Restore Domain Controller Server with Snapshot in HyperV

Dear Team,
I
have a Domain Controller (Windows Server 2008R2) hosted in my HyperV, and Accidentally
its got corrupted and i have a snapshot backup which took 20 days back. when i restore that snapshot, i am unable to establish communication with al other computers those were already added to the domain.
We will highly appreciate if you could let us know how we can resume our AD Server’s communication with
other servers.

ALSO SEE
https://jorgequestforknowledge.wordpress.com/2006/03/08/backup-and-restore-of-active-directory-2/
Cheers,
Jorge de Almeida Pinto
Principal Consultant | MVP Directory Services | IAM Technologies
COMMUNITY...:
DISCLAIMER: This post is provided "AS IS" with no warranties of any kind, either expressed or implied, and confers no rights! Always evaluate/test yourself before using/implementing this!

Similar Messages

The KDC encountered duplicate names while processing a Kerberos authentication request in a Domain controller server

HI
we have a sharepoint farm and in domain controller server, this error is in event viewer
Log Name: System
Source: Microsoft-Windows-Kerberos-Key-Distribution-Center
Date: 9/15/2014 10:44:15 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: XXXAPP01.xxxportal.com
Description:
The KDC encountered duplicate names while processing a Kerberos authentication request. The duplicate name is HTTP/XXXWFE01.xxxportal.com (of type DS_SERVICE_PRINCIPAL_NAME). This may result in authentication failures or downgrades to NTLM. In order to prevent
this from occuring remove the duplicate entries for HTTP/XXXWFE01.xxxportal.com in Active Directory.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
 <Provider Name="Microsoft-Windows-Kerberos-Key-Distribution-Center" Guid="{3FD9DA1A-5A54-46C5-9A26-9BD7C0685056}" EventSourceName="KDC" />
 <EventID Qualifiers="49152">11</EventID>
 <Version>0</Version>
 <Level>2</Level>
 <Task>0</Task>
 <Opcode>0</Opcode>
 <Keywords>0x80000000000000</Keywords>
 <TimeCreated SystemTime="2014-09-15T19:44:15.000000000Z" />
 <EventRecordID>131824</EventRecordID>
 <Correlation />
 <Execution ProcessID="0" ThreadID="0" />
 <Channel>System</Channel>
 <Computer>XXXAPP01.xxxportal.com</Computer>
 <Security />
</System>
<EventData>
 <Data Name="Name">HTTP/XXXWFE01.xxxportal.com</Data>
 <Data Name="Type">DS_SERVICE_PRINCIPAL_NAME</Data>
 <Binary>
 </Binary>
</EventData>
</Event>
adil

Hi adil,
Service principal names (SPNs) are stored as a property of the associated account object in Active Directory
Domain Services (AD DS). I noticed that you have used setpn –X to identify the duplicate SPN. Please refer to following articles and check if help you to solve this issue.
Event ID 11 — Service Principal
Name Configuration
Event ID 11 in the System log of domain controllers
Please also refer to following article and check if can help you.
The problem with duplicate SPNs
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

Limit Administrator Access to only OS Level functions on a Windows 2003 (and up) Domain Controller Server

I have read several articles such as:1.  <a href="http://social.technet.microsoft.com/Forums/windowsserver/en-US/9c723f4a-51a7-4844-9dc6-0017355d694c/limited-administrative-on-domain-controller?forum=winserverDS">http://social.technet.microsoft.com/Forums/windowsserver/en-US/9c723f4a-51a7-4844-9dc6-0017355d694c/limited-administrative-on-domain-controller?forum=winserverDS</a>2. 
Active_Directory_Delegation.docConsider that a domain controller, doing no other functions than domain based functions (ie no file server, printer or app server) - is managed in two parts:  The OS-only level, to read log files,
server health monitoring, install OS-level Micrsoft security patching and the second part being Domain management level - Users and Computers, Domains and Trusts, etc).For a given domain controller server, an outsourced support group needs
to be responsible for the OS-only level access - they need no access to the Domain management level functions so they can fufill contractual obligations (SLAs) for server uptime, patching etc.  For the same given domain controller
server above, there is an internal (non-outsourced) support group that will perform all Domain management level functions only.  They want to manage the Domain on the Domain Controller servers, want the Outsourcer to manage the VM and OS-related tasks,
but DO NOT want them to be able to access and change information in Users and Computers, Domains and Trusts etc.  With that explaination, would putting the Outsourcer's AD-based account IDs in the Server Operators group alone be
sufficient to allow OS-level management, like patching, reboots, etc but disallow access to Domain Management functionality (Users and Computers etc) - or does it need to be a combination of built in groups and delgated rights?Please consider
that I am seeking a technical solution here - do not respond with "either trust your Domain Administrators or keep your junior admins from the server" as that is not a viable solution.  
Jason B. Allen

