Some companies have a so broken Active Directory that it is impossible to fix it.
As a last resort "cleaning" method, I'd like to be able to recreate a domain from scratch with the exact same domain SID, and users SIDs.
Then I will have to re-register every computers and servers, wich is not a big deal with a small network, especially after an IT disaster.
I think this is doable in 4 steps, but not necessarily easy.
Maybe there is a way to use an Active Directory Backup (System State) on a new server, without importing the full Active Directory? (Only SIDs).
An "Offline Domain Join" procedure is available since Windows 7/2008. This allow to join a computer to a domain without having a network connexion between them. You only have to transfer a file from the domain controler to the desired computer.
Step 1, create the file on a domain controler as a last resort backup routine:
djoin.exe /provision /domain mydomain.com /machine mywindowsclient /savefile c:offlinejoin.txt
Step 2, once the disaster occured, use the file on a new server:
djoin.exe /requestODJ /loadfile c:offlinejoin.txt /windowspath %systemroot% /localos
But I find nowhere if this can be applied to servers.
I can test it with a virtual machine, but this won't validate the fact it will work well years laters (ie, is it supported?).
Step 3, is it possible to promote it as a domain controler? ie, it is supported? I don't find any information about this neither.
Step 4, restore the users accounts.
Uh, how could I do that?
Years ago I used a commercial software able to backup/restore users, passwords, and SIDs.
Step 5 (optional), restore the computers SIDs into Active Directory.
Recent Questions...
ما را در سایت Recent Questions دنبال میکنید
برچسب:
نویسنده: استخدام کار
بازدید: 204
تاريخ: سه
شنبه
21 ارديبهشت
1395 ساعت: 6:02