廣告樹系復原步驟還原樹系AD Forest Recovery - Steps for Restoring the forest

適用於: Windows Server 2016、 Windows Server 2012 和 2012 R2、 Windows Server 2008 和 2008 R2Applies To: Windows Server 2016, Windows Server 2012 and 2012 R2, Windows Server 2008 and 2008 R2

本章節復原樹系提供建議路徑的概觀。This section provides an overview of the recommended path for recovering a forest. 樹系修復的步驟稍後描述在詳細資料。The forest recovery steps are described in detail later.

下列清單摘要高階修復的步驟:The following list summarizes the recovery steps at a high level:

  1. 找出問題Identify the problem

    搭配 IT 與 Microsoft 支援服務來判斷範圍問題的可能原因,並與所有企業關鍵評估可能救濟權利。Work with IT and Microsoft Support to determine the scope of the problem and potential causes, and evaluate possible remedies with all business stakeholders. 通常總樹系修復應該最後一個選項。In many cases total forest recovery should be the last option.

  2. 選擇如何復原森林Decide how to recover the forest

    完成初稿判斷是必要的樹系修復之後,步驟它的準備: 判斷目前的樹系結構,找出俠每個執行時,可以選擇要俠還原為每個網域中,並確保離線拍攝的所有寫入網域控制站的功能。After you determine that forest recovery is necessary, complete preliminary steps to prepare for it: determine the current forest structure, identify the functions that each DC performs, decide which DC to restore for each domain, and ensure that all writeable DCs are taken offline.

  3. 執行初始復原Perform initial recovery

    隔離,復原一個網域控制站的每個網域、 清理,並重新網域。In isolation, recover one DC for each domain, clean them, and reconnect the domains. 重設特殊權限的帳號,並修正造成安全性漏洞,在此階段中的問題。Reset privileged accounts, and rectify problems caused by security breaches in this phase.

  4. 剩餘的網域控制站重新部署Redeploy remaining DCs

    重新部署樹系返回為失敗之前的狀態。Redeploy the forest to return it to its state before the failure. 這個步驟會需要是適用於您的特定的設計與需求。This step will need to be adapted to your specific design and requirements. 模擬的網域控制站複製可協助促進此程序。Virtualized domain controller cloning can help expedite this process.

  5. 清理Cleanup

    還原功能後,如有需要重新設定名稱解析,並取得運作 LOB 應用程式。After functionality has been restored, reconfigure name resolution as needed, and get LOB applications working.

最小化 reintroducing 危險資料插入復原樹系的可能性設計本文中的步驟操作。The steps in this guide are designed to minimize the possibility of reintroducing dangerous data into the recovered forest. 您可能需要修改因素的步驟執行:You might have to modify these steps to account for such factors as:

  • 擴充性Scalability
  • 遠端管理Remote manageability
  • 復原的速度Speed of recovery