Hi Jason,
According to your description, you want to assign the OS-level management and Domain management rights to two groups separately, right?
Based on my research, members of Server Operators group don’t have sufficient rights to install updates for Domain Controllers, you can refer to this article below:
Default groups
http://technet.microsoft.com/en-us/library/cc756898(v=WS.10).aspx
You can configure Allow non-administrators to receive update notifications group policy so that non-administrative users will be able to install all optional, recommended, and important updates content for which
they received a notification, except some updates which contain User Interface, End User License Agreement and so on, which still require domain admin credentials.
To enable non-administrator users the ability of logging onto and shutting down DCs,
Allow logon locally and Shut down the System rights should be granted.
In addition, reading logs and monitoring server performance rights are included on Performance Log Users and Performance Monitor Users groups.
More information for you:
Step 5: Configure Group Policy Settings for Automatic Updates
http://technet.microsoft.com/en-us/library/dn595129.aspx
User Rights Assignment
http://technet.microsoft.com/en-us/library/cc780182(v=WS.10).aspx
I hope this helps.
Amy Wang

How to script out to connect to Active Directory specific domain controller server?

How to script out a script that enable us to connect to the specific domain controller server, it is because I have 2 different servers version and both of them have been communicate with powershell, thus, I wanted to powershell to communicate with one
server version. How to script this out?

Please see the Posting Guidlines:
http://social.technet.microsoft.com/Forums/en-US/a0def745-4831-4de0-a040-63b63e7be7ae/posting-guidelines?forum=ITCG
and this article on how to ask questions in a technical forum:
http://sincealtair.blogspot.com/2010/04/how-to-ask-questions-in-technical-forum.html
[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "

Your backup is from a different version of Microsoft SharePoint Foundation and cannot be restored to a server running The backup file should be restored to a server with version '12.0.0.6318' or later.

am trying to restore the bak file into a new site collection in my sp 2010 standalone env.
am getting error
PS C:\Windows\system32> stsadm -o restore -url http://srvr1-01:123/sites/Repository -filename "C:\mBKUPCOPY\Sharepoint_bankup.bak"
STSADM.EXE : Your backup is from a different version of Microsoft SharePoint Foundation and cannot be restored to a server running
the current version. The backup file should be restored to a server with version '12.0.0.6318' or later.
At line:1 char:1
+ stsadm -o restore -url http://srvr1-01:123/sites/Repository -filename "C: ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (Your backup is ...6318' or later.:String) [], RemoteException
+ FullyQualifiedErrorId : NativeCommandError

As stated in the other thread on this topic you can't restore a 2007 backup to 2010, it needs to be upgraded.
https://social.technet.microsoft.com/Forums/en-US/31c70f0a-5d89-4308-895b-af0c2b249114/restore-the-site-collection-from-moss-2007-to-sp-2010-site-collec?forum=sharepointadminprevious

Why I cannot open a restored domain.sites2 file with iweb?? Message: "

Why I cannot open a restored domain.sites2 file with iweb?? Message: "domain.sites2 couldn't be opend"

Please supply screen shot when it is asking for updates. (Do not send as email, use CAMERA icon). This is important, there are many fake updates.

Rman restore to windows server with different drive layout

I'm restoring to a server with a different drive layout. I'm using the set newname for the datafiles and it's working fine. However. My redo logs show that they are on the f: drive and the f: drive doesn't exist on the new server (recovery). so when I'm all done I get an error saying that it cant find the redo02.log. Any ideas?
TIA
Dave

