PDA

View Full Version : Windows 2003 Server Tips and Tricks



Joshua
08-25-2003, 11:49 AM
Q. What's the Windows Server 2003 domain controller (DC)
install-from-media function?

A. When you add a new DC to an existing domain, the new DC typically
receives all Active Directory (AD) content from an existing DC on the
network. This process can take some time, especially over slow network
connections or on very large domains.

With Windows 2003, you can optionally install a new DC to an existing
domain by using a system-state backup of an existing DC from the same
domain. (You can't use this method to create new domains, however.)
The DC backup can reside on CD-ROM, DVD, or a local disk.

Keep in mind that the DC backup must be within the tombstone lifetime
of the domain (typically 60 days) and that some replication with DCs
will still take place (i.e., to get updates since the backup was taken
and updates to the SYSVOL share content).

--------------------

Q. When I use the Windows Server 2003 domain controller (DC)
install-from-media function, how can I back up information from an
existing DC to copy to the new DC?

A. When you use NTBackup to create a system-state backup of the
existing DC information, the DC backup will contain the Active
Directory (AD) information for the domain. If you back up the system
state from a Global Catalog (GC) server, the new DC that you create
from the DC backup can also become a GC. To create the DC backup,
perform the following steps:
1. Start NTBackup (go to Start, Programs, Accessories, System
Tools, then click Backup).
2. When NTBackup starts, click Next.
3. Select "Back up files and settings," then click Next.
4. Select "Let me choose what to back up," then click Next.
5. Expand My Computer, select System State, then click Next.
6. Select a location and a name for the backup, then click Next.
7. Click Finish to begin creating the DC backup.
8. After NTBackup finishes creating the backup, click Close.

You'll then have a .bkf file that you can use to create a new DC.

--------------------

Q. When I use the Windows Server 2003 domain controller (DC)
install-from-media function, how can I restore information from the DC
backup?

A. Assuming you've created a .bkf file from a DC in the same domain as
the server that you want to promote, perform the following steps:
1. Log on to the Windows 2003 server that you want to promote to a
DC.
2. Start NTBackup (go to Start, Programs, Accessories, System
Tools, then click Backup).
3. When NTBackup starts, click Next.
4. Select "Restore files and settings," then click Next.
5. Click Browse, select the backed up file, then click OK.
6. Select the System State check box, then click Next.
7. Click Advanced.
8. Under "Restore files to:," select "Alternate location," specify
the new location (e.g., C:\temp\sysstate), then click Next.
9. Click Next until the final dialog box appears, then click
Finish.
10. Click Close once to complete the restore.

After the restore is complete, you'll see an Active Directory (AD)
folder in the restore location. The AD folder contains the ntds.dit
file, which is the storage file for the AD content, and a
corresponding log file. The only folders you need to promote a DC are
the AD and Registry folders.

--------------------

Q. How can I use the Windows Server 2003 domain controller (DC)
install-from-media function to promote a Windows 2003 server to a DC?

A. After you create a system-state backup of an existing DC in the
same domain as the server you want to promote and restore that backup
to a location accessible to the server (e.g., local hard disk, CD-ROM,
DVD) that you're promoting, perform the following steps:
1. Start Dcpromo in advanced mode--go to Start, Run, then type

dcpromo /adv

2. When the introduction screen appears, click Next.
3. When the compatibility screen appears, click Next.
4. Select "Additional domain controller for an existing domain,"
then click Next.
5. Select "From these restored backup files," browse to the
location of the system-state restoration, then click Next.
6. If the restoration was from a DC that served as a Global Catalog
(GC) server, Dcpromo will ask you whether the new DC should be a DC.
Make your selection, then click Next.
7. Enter the name of a domain administrator account in the new DC's
domain, then click Next.
8. Enter the locations in which you want to store the Active
Directory (AD) information, then click Next.
9. Enter a location in which you want to store SYSVOL, then click
Next.
10. Enter a restore mode password in both boxes, then click Next.
11. On the summary screen, click Next to begin the promotion
process.
12. After the DC promotion is complete, click Finish.
13. Click Restart Now.

--------------------

Q. How can I configure an answer file to use with the Windows Server
2003 domain controller (DC) install-from-media function to promote a
Windows 2003 server to a DC?

A. To use an answer file when promoting a DC by using the
install-from-media function, you must add the following two lines to
your answer file:

ReplicateFromMedia=yes
ReplicationSourcePath=c:\NTDSRestore

The second line must contain the path to the location of the DC backup
restored files. For example, an answer file might look like

[Unattended]
Unattendmode=fullunattended

[DCINSTALL]
UserName=<domain admin account>
Password=<password for domain account>
UserDomain=<domain name>
DatabasePath=c:\windows\ntds
LogPath=c:\windows\ntds
SYSVOLPath=c:\windows\sysvol
SafeModeAdminPassword=<new password for safe mode>
CriticalReplicationOnly=No
SiteName=<name of site for the domain controller>
ReplicaOrNewDomain=Replica
ReplicaDomainDNSName=<existing DNS domain name>
ReplicationSourceDC=<existing domain controller in domain>
ReplicateFromMedia=yes
ReplicationSourcePath=c:\NTDSrestore
RebootOnSuccess=yes

To use this answer file, enter the command

dcpromo /adv /answer:<filename>

Be aware that if you use an answer file for a second time to perform
another unattended installation, the passwords will be blank and
you'll be prompted to reenter them. The Dcpromo process removes the
passwords from the file each time for security reasons.

Dave_7
08-25-2003, 09:49 PM
Nice!



Dave.

ribitch
08-26-2003, 03:33 AM
I attended a boot camp for 2003 when it first came out. I have a 700 page book of powerpoint slides with notes on all of this stuff. It was insane. we covered it all in 3 days at 6 hours per day plus lab time.

Joshua
08-26-2003, 07:58 AM
My brain would be mush after that marathon!