AD Forest Recovery - Procedures
Applies To: Windows Server 2016, Windows Server 2012 and 2012 R2, Windows Server 2008 and 2008 R2
This section contains procedures related to the forest recovery process. The procedures are applicable for Windows Server 2016, 2012 R2, 2012 and are also applicable to Windows Server 2008 R2 and 2008 with some minor exceptions.
Procedures that include steps that vary for Windows Server 2003 are found in Forest Recovery with Windows Server 2003 Domain Controllers.
The following is a list of procedures that are used in backing up and restoring domain controllers and Active Directory.
- Backing up a full server
- Backing up the System State data
- Performing a full server recovery
- Performing an authoritative synch of DFSR-replicated SYSVOL
- Performing a nonauthoritative restore of Active Directory Domain Services
These steps explain how to perform an authoritative restore of SYSVOL at the same time.
- Configuring the DNS Server service
- Removing the global catalog
- Raising the value of available RID pools
- Invalidating the current RID pool
- Seizing an operations master role
- Cleaning up after a restore
- Cleaning metadata of removed writable domain controllers
- Resetting the computer account password of the domain controller
- Resetting the krbtgt password
- Resetting a trust password on one side of the trust
- Adding the global catalog
- Resources to verify replication is working
- AD Forest Recovery - Prerequisites
- AD Forest Recovery - Devising a custom forest recovery plan
- AD Forest Recovery - Identify the problem
- AD Forest Recovery - Determine how to recover
- AD Forest Recovery - Perform initial recovery
- AD Forest Recovery - Procedures
- AD Forest Recovery - Frequently Asked Questions
- AD Forest Recovery - Recovering a Single Domain within a Multidomain Forest
- AD Forest Recovery - Forest Recovery with Windows Server 2003 Domain Controllers