC into
>>>>>>> DSRM in order to perform the authoritative restore. According to
>>>>>>> the documentation I shouldn't have to do this, all I should
>>>>>>> have to do is stop AD DS and then perform the authoritative
>>>>>>> restore. Again from my experience I always have to restart the
>>>>>>> DC in DSRM first
>>>>>>>
>>>>>>> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in
>>>>>>> message news:uOefmJHaKHA.196@TK2MSFTNGP05.phx.gbl...
>>>>>>>
>>>>>>>> I have actually spoken to a developer on this and you should be
>>>>>>>> doing a reboot after a authoritative restore. The o/s isn't
>>>>>>>> sure on what has changed within the DIT during the restore,
>>>>>>>> including cached information within LSASS. The only for sure
>>>>>>>> way to ensure things to work properly is a reboot.
>>>>>>>>
>>>>>>>> --
>>>>>>>> Paul Bergson
>>>>>>>> MVP - Directory Services
>>>>>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>>>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>>>>> Microsoft's Thrive IT Pro of the Month - June 2009
>>>>>>>> http://www.pbbergs.com
>>>>>>>>
>>>>>>>> Please no e-mails, any questions should be posted in the
>>>>>>>> NewsGroup
>>>>>>>> This
>>>>>>>> posting is provided "AS IS" with no warranties, and confers no
>>>>>>>> rights.
>>>>>>>> "sawyer" <occompguy@cox.net> wrote in message
>>>>>>>> news:F2CD0CA1-BC8A-4E1B-97B3-F6E10797FEB8@microsoft.com...
>>>>>>>>
>>>>>>>>> Hello
>>>>>>>>>
>>>>>>>>> I am reading
>>>>>>>>> http://technet.microsoft.com/en-us/library/cc732714(WS.10).asp
>>>>>>>>> x the article states that I don't have to restart the DC in
>>>>>>>>> DSRM in order to perform an authoritative restore of an AD
>>>>>>>>> object. From my experience with restoring deleted objects from
>>>>>>>>> AD, and when the DC is running Windows 2008, I have always had
>>>>>>>>> to restart the DC in DSRM mode, perform an nonauthoritative
>>>>>>>>> then perform an authoritative restore, in order to restore the
>>>>>>>>> deleted object, but according to article I don't have to do
>>>>>>>>> this, all I have to do is stop AD DS. What could I be doing
>>>>>>>>> wrong?
>>>>>>>>>
>>>>>>>>> "Mark an object or objects as authoritative
>>>>>>>>> You can stop AD DS if you need to mark an object or objects as
>>>>>>>>> authoritative. Marking an object as authoritative is one step
>>>>>>>>> in
>>>>>>>>> the process for performing an authoritative restore. You
>>>>>>>>> typically
>>>>>>>>> need to perform an authoritative restore to recover an object
>>>>>>>>> that
>>>>>>>>> you have accidentally deleted. In previous versions of Windows
>>>>>>>>> Server, you had to start the domain controller in DSRM and
>>>>>>>>> then
>>>>>>>>> perform a nonauthoritative restore before you could mark an
>>>>>>>>> object
>>>>>>>>> as authoritative. On a domain controller that runs Windows
>>>>>>>>> Server
>>>>>>>>> 2008, you can stop AD DS to mark the object as authoritative
>>>>>>>>> instead of starting the domain controller in DSRM"
Previous Topic:Windows 7 doesn't report errors as well as 2003!
Next Topic:multiple Domains under one domain or multiple forests under one forest
Goto Forum:
  


Current Time: Sat Jan 20 08:29:24 MST 2018

Total time taken to generate the page: 0.06515 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software