no problem, thanks for the reply.
Here's what I tried in the init.ora
LOG_FILE_NAME_CONVERT=('F:\ORADATA\ORCQA08','D:\ORADATA\ORCQA08')
I didn't even create the spfile I figured I could do that later.
The datafiles alll go to the correct drive, here's my restore statement:
run
allocate channel disk_channel1 type disk;
allocate channel disk_channel2 type disk;
SET NEWNAME for datafile 1 to 'd:\ORADATA\ORCQA08\SYSTEM01.DBF';
SET NEWNAME for datafile 2 to 'd:\ORADATA\ORCQA08\SYSAUX01.DBF';
SET NEWNAME for datafile 3 to 'e:\ORADATA\ORCQA08\UNDOTBS01.DBF';
SET NEWNAME for datafile 4 to 'd:\ORADATA\ORCQA08\USERS01.DBF';
SET NEWNAME for datafile 5 to 'e:\ORADATA\ORCQA08\PLATDATA.DBF';
SET NEWNAME for datafile 6 to 'd:\ORADATA\ORCQA08\PLATHISTDATA.DBF';
SET NEWNAME for datafile 7 to 'd:\ORADATA\ORCQA08\TS_MV.DBF';
SET NEWNAME for datafile 8 to 'e:\ORADATA\ORCQA08\PLATNDX.DBF';
SET NEWNAME for datafile 9 to 'd:\ORADATA\ORCQA08\POADATA.DBF';
SET NEWNAME for datafile 10 to 'd:\ORADATA\ORCQA08\POABDATA.DBF';
SET NEWNAME for datafile 11 to 'd:\ORADATA\ORCQA08\POANDX.DBF';
SET NEWNAME for datafile 12 to 'd:\ORADATA\ORCQA08\TS_REPORT_DATA.DBF';
restore database;
release channel disk_channel1;
release channel disk_channel2;
i then do a switch database to copy and this registers the datafiles under the correct drive BUT when I try to open the database this is what i get:
ORA-00280: change 15613734 for thread 1 is in sequence #861
ORA-00278: log file
'D:\oracle\flash_recovery_area\ORCQA08\ARCHIVELOG\2012_08_03\ARC0000000860_07815
80447.0001' no longer needed for this recovery
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
cancel
Media recovery cancelled.
SQL> alter database open resetlogs;
alter database open resetlogs
ERROR at line 1:
ORA-00344: unable to re-create online log 'F:\ORADATA\ORCQA08\REDO01.LOG'
ORA-27040: file create error, unable to create file
OSD-04002: unable to open file
O/S-Error: (OS 3) The system cannot find the path specified.
You can see that it's still looking on the f: drive for the redo log. Is my syntax correct?? - - LOG_FILE_NAME_CONVERT=('F:\ORADATA\ORCQA08','D:\ORADATA\ORCQA08')
I can get rid of the other redo logs by dropping them and recreating under the proper drive but 01 is the active log.
any other ideas?
Dave

What happens if Domain Controller server authentication certificate expires?

Dear People,
We have got two Domain controller servers and accordingly two Azman servers. we
have got two certificates issued for each Domain controllers to our two Azman servers. Both these certificates are going to expire in next few days. We have few Web
& Desktop applications for which we authorize a large pool of users with the help of these two Azman servers.
Now, Issue is, Domain Controller certificates are going to expire soon on both Azman servers. Can somebody tell me, what could be impact of expiration of these certificates?
will all the application be down after that? Should I must go for renewal of certificates? Please help me as soon as possible otherwise I will be in big trouble. Thanks.

Hi,
Based on my research, Domain Controller Authentication certificate is used for client authentication, server authentication and smart card logon.
You need to renew the certificates before they expire, otherwise problems about smart card logon and SSL connection will occur.
More information for you:
Processing Domain Controller Certificates
http://technet.microsoft.com/en-us/library/cc787009(v=WS.10).aspx
Best Regards,
Amy

How to join a Domain Controller Server to an two-tier (SQL Server 2012) and Sharepoint 2013 (SP2013) farm

Hi,
I am trying to build a 3-tier SharePoint 2013 farm.
1. SQL Server 2012, Windows 2012 VM
2. DC Server, Windows 2012 VM
3. SharePoint 2013, Windows 2012 VM
I didn't built the DC server. Someone else did. However, I created about 14 service domain user accounts for SQL Server and SharePoint install and operation.
I was able to join the SQL Server into the SharePoint server farm using SharePoint 2013 Product Configuration Wizard. When I start the Central Admin, and click on Servers in the Farm, I only see the SharePoint server and SQL server,
but the DC server is not listed. Any suggestion on what did I miss?
Thanks
Jean

You cannot join the Domain Controller to your SharePoint farm. You must instead join each server from that farm to the domain that is served up by that DC. You will want to uninstall SharePoint and probably SQL before you do this. If it's
an option, I would re-provision your VMs completely and start fresh. Once you login to a new server, join that server to the target domain like this:
http://www.petri.co.il/join-windows-server-2012-to-domain.htm
You'd have to ensure that your DNS resolves to the target domain on the server being joined to the domain. If it doesn't, you can always use HOSTS entries to overcome that in the short term.
Once you've joined both the future SQL and SharePoint servers to the domain, you can install SQL Server and then SharePoint on their prospective servers to create your farm.
I trust that answers your question...
Thanks
C
|
RSS |
http://crayveon.com/blog |
SharePoint Scripts | Twitter |
Google+ | LinkedIn |
Facebook | Quix Utilities for SharePoint

Error during the hotbackup restore to test server with different db name

Hi,
I am using hotbackup to restore the database with new name on other server
i moved hot backup set to test server i recreated the controlfile
SQL> @/mounts/dcsnpts1_temp/oradata/dcsnpts1/create/create.sql;
Control file created.
SQL> recover database using backup controlfile until cancel;
ORA-00279: change 10354451046463 generated at 06/08/2010 02:51:17 needed for
thread 1
ORA-00289: suggestion :
/mounts/dcsnpts1_arch/dcsnpts1/dcsnpts1_arch_R677255203_T1_S1030.arc
ORA-00280: change 10354451046463 for thread 1 is in sequence #1030
Specify log: {<RET>=suggested | filename | AUTO | CANCEL}
CANCEL
ORA-01547: warning: RECOVER succeeded but OPEN RESETLOGS would get error below
ORA-01195: online backup of file 1 needs more recovery to be consistent
ORA-01110: data file 1:
'/mounts/dcsnpts1_data/oradata/dcsnpts1/dbfiles/system01.dbf'
ORA-01112: media recovery not started
SQL> alter database open resetlogs;
alter database open resetlogs
ERROR at line 1:
ORA-01195: online backup of file 1 needs more recovery to be consistent
ORA-01110: data file 1:
'/mounts/dcsnpts1_data/oradata/dcsnpts1/dbfiles/system01.dbf'
i do not have archive logs how i can open the database with resetlog
apprecited inputs.
Thanks
Prakash

all 3 instances reside on single server we use netapp snapshot backup what it will do is it will take all db's snapshot in same time (hotbackup).The snapshots are NOT instantaneous!
If they were actually frozen in time, the DB would be consistent & open.
The snapshot must be handled as any other online (hot) backup.
ALTER SYSTEM SWITCH LOGFILE;
alter database begin backup
-- take hot backup
alter database end backup
ALTER SYSTEM SWITCH LOGFILE;
Restore backed up files, then apply all redos inclusive to steps above

Your backup is from a different version of Microsoft SharePoint Foundation and cannot be restored to a server running the current version. The backup file should be restored to a server with version '14.0.0.6106' or later

while Restoring a Site Collection from a different server i got below error in SharePoint 2010.
Kindly let me know , which patch i have to install along with the download link please. i am unable to find the correct patch to download..
Thanks in Advance,
Tarun
TARUN

Hi,
According to your post, my understanding is that you get an error when you restore a site collection from a different server in SharePoint 2010.
I recommend that you can try to click the “KB2536599” for SharePoint 2010 version 14.0.0.6106 to download the patch from the following links and install the patch in your environment.
http://blogs.technet.com/b/moss_it/archive/2011/08/15/lista-di-versioni-di-sharepoint-server-2010-o-sharepoint-foundation-2010-wss-4-0.aspx
http://support.microsoft.com/kb/2536599
After the installation, you need to run the Configuration Wizard. Later you should be able to restore this site collection successfully.
For more information, you can refer to:
https://ammarfassy.wordpress.com/2012/11/29/restore-spsite-your-backup-is-from-a-different-version/
https://social.technet.microsoft.com/Forums/en-US/cb9fb524-2a65-4a59-8f09-fc86366dd1c2/restore-errorversion-of-14006106-in-power-shell?forum=sharepointdevelopmentprevious
http://blogs.technet.com/b/stefan_gossner/archive/2011/07/12/june-2011-cu-for-sharepoint-2010-has-been-re-released.aspx
http://www.sharepointdesignerstepbystep.com/blog/SitePages/SharePoint%20versions.aspx
Best Regards,
Yumi Fu

Restore on new server with new DB_NAME/SID?

