Discussions specific to the Microsoft Hyper-V hypervisor
Post Reply
mvalpreda
Enthusiast
Posts: 48
Liked: 1 time
Joined: May 06, 2015 10:57 pm
Full Name: Mark Valpreda
Contact:

Restore AD controller always seems to go poorly - what am I doing wrong?

Post by mvalpreda » Apr 08, 2019 11:35 pm

Hyper-V on Server 2016, made a backup with Veeam 9.5u3 of an 2008 R2 DC and then restored it to a different 2016 Hyper-V host with a 'segmented' network in Hyper-V. Restore seemed to go fine, but when I start up the machine, it takes anywhere between 5-20 minutes to get a login screen - sits on 'Applying computer settings...' the whole time. When I do finally log in, it will sit on 'Preparing desktop' for a while and once I finally get in.....neither AD nor DNS works.

Have done this in the past for other DR testing and seen where AD seems to take 30-45 minutes before it 'works' again. This time it doesn't seem to be working. I can't imagine this is how it is supposed to be. All services are started and this server holds all the FSMO roles. Lots of errors in the Event Viewer about not being able to contact a DC. What is interesting is the NETLOGON and SYSVOL shares are present.

Am I doing something wrong with my restore? Maybe the backup? I am using AAP and the backups are always successful.

Mike Resseler
Product Manager
Posts: 5655
Liked: 591 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Mike Resseler » Apr 09, 2019 5:00 am

Hey Mark,

Did you check this article: https://www.veeam.com/kb2119

Could you let us know what scenario you are trying?

HErceg
Influencer
Posts: 18
Liked: 1 time
Joined: Apr 21, 2019 11:03 am
Full Name: Hrvoje Erceg
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by HErceg » Apr 28, 2019 9:11 pm

Hi Mike,

I read instructions from provided link, but I don't see an explanation how to first boot restored DC in DSRM mode?From what I understand restored DC must be booted first in DSRM mode?
I can do it once DC is booted, but how to do it before?

Mike Resseler
Product Manager
Posts: 5655
Liked: 591 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Mike Resseler » May 03, 2019 6:05 am 1 person likes this post

Hey HErceg,

Press F8 immediately after the POST process completes to bring up the Advanced Boot Options menu.
Select Directory Services Restore Mode from the menu. The DC will boot into DSRM.

That should do the trick (which means you need to start the DC and look at the console in Hyper-V to see it booting)

Rumple
Service Provider
Posts: 56
Liked: 4 times
Joined: Mar 10, 2010 7:50 pm
Full Name: Mark Hodges
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Rumple » May 14, 2019 1:17 pm 1 person likes this post

If your IP range has changed in that isolated segment, that would certainly explain the issues since AD just does not work at all once the IP is changed. I would also recommend setting up the local windows backups to just dump a system state to the local drive as a CYA..then you can restore the VM as indicated, use the DSRM and worse case, restore the system state and that should make AD all happy...assuming of course its restoring into the same network subnet and the DC is configured to talk to itself first for networking and the networking is active.

Personally though, I never restore AD controllers except in very small environments. I just run multiple controllers on different boxes so the restore is for catastrophic issues like crypto...and then I have a backup and a good system state.

Mike Resseler
Product Manager
Posts: 5655
Liked: 591 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Mike Resseler » May 15, 2019 6:21 am

Mark,

I am a believer of the same. When a DC is going crazy, spin-up a clean one, promote it and cleanly remove the old one. However, as you said yourself, in smaller environments with only 1, maybe 2 DCs... :-)

HErceg
Influencer
Posts: 18
Liked: 1 time
Joined: Apr 21, 2019 11:03 am
Full Name: Hrvoje Erceg
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by HErceg » May 16, 2019 10:53 am

One sidenote about DC restoration.POST process is needed, but choosing it during first boot can be missed.Usually it goes fast and I know a lot of people that didn't press F8 in time, but they manage to do it in second or third attempt.
What would happen in that case?

Mike Resseler
Product Manager
Posts: 5655
Liked: 591 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Mike Resseler » May 17, 2019 5:21 am

Not much actually... It will boot, contact the other domain controllers and figure out that it is behind and will try to start the replication to get up-to-date with the others

HErceg
Influencer
Posts: 18
Liked: 1 time
Joined: Apr 21, 2019 11:03 am
Full Name: Hrvoje Erceg
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by HErceg » May 25, 2019 12:27 am

So basically POST is not must-do for restoring DC?

Mike Resseler
Product Manager
Posts: 5655
Liked: 591 times
Joined: Feb 08, 2013 3:08 pm
Full Name: Mike Resseler
Location: Belgium
Contact:

Re: Restore AD controller always seems to go poorly - what am I doing wrong?

Post by Mike Resseler » May 28, 2019 4:28 am 1 person likes this post

Not if you have other domain controllers that are still good. Then you can consider that domain controller as a domain controller that had a really long reboot ;-)
Well, at least with Veeam. This blogpost: https://www.veeam.com/blog/how-to-recov ... ction.html still stands so it should give you a good insight in the inner workings

Post Reply

Who is online

Users browsing this forum: No registered users and 12 guests