Looking at DR options for AD. Would like to know what Commvault options might be available to restore AD if AD is down? I’m aware of System state and AD agents but it’s my understanding that if AD is down…. how would the restore work?
Many thanks
Best answer by Damian Andre
View original
+23
Hey
Assuming AD is broken, a system state restore will be required if following traditional methods. You can perform an authoritative restore in the restore options, which will basically make this the ‘master’ domain controller which will forcefully replicate and overwrite all the other AD databases across other domain controllers that are running. Hopefully you never need to be in that situation, but that is what it is for.
Performing a non-authoritative restore will restore the domain controller to a functional state, but will overwrite the restored copy of AD with the ‘live’ copy from other domain controllers.
While microsoft does not recommend/support it (at least they didn't at some stage), you can restore your domain controller via VM backup - you may have to wrangle with some Microsoft tools to make it authoritative to achieve the same effect as above.
Note the AD agent ONLY restores granular objects and attributes, it cannot be used for a disaster scenario like you are describing.
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
