-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
backing up domain controllers
Hi everyone, first post!
I'm using the eval version of veeam backup abd so far it's working great.
We have 2 ESXi [licensed] servers and a SAN, with Virtual Center server.
My question is regarding backing up virtualized domain controllers, we have 2, one on each vmware box, plus a third externally on it's own hardware [just in case].
One of the two vmware DC's is the RID master.
What would be the best practice for backing these up using Veeam backup.
Second question is with AD. I heard that it's best to remove a DC from participating in Ad before backing up a virtualised server. Anyone else agree?
Apparently backing up vmware DC's is so new that microsoft dosnt have any "best practices"
Thanks!!!
Peter
I'm using the eval version of veeam backup abd so far it's working great.
We have 2 ESXi [licensed] servers and a SAN, with Virtual Center server.
My question is regarding backing up virtualized domain controllers, we have 2, one on each vmware box, plus a third externally on it's own hardware [just in case].
One of the two vmware DC's is the RID master.
What would be the best practice for backing these up using Veeam backup.
Second question is with AD. I heard that it's best to remove a DC from participating in Ad before backing up a virtualised server. Anyone else agree?
Apparently backing up vmware DC's is so new that microsoft dosnt have any "best practices"
Thanks!!!
Peter
-
- Chief Product Officer
- Posts: 31804
- Liked: 7298 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: backing up domain controllers
Peter, all you need to do is enable Veeam VSS processing in Backup job settings, and make sure you do not set the "continue even if VSS fails" checkbox. DC backups made without proper VSS processing are worse than no backup at all.
You don't need to remove DC from AD or do anything else - just backup DC as a regular VM. I have a big blog post about virtualized DC backups here, you can pick up more information from it: http://veeammeup.com/2008/08/vss-and-vm ... g-you.html
One thing not mentioned there is that with Veeam, DC restore will be performed as non-authoritative. So there is no risk of Active Directory information loss due to accidentally restoring some very old VM DC backup.
You don't need to remove DC from AD or do anything else - just backup DC as a regular VM. I have a big blog post about virtualized DC backups here, you can pick up more information from it: http://veeammeup.com/2008/08/vss-and-vm ... g-you.html
One thing not mentioned there is that with Veeam, DC restore will be performed as non-authoritative. So there is no risk of Active Directory information loss due to accidentally restoring some very old VM DC backup.
-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
Re: backing up domain controllers
Thank You!!!
-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
Re: backing up domain controllers
I'm getting an ERROR using VSS
Retrieving file list
RPC function call failed. Function name: [Unfreeze]. Target machine: [192.168.88.247].
RPC error:Access is denied.
Code: 5
I'm using the domain administrators credentials in the username and password window for VSS.
Retrieving file list
RPC function call failed. Function name: [Unfreeze]. Target machine: [192.168.88.247].
RPC error:Access is denied.
Code: 5
I'm using the domain administrators credentials in the username and password window for VSS.
-
- Chief Product Officer
- Posts: 31804
- Liked: 7298 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: backing up domain controllers
Sounds like there are some additional custom security settings on your domain controller which prevent this, since this functionality works fine on clean DC install when using domain admin account. You can work with our support to troubleshoot this.
-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
Re: backing up domain controllers
the DC is just a garden variety plain, nothing special, DC. It does not even hold any of the roles, such as RID master etc. All it does it secondary dns and wins.
maybe a better question would be, what are "default VSS agent credentials"?
are they simply a domain administrative account? or something else?
Thanks!
Peter
maybe a better question would be, what are "default VSS agent credentials"?
are they simply a domain administrative account? or something else?
Thanks!
Peter
-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
Re: backing up domain controllers
ok, nevermind, i think. I didnt enter my domain admin credentials in the prescribed format domain\account
It's now backing up...: )
so to recap, and judging from reading the link you kindly sent....
You advised NOT to check "not set the "continue even if VSS fails" checkbox". So I did not.
when and if I evern need to perform a dc restore, should I just do the restore, and let AD sync itself? or do I need to be in Directory Services Restore mode?
can you clarify this briefly?
The article seems to state, I do NOt need to be in Dir Services Restore Mode.
Thanks!!!!
Peter
It's now backing up...: )
so to recap, and judging from reading the link you kindly sent....
You advised NOT to check "not set the "continue even if VSS fails" checkbox". So I did not.
when and if I evern need to perform a dc restore, should I just do the restore, and let AD sync itself? or do I need to be in Directory Services Restore mode?
can you clarify this briefly?
The article seems to state, I do NOt need to be in Dir Services Restore Mode.
Thanks!!!!
Peter
-
- Chief Product Officer
- Posts: 31804
- Liked: 7298 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: backing up domain controllers
Peter, upon restore, DC will boot into Directory Restore Mode automatically (as shown on the video). When restoring DC, you do not need to do anything besides instructing Veeam Backup to perform full VM restore. The actual restore is fully automated. Your DC will first boot into Directory Restore Mode and perform shadow copy restore, then reboot and boot normally, and then it will automatically sync up with other existing DCs to get all of its AD data up-to-date. All these operations will be performed automatically, you just sit back, relax and watch all this happening
-
- Novice
- Posts: 6
- Liked: never
- Joined: Jun 13, 2009 1:19 am
- Full Name: Peter Kuczynski
- Contact:
Re: backing up domain controllers
Thanks!!!!
super product!!!!
got all my vm's backed up, will be buying the full version next month! WOOT!
super product!!!!
got all my vm's backed up, will be buying the full version next month! WOOT!
-
- Novice
- Posts: 4
- Liked: never
- Joined: Jan 01, 2006 1:01 am
- Contact:
Re: backing up domain controllers
Can you still recover using a backup of a DC that doesnt have any of the roles by seizing the roles? I need to test my DC recovery offsite at one of our DR sites. Since it does not see the other DC's to sync up will I have any issues?
-
- Chief Product Officer
- Posts: 31804
- Liked: 7298 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: backing up domain controllers
Yes, you will have issues when recovering DC to site other than original. Customers who attempted to do this all reported that DC logs multiple errors and fails to work properly when restored to site other than original. And you are correct, this is expected because it cannot see other DCs and services (like DNS). DCs are just not designed to be moved around like that - up until the latest times, Microsoft did not keep virtualization in mind at all.
-
- Lurker
- Posts: 2
- Liked: never
- Joined: Sep 21, 2009 1:13 pm
- Full Name: Timothy Fairhurst
Re: backing up domain controllers
How about with Replication? I've got a replicated DC and every so often I'll boot it up and it will tell me that there is an issue with the server and shut down. Anyone else experienced this?
-
- Chief Product Officer
- Posts: 31804
- Liked: 7298 times
- Joined: Jan 01, 2006 1:01 am
- Location: Baar, Switzerland
- Contact:
Re: backing up domain controllers
No, I have not heard similar issue reported before. What issue exactly does it report before shutting down?
Who is online
Users browsing this forum: Baidu [Spider], Google Adsense [Bot], mbrzezinski, Spex and 129 guests