Using Windows Server Backup and Recovery Domain Controller

Through this article, you will learn the following: In Windows Server 2008, Microsoft abandoned the NTBackup backup tool integrated with the previous version of Windows Server, and instead used a system called Windows Server Backup. The new backup program is replaced. Windows

Through this article, you will learn the following: In Windows Server 2008, Microsoft abandoned the NTBackup backup tool integrated with the previous version of Windows Server and replaced it with a new backup program called Windows Server Backup. There is a clear difference between Windows Server Backup and NTBackup. The biggest change is the backup and recovery process of the domain controller. This article will introduce it in detail.

In a full backup in 2003, if we want to back up the Active Directory (Active Directory) database, the system state of Windows Server & mdash; & mdash; including system files and related components & mdash; & mdash; must be done of. As we know, NTBackup can perform system state backup operations through the GUI interface and save the backup data in a file with the extension BKF. However, to initiate a system state backup in Windows Server 2008, you need to enter the following command under the command line tool:

Wbadmin start systemstatebackup --backuptarget:E:

After executing the above commands, the user will find two things: First, the system state backup takes more time in Windows Server 2008 than in 2003. This is because Windows server backup will treat some of the "system files" as the target of "system state backup", while the NTBackup backup process does not process these files.

Secondly, after the backup is complete, users will find .BKF before Windows creates the file extension .VHD, instead.

Remember, the command line is not to create a & ldquo; system state backup & rdquo; the only way. This can also be done in the GUI interface by selecting the <;Enable System Recovery" option. It should be noted that the operation of the GUI interface is a regular backup, but it includes a simple system state backup function instead of a backup specifically for the system state.

performing a recovery operation

In the Windows Server Backup As for which method we should use to recover a domain controller, depending on whether the authorization needs to be done to restore (authoritative restoration). Non-authoritative restoration is also called normal restore. In other words, it performs normal system state recovery on the failed server and then restarts the server. Then, based on the system recovery, new The repaired server restores the data to the latest state by communicating with other functioning domain controllers in the network to synchronize lost object information.

authoritative restore (authoritative restoration) is actually the entire Active Directory domain controller that is all to restore unity to a point in time in the past. If the user accidentally deletes an object and wants to retrieve it, the method of authorizing recovery is very effective. In this scenario, unauthorized recovery of a single server is not possible. Even if the lost object can be recovered, other domain controllers in the network will inform the newly recovered server that the information is in an inconsistent state. (meaning the object should be deleted).

user wants to restore the system state of the domain controller, you must restart the server, and enter the & ldquo; Directory Services Restore Mode (Directory Services Restore Mode) & ldquo; . However, after Windows Server 2003, this mode of operation has changed, because 2003 is different from the previous version, and the boot.ini file is no longer used. Instead, the user needs to execute the following command in the command prompt window:

C:\\> bcdedit /set safeboot disrepair

After executing the above command, the server must be restarted. Once the server is restarted, we are faced with the choice —— specify which backup version we want to restore to. There are two ways to restore the system to the specified time state. You can use the system backup (the backup of the main system volume) to recover, or you can use the system state backup to recover. However, in any case, we must first confirm the availability of each backup version. To do this, you need to open a command prompt window as an administrator (that is, "elevated command prompt", by default, most versions of the Windows operating system will have restrictions on the operation of the command prompt, unless executed as an administrator. operation), and type the following command:

Wbadmin get versions

after you enter this command, Windows system will list all the available backup, each backup The version has a version identifier that includes the backup date and timestamp. The user selects the point in time at which he wants to recover based on the identifier.

As for the specific commands and parameters, depending on whether we want to perform an authorization recovery or an unauthorized recovery. To better illustrate this operation, we assume that we want to restore the version with the identifier " 07/26 /2010-12:00“, if it is an unauthorized recovery, we would like to type the following command:

Wbadmin start systemstaterecovery --version: 07/26 /2010-12: 00

If you do authorize recovery, we are using the same command, but you want to attach a parameter switch & ldquo; authsysvol & ldquo ; The complete command statement is:

Wbadmin start systemstaterecovery --version:07/26/2010-12:00 –AUTHSYSVOL

After the recovery process is over, we will most likely need to restart Windows ( Compare the "startup steps in the directory service recovery mode". To do this, you need to enter the following command:

C:\\> bcdedit /deletevalue safeboot

As described in this article, recover domain controllers in Windows Server 2008 The process is completely different from 2003. In addition, the Wbadmin command has a number of optional parameters, including the ability to restore data to a remote server. If more information is needed, users can read the documentation on the system status recovery parameters on the Microsoft website.