廣告樹系修復-復原單一網域中的多網域樹AD Forest Recovery - Recovering a single domain in a multidomain forest

適用於: Windows Server 2016、 Windows Server 2012 和 2012 R2、 Windows Server 2008 和 2008 R2Applies To: Windows Server 2016, Windows Server 2012 and 2012 R2, Windows Server 2008 and 2008 R2

可能會有時復原單一網域中的多個網域,而不是完整的樹系復原樹系所需的時間。There can be times when it is necessary to recover only a single domain within a forest that has multiple domains, rather than a full forest recovery. 本主題涵蓋考量復原單一網域和修復的可能策略。This topic covers considerations for recovering a single domain and possible strategies for recovery.

單一網域復原呈現的唯一挑戰重建通用 (GC) 伺服器。A single domain recovery presents a unique challenge for rebuilding global catalog (GC) servers. 例如,如果的第一個網域控制站 DC 網域還原備份,建立一個星期更早版本,然後在森林中的所有其他 Gc 從將會有更多最新資料該網域比還原網域控制站。For example, if the first domain controller (DC) for the domain is restored from a backup that was created one week earlier, then all other GCs in the forest will have more up-to-date data for that domain than the restored DC. 若要重新建立 GC 資料的一致性,有幾個選項:To re-establish GC data consistency, there are a couple options:

  • Unhost,再重新的樹系,除了復原網域中的所有 Gc 都裝載一次。Unhost and then rehost all GCs in the forest, except those in the recovered domain, at the same time.

  • 依照復原網域的樹系修復程序,並 Gc 其他網域中的移除延遲物件。Follow the forest recovery process to recover the domain, and then remove lingering objects from GCs in other domains.

    下列區段會提供一般考量每個選項。The following sections provide general considerations for each option. 一組完整的需要進行修復的步驟會針對不同的 Active Directory 環境而有所不同。The complete set of steps that need to be done for the recovery will vary for different Active Directory environments.

重新所有 Gc 都裝載Rehost all GCs

可以完成 rehosting 所有 Gc 使用 repadmin//unhost 和 repadmin /rehost 命令 (repadmin 的一部分 /experthelp)。Rehosting all GCs can be done using repadmin /unhost and repadmin /rehost commands (part of repadmin /experthelp). 您會在每個復原網域中的每個 GC 執行 repadmin 的命令。You would run the repadmin commands on every GC in each domain that is not recovered.

警告

萬一發生問題而無法存取 gc 登入的所有網域建密碼必須可供使用。The password of the built-in Administrator account for all domains must be ready for use in case a problem prevents access to a GC for logon.

此選項可小型的只有少數網域網域控制站每個組織的好處。This option can be advantageous for a small organization that has only a few domain controllers for each domain. 所有 Gc 可以星期五之夜 」 上重建,如有需要,週一之前完成所有唯讀網域複寫磁碟分割。All of the GCs could be rebuilt on a Friday night and, if necessary, complete replication for all read-only domain partitions before Monday morning. 但如果您需要復原全球涵蓋網站大型網域,rehosting 唯讀網域磁碟分割上所有的 Gc 其他網域可大幅影響作業,可能需要向時間。But if you need to recover a large domain that covers sites across the globe, rehosting the read-only domain partition on all GCs for other domains can significantly impact operations and potentially require down time.

移除延遲物件Remove lingering objects

類似的樹系的修復程序,一個俠從備份還原的網域中,您需要復原、 執行的清除中繼資料的剩餘 Dc,並重新安裝 AD DS 建置網域。Similar to the forest recovery process, you restore one DC from backup in the domain that you need to recover, perform metadata cleanup of remaining DCs, and then re-install AD DS to build out the domain. 森林中的所有其他網域 Gc、 在您移除延遲物件唯讀復原網域中的磁碟分割。On the GCs of all other domains in the forest, you remove the lingering objects for the read-only partition of the recovered domain.

適用於延遲物件清理來源必須 DC 復原網域中。The source for the lingering object cleanup must be a DC in the recovered domain. 若要將某些來源 DC 不會有任何延遲物件的任何網域磁碟分割,您可以移除通用是否 GC。To be certain that the source DC does not have any lingering objects for any domain partitions, you can remove the global catalog if it was a GC.

移除延遲物件的是較大型的組織可能會無法使用的其他選項的相關的向下時間的理想。Removing lingering objects is advantageous for larger organizations that cannot risk the down time associated with the other options.

如需詳細資訊,請查看使用 Repadmin 移除延遲物件For more information, see Use Repadmin to remove lingering objects.

後續步驟Next Steps