Video Screencast Help

Recovery from toal Active Directory failure

Created: 22 Nov 2013 | 2 comments

We are investigating  recovery when all Windows  Active Directory replicas have become corrupt and unuseable ( this happened to a local site recently).  The initial step should be an authoritative restore . However, we are using an  NBU master/media/client configuration  in which all components execute on platforms which are domain members, and backups, incuding domain controller system state, are stored in MSDP pools. I strongly suspect the master and media servers will not function since several services execute under the domain nbuservice account, and that recovery will not be possible. Has anyone considered this scenario ?
 

Operating Systems:

Comments 2 CommentsJump to latest comment

Yasuhisa Ishikawa's picture

Change all service privilege to default(Local System), then try restoring DC. Please have a look on my article - esspecially step 4 - for assistance.

https://www-secure.symantec.com/connect/articles/t...

Authorized Symantec Consultant(ASC) Data Protection in Tokyo, Japan

Nicolai's picture

Netbackup uses DNS as well, if all DC are down you are properly also without DNS.

Assumption is the mother of all mess ups.

If this post answered your'e qustion -  Please mark as a soloution.