My goal is to restore database with the RMAN backup on a server that has no connectivity to the production database (I don’t want to use duplicate command).
I restore a database from RMAN using a same DB_NAME/SID and everything was ok.
-     restore spfile
-     restore controlfile
-     restore database
-     recover database
-     open with reset logs
Now I want to restore database but with different DB_NAME/SID (My production database is PROD and I want to restore this PROD RMAN backup on new server and this new database I want to be called DEV).
How to restore database with new DB_NAME/SID?
Oracle 10g, Windows Server 2003
Thanks in advance!

user9106065 wrote:
My goal is to restore database with the RMAN backup on a server that has no connectivity to the production database (I don’t want to use duplicate command).
I restore a database from RMAN using a same DB_NAME/SID and everything was ok.
-     restore spfile
-     restore controlfile
-     restore database
-     recover database
-     open with reset logs
Now I want to restore database but with different DB_NAME/SID (My production database is PROD and I want to restore this PROD RMAN backup on new server and this new database I want to be called DEV).
How to restore database with new DB_NAME/SID?
Oracle 10g, Windows Server 2003
Thanks in advance!You can use NID command
Run NID and you can see the options to run
or see How to Change the DBID, DBNAME Using NID Utility in version 10GgR2 onwards [ID 863800.1]
Cheers

RMAN backup restore on new server with CATALOG START WITH

Hello Experts,
CATALOG START WITH
is this required RMAN in catalog mode ?
reference of post
Disastor Recovery with RMAN : Restore backup on new separate Server
Edited by: 873142 on Jul 18, 2011 9:27 PM

If you use a recovery catalog and want to duplicate database in a fresh server.
1. connect with the target database.
2. connect with the recovery catalog.
3. connect with the auxiliary database.
4. Run the duplicate command.
Before running the duplicate command copy the backup piece to your fresh server from the target server. Both mount point should be same.
Regards
Asif Kabir
-- mark your helpful post as correct/helpful.

Use old domain controller AD user profile with new domain (profile changed)

Dear All,
I have built Win Server 2012 for Domain migration from Windows Server 2003 to Windows Server 2012. I have tested all thing on VMware including user creation and tested Domain join using power shell for Win 7 and .VBs batch file for Win XP computers all thing
are working fine.
Let 1st I introduce my current environment. I have existing Win Server 2003 domain controller (abc.com) with 130 client computers and 200 users I am going to plan migrate my current environment to Win server 2012 Domain (xyz.com) Keep in mind that Domain
name is changed but Domain Controller (Server) names are same i.e MY-PDC . I have tested domain join on multiple computers using existing clone of client computers and create all existing users using .csv file and power shell with required
credentials and OU.I am facing the user profile issue when I join domain and login with existing user which was previously the user of same computer the required profile does not login and computer creates new user profile in Document and Settings section
of Win XP.
I need your expert opinions because copy old profile data and create new outlook profile for each user is a big headache for any one. Hope you people can understand and help me in this issue.
Please provide best answer and result on priority I will be thankful to all of you.
Regards,
Arsalan

Hi Arsalan,
Please check if USMT can help you to achieve this target.
User State Migration Tool 4.0 User's
Guide
Meanwhile, please also refer to following articles and check if can help you.
How
to Migrate Windows User Profile to New Account
Keeping user old domain profile
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
If anything I misunderstand or any update, please don’t hesitate to let us know.
Hope this helps.
Best regards,
Justin Gu

Remove Domain Controller role from Exchange 2010 Server

Hi team,
There is a client with Domain Controller (2008 R2) running together with Exchange Server 2010 SP3. However there were some huge problems with Exchange and DC therefore since the best practice is to keep those roles seperately, they are in need of doing so.
Can someone please suggest me the best approach? The server they use right now is with 16GB therefore whatever done, Exchange should be on that machine and DC on the other 6GB.
Option 01.
Both Exchange and DC are together
Install new Exchange on a temporary Server and move everything make that Exchange server the only working primary
Remove exchange from the DC server
Promote new Additional DC and promote it with FSMO and make primary
Demote the old DC from the 16GB server
Install Exchange again on the 16GB server and move everything from the temporary server
Or Option 02
Add new additionall Domain Controller server and make it primary with GC and FSMO
Run dcpromo to demote the old Domain controller role from where the Exchange Server too is installed
Once DC role is removed from the exchange server, set up DNS and perform a restart, so Exchange will identify the new GC and domain controller
Live happily ever after
Thank You,
Cheers!!

Adding/Removing the DC-Role while Exchange is installed, is not supported so forget about your Option 2.
Here's what I would do:
1. Install a new GC/DC (move FSMO etc)
2. Install a new temporary server for Exchange and move everthing over
3. Decomission the old Exchange Server
4. Demote the old Domain Controller
5. Install Exchange on a newly freshly installed OS and move everything over from your temp server
Martina Miskovic

Restore Domain Controller Server with Snapshot in HyperV

Similar Messages

Maybe you are looking for