Friday, September 28, 2012

Authoritative /Non-Authoritative Restore in Windows2008

How to restore Server 2008 Active Directory (Non-Authoritative / Authoritative Restore)

Windows Server Backup
Windows Server Backup the Windows Server Backup feature provides a basic backup and recovery solution for computers running the Windows Server® 2008 operating system. Windows   Server Backup introduces new backup and recovery technology and replaces the previous Windows Backup (Ntbackup.exe) feature that was available with earlier versions of the ntbackup.
The ntbackup command is not available in Windows Vista or Windows Server 2008. Instead, you should use the wbadmin command and subcommands to back up and restore your computer and files from a command prompt. You cannot recover backups that you created with ntbackup by using wbadmin.
How to take systemstate backup.
To perform a system state backup, you must be a member of the Backup Operators group or the Administrators group, or you must have been delegated the appropriate permissions. In addition, you must run wbadmin from an elevated command prompt. (To open an elevated command prompt, click Start, right-click Command Prompt, and then click Run as administrator
Syntax: Wbadmin start systemstatebackup –backupTarget: <VolumeName>[-quiet]
Example: Wbadmin start systemstatebackup –backupTarget: F:
How to Restore Server 2008 Active Directory (non-authoritative)
1. On Server 2008 DC, open the command prompt on the server.
2. Run below commands to enter Directory Services Restore Mode (DSRM).                                          
 Bcedit / set safeboot dsrepair
 Shutdown –t 0 -r

Note: To manually boot in Directory Services Restore Mode, press the F8 key repeatedly. Do this immediately after BIOS POST screen, before the Windows logo appears. (Timing can be tricky; if the Windows logo appears you waited too long.) A text menu menu will appear. Use the up/down arrow keys to select Directory Services Restore Mode or DS Restore Mode. Then press the Enter key.
3. Login using administrator and DSRM password.
4. Run below command (note that e: is the drive letter of your backup), this will show you the version identifier of the backup.
Wbadmin get versions –backuptarget:e:
5. Run below command to start the restore.
Wbadmin start systemstaterecovery -version:10/08/2011-17:27–backuptarget :e:
6. After the restore process is completed, run following commands to reboot.
Bcedit /deletevalue safeboot
Shutdown –t 0 -r

How to Restore Server 2008 Active Directory if Someone Accidentally Deletes an Object. (Authoritative restore)
1.Restore Server 2008 Active Directory (non-authoritative), do not reboot the server
2. Open command prompt, run following commands, where CN=JIM,OU=HR,DC=TEST,DC=LOCAL is the object you wish to restore.
ntdsutil: activate instance ntds
Active instance set to “ntds”.
ntdsutil: authoritative restore
authoritative restore: restore object CN=JIM,OU=HR, DC=TEST,DC=LOCAL
3. Once it’s completed. Type quit
4. After the restore process is completed, run following commands to reboot.
     Bcedit /deletevalue safeboot
     Shutdown –t 0 -r

Original Post: