Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » domain controller image
domain controller image [message #340720] Thu, 10 December 2009 20:40 Go to next message
gira  is currently offline gira
Messages: 19
Registered: July 2009
Junior Member
Hello all
I know that you're not supposed to take an image of a DC but what if it's
the only DC in the domain with no replication partner?
I have a test environment using VMWare where the DC runs as a guest.
I'd like to make a VM snapshot of it so I can revert back after testing
things.
Would this cause AD problems?
Re: domain controller image [message #340792 is a reply to message #340720] Thu, 10 December 2009 23:44 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

gira schrieb:
> Hello all
> I know that you're not supposed to take an image of a DC but what if it's
> the only DC in the domain with no replication partner?
> I have a test environment using VMWare where the DC runs as a guest.
> I'd like to make a VM snapshot of it so I can revert back after testing
> things.

For a test environment, this could be an "okay" way to go. Problems
won't arise immediately but it depends on regular you'd revert the
snapshots back and how old those snapshots are. Machines will have
issues dealing with changed machine account passwords.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Re: domain controller image [message #340820 is a reply to message #340720] Fri, 11 December 2009 01:37 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello gira,

It doesn't matter, do not work with images, even the DC is single in a domain(also
a not recommended configuration). At least at the time when the machine account
passwords expire you run into trouble as stated from Florian.

See here why not working with images or other not AD aware backups:
http://support.microsoft.com/kb/875495

Also keep in mind that on DCs should not run anything else, let them do only
there basic job, AD/DNS/GC and maybe DHCP.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello all
> I know that you're not supposed to take an image of a DC but what if
> it's
> the only DC in the domain with no replication partner?
> I have a test environment using VMWare where the DC runs as a guest.
> I'd like to make a VM snapshot of it so I can revert back after
> testing
> things.
> Would this cause AD problems?
Re: domain controller image [message #341105 is a reply to message #340820] Fri, 11 December 2009 09:53 Go to previous messageGo to next message
gira  is currently offline gira
Messages: 19
Registered: July 2009
Junior Member
Thanks for the answers guys.
How about if I make a system state backup and then make a snapshot then
after a few days, revert back to the snapshot then boot into the AD restore
mode and restore the system state using the system backup I made? Would this
prevent all the issues that comes with using a snapshot image on a DC?

"Meinolf Weber [MVP-DS]" wrote:

> Hello gira,
>
> It doesn't matter, do not work with images, even the DC is single in a domain(also
> a not recommended configuration). At least at the time when the machine account
> passwords expire you run into trouble as stated from Florian.
>
> See here why not working with images or other not AD aware backups:
> http://support.microsoft.com/kb/875495
>
> Also keep in mind that on DCs should not run anything else, let them do only
> there basic job, AD/DNS/GC and maybe DHCP.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello all
> > I know that you're not supposed to take an image of a DC but what if
> > it's
> > the only DC in the domain with no replication partner?
> > I have a test environment using VMWare where the DC runs as a guest.
> > I'd like to make a VM snapshot of it so I can revert back after
> > testing
> > things.
> > Would this cause AD problems?
>
>
> .
>
Re: domain controller image [message #341253 is a reply to message #341105] Fri, 11 December 2009 12:29 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"gira" <gira@discussions.microsoft.com> wrote in message
news:44933FC4-B3FD-49BD-A028-DBD55C8D4EFB@microsoft.com...
> Thanks for the answers guys.
> How about if I make a system state backup and then make a snapshot then
> after a few days, revert back to the snapshot then boot into the AD
> restore
> mode and restore the system state using the system backup I made? Would
> this
> prevent all the issues that comes with using a snapshot image on a DC?
>

Yes, it would prevent any issues related to imaging. The one thing I suggest
is to also backup the whole C: drive when doing so, because files may have
changed that may not match up to the System registry and other settings in
the System State.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.
Re: domain controller image [message #341466 is a reply to message #341105] Fri, 11 December 2009 14:26 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello gira,

As already stated from Ace, a system state backup is the supported way to
restore AD and prevent's the USN rollback.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks for the answers guys.
> How about if I make a system state backup and then make a snapshot
> then
> after a few days, revert back to the snapshot then boot into the AD
> restore
> mode and restore the system state using the system backup I made?
> Would this
> prevent all the issues that comes with using a snapshot image on a DC?
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello gira,
>>
>> It doesn't matter, do not work with images, even the DC is single in
>> a domain(also a not recommended configuration). At least at the time
>> when the machine account passwords expire you run into trouble as
>> stated from Florian.
>>
>> See here why not working with images or other not AD aware backups:
>> http://support.microsoft.com/kb/875495
>>
>> Also keep in mind that on DCs should not run anything else, let them
>> do only there basic job, AD/DNS/GC and maybe DHCP.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello all
>>> I know that you're not supposed to take an image of a DC but what if
>>> it's
>>> the only DC in the domain with no replication partner?
>>> I have a test environment using VMWare where the DC runs as a guest.
>>> I'd like to make a VM snapshot of it so I can revert back after
>>> testing
>>> things.
>>> Would this cause AD problems?
>> .
>>
Re: domain controller image [message #341752 is a reply to message #341105] Fri, 11 December 2009 21:18 Go to previous message
Phillip Windell  is currently offline Phillip Windell  United States
Messages: 526
Registered: July 2009
Senior Member
In a Virtual Lab I never have any real problems with reverting back.

XP workstations never seem to have any trouble at all no matter how old it
is. Other Member Server OS's will have trouble but when they get tripped up
over it I just unjoin them from the domain,..don't even bother to
reboot,...join them back to the domain and reboot. Everything is happy
again. It is a lab after all,...there are only a couple VMs involved in the
"domain",...it is not a real network with hundreds of machines

MS's virtualization with VirtualPC and VirtualServer doesn't have
"snapshots" like VMWare does,...but I just keep backup copies of my
VHDs,...it amounts to the same thing.


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Previous Topic:modify AD computer script to run from locally authenticated account on server
Next Topic:List all ALiases of A Records!
Goto Forum:
  


Current Time: Tue Jan 16 04:17:40 MST 2018

Total time taken to generate the page: 0.03648 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software