Active Directory Forest Recovery step by step.
1. For restoration of forest domain firstly we need to take the On Demand backup / Schedule Server backup of parent (Main) domain and Child domains separately in different folders.
2. If the backup location is on the same machine no need to configure any settings.
3. If the backup is on the remote shared location then trust relationship must be there between parent domain and shared folder location domain.
4. Trust relationship should be configured. Below are the steps to configure trust relationship.Create Trust from Remote shared location domain.Configured the trust where the shared folder had been created.
5. Go to Administrative tools –> Active Directory Domains and Trusts.
6. Right click on domain and go to properties.
7. Go to Trusts –> Click on New Trust and hit on OK button.
8. Enter the fully qualified domain name of Parent /Child domains and hit on next button.
9. Select realm trust and hit on next—> Again next.
10. In direction of trust page select Two way option and hit on next button.
11. Enter the Trust Relationship password and hit on next.
12. After successful configuration it will display the message “Trust relationship created successfully as below.
13. Click on Finish button.
14. Once Trust is configured on remote shared folder domain then start the system state backup process from parent domain and then child domains using CionSystems AD Recovery Manager on Demand backup / Schedule backup.
15. Once backup is completed go to AD Recovery Manager –>Server backup and Recovery –> AD Server backup’s history and note down the version ID of the respective domain.
16. After noting down the Version ID.Go to AD Recovery Procedure tab and download Power Shell scripts .If the Forest DC is 2012 and above download the power shell script first.
17. If DC is 2008 and above then download the second script as shown below.
18. If the parent domain or child domains is dead /crashed then follow the below steps for restoration.
19. If you need to restore complete Forest.First restore the parent domain afterwards child domains one by one.
20. If Child domains need to be restored then restore child domains only.
21. Let’s start with the restoration of forest DC.
22. Login to your machine in Directory Services Restore Mode.
23. If Directory Services Restore Mode is not enabled in safe mode then go to run command in normal mode and type msconfig and hit enter and reboot the machine.
24. Go to boot tab select Safe boot –>Select Active Directory Repair radio button and hit on Apply –>Click OK.
25. Click on restart button.The machine reboots in Directory Services Restore Mode.
26. Login to the machine with Local Admin account into Active Directory Services Repair mode.
27. After login into Repair Mode open the Script which was downloaded from the recovery manager.
28. Open the Power Shell script as shown below.
29. After opening the Power shell script type “Y” and hit Enter.
30. Enter Version ID which was copied and hit on Enter key.
31. Enter the credentials User Name and Password where backup exist as below.
32. Hit on Enter.
33. Enter”Y” and hit Enter key. After hitting Enter key restoration process will start as shown below. It will display number of files recovered.
34. It will display the recovery % status once restoration starts.
35. Once Recovery is completed system gets reboot after login with local admin account it goes to command prompt shown below.
36. Press Enter button and restart the machine in normal mode by unchecking Active directory Repair option in system configuration tab.
37. Hit on apply and click on OK it will pop up a window to restart the machine.
38. Click on Restart button.Machine will reboot in normal mode.
39. After reboot login with domain admin account.This is how the forest restored.
40. Need to follow the same process to restore the Child domains.
Leave a Reply
Want to join the discussion?Feel free to contribute!