Return
-
Title
What are the steps when running a Forest Restore? -
Description
All the tasks performed when a Forest Recovery is started.
Each method will be discussed: Restore from backup, Reinstall Active Directory, Uninstall Active Directory -
Resolution
Restore From Backup:
PREPARE TO START
- Ensure that Forest Recovery Agent is installed and running
- Detect current mode (DSRM or normal)
- Get information about domain controller (IP Addresses, DNS names, FSMO roles, etc)
PREPARE FOR RESTORE FROM BACKUP- Check if computer is a domain controller
- Save start types of Windows services
- Disable Windows Update
- Copy the backup file to domain controller
PERFORM RESTORE FROM BACKUP- Restart domain controller in DSRM if necessary
- Enable domain controller isolation
- Disable custom filters for passwords
- Restore data from backup
- Restart domain controller in normal mode
- Reset computer account passwords
CONFIGURE DOMAIN CONTROLLER- Get information about domain controller
- Select preferred DNS server
- Remove global catalog if necessary
- Raise RID pool
- Invalidate RID pool
- Seize FSMO roles
- Clean up metadata of removed domain controllers
- Reset the Krbtgt password
- Enable custom filters for passwords
- Ensure that the SYSVOL share is available
- Restart domain controller in normal mode
- Reset trust passwords
MAKE DOMAIN CONTROLLER AVAILABLE- Ensure that domain controller isolation is disabled
- Clean up metadata for domains that were not restored if necessary
- Ensure global catalog is available
- Enable the use of global catalog for user authentication
- Enable Windows Update
- Restore start types of Windows services
- Remove temporary files
Reinstall Active Directory:
PREPARE TO START- Ensure that Forest Recovery Agent is installed and running
- Get information about domain controller (IP Addresses, DNS names, FSMO roles, etc)
UNINSTALL ACTIVE DIRECTORY DOMAIN SERVICES- Save start types of Windows services
- Disable Windows Update
- Uninstall Active Directory Domain Services
- Ensure that domain controller isolation is disabled
REINSTALL ACTIVE DIRECTORY DOMAIN SERVICES- Remove global catalog if necessary
- Wait for a global catalog server to become available
- Restart domain controller in normal mode
- Reinstall Active Directory Domain Services
- Enable Windows Update
- Restore start types of Windows services
- Remove temporary files
Uninstall Active Directory:PREPARE TO START- Ensure that Forest Recovery Agent is installed and running
- Get information about domain controller (IP Addresses, DNS names, FSMO roles, etc)
UNINSTALL ACTIVE DIRECTORY DOMAIN SERVICES- Disable Windows Update
- Uninstall Active Directory Domain Services
- Ensure that domain controller isolation is disabled
- Enable Windows Update