Comprehensive data protection for all workloads
Post Reply
vleesdoekje
Novice
Posts: 3
Liked: never
Joined: Jul 17, 2015 9:59 am
Contact:

DOne goofed up (AD issues after restoring DC)

Post by vleesdoekje » Aug 05, 2015 12:53 pm

Hello everyone,

After a failed WSUS update a dc booted up in safe mode and we couldn't get it running again properly.
What we did to fix this was performing a full restore of the DC to right before the updates.

Everything came back, seemingly no issues os went ahead and ended the day.

When I checked in and performed a few tests as dcdiag I noticed that the restored DC (which holds all 5 roles) trows RPC errors when tested from another DC.
The GUID changed after the restore and because of this none of the other 2 DC's recognize the restored DC.

Does anyone knows how to get out of this mess? The only guide I found referenced windows 2000 but these are all 2012R2 machines without dcpromo available.
(https://support.microsoft.com/en-us/kb/316829).

I'm also wondering how it could be that the GUID changed because of a restore, is this normal behavior?

I'm running Veeam 8 btw.

Gostev
SVP, Product Management
Posts: 24173
Liked: 3300 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Gostev » Aug 05, 2015 2:29 pm

Hi, this is unexpected and needs to be investigated by our AD specialists. Did you perform the same test of DC in question from another DC BEFORE everything happened? And please include support case ID for this issue, so that we could track it with support. Thanks!

Zew
Expert
Posts: 212
Liked: 42 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Zew » Aug 05, 2015 3:00 pm

What version of DC's? If you are running 2008 R2 and older, you have to do an Authoritative restore

https://technet.microsoft.com/en-us/lib ... s.10).aspx
https://msdn.microsoft.com/en-us/library/bb727048.aspx

Only 2012 DC's support snapshots/instant recovery technology. I remember this being a huge topic when I took a Windows Server 2012 course. Hope this info helps.

Gostev
SVP, Product Management
Posts: 24173
Liked: 3300 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Gostev » Aug 05, 2015 4:45 pm

Zew, we do support full DC recovery for 2003 and above. We do not rely on this new functionality of 2012 (DSA Invocation ID) that you are talking about, as this one was only introduced in Windows Server 2012. Thanks!

Bl0ckH@rm0ny
Novice
Posts: 5
Liked: never
Joined: Aug 05, 2015 4:45 pm
Full Name: Mark R. Broda
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Bl0ckH@rm0ny » Aug 05, 2015 5:02 pm

I am shootin from the hip here, may be deprecated, can you get it to boot into (DSRM) Director Services Recovery Mode?

https://dirteam.com/sander/2012/11/29/r ... tore-mode/

hoFFy
Service Provider
Posts: 175
Liked: 27 times
Joined: Apr 27, 2012 1:10 pm
Full Name: Sebastian Hoffmann
Location: Germany / Lohne
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by hoFFy » Aug 05, 2015 6:58 pm

I believe you know it already, but the shortest workaround will be to transfer / seize the fsmo roles to another dc, demote this dc (if possible) and promote it again.
I know this doesn't help you much with this specific restore problem, but this will be a good chance to keep your AD stable. I would recommend to check AD logs after that, start a new backup and test restore with Sure Backup.
Thats the was I would do it...
VMCE 7 / 8 / 9, VCP-DC 5 / 5.5 / 6, MCITP:SA
Blog: machinewithoutbrain.de

Zew
Expert
Posts: 212
Liked: 42 times
Joined: Mar 17, 2015 9:50 pm
Full Name: Aemilianus Kehler
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Zew » Aug 11, 2015 9:47 pm

Gostev wrote:Zew, we do support full DC recovery for 2003 and above. We do not rely on this new functionality of 2012 (DSA Invocation ID) that you are talking about, as this one was only introduced in Windows Server 2012. Thanks!
And how exactly does Veeam manage that?

Gostev
SVP, Product Management
Posts: 24173
Liked: 3300 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: DOne goofed up (AD issues after restoring DC)

Post by Gostev » Aug 11, 2015 10:24 pm

By leveraging Microsoft VSS at backup and restore time. Microsoft designed AD VSS Writer specifically to ensure this issue does not happen, and we leverage these capabilities. In fact, this functionality was first introduced in our v2, which was 7 years ago...

Post Reply

Who is online

Users browsing this forum: Google [Bot] and 21 guests