Discussions specific to the VMware vSphere hypervisor
Post Reply
readie
Expert
Posts: 158
Liked: 30 times
Joined: Dec 05, 2010 9:29 am
Full Name: Bob Eadie
Contact:

Restoring a Domain Controller problems (USN Rollback)

Post by readie » Dec 09, 2013 8:34 pm

Hi,
We had a disaster over the w/e and had to restore about a dozen servers from backups/replicas. All seemed to go well, except for a DC which had the PDC and RID and the other Op Master role which I can't remember.
It came back (apparently worked for about 24 hours) but now seems to be in a non-replicating state (DSA Not Writeable=4 in HKLM\System\CurrentControlSet\Services\NTDS\Parameters). Microsoft refer to this as 'USN rollback' problems, frequent when restoring from a snapshot or similar image backup . . .
Before I restored the DC I trawled these forums, and the general view was that restoring a DC was not now a problem, only requiring perhaps a few reboots etc. . . . but not in our case.
I restored from backup (not replica). Microsoft suggest that my backup should have included the 'System State' . . does this mean that I should have ticked a particular box on the backup job (which perhaps I didn't)?
Just trying the forum again, in the hope that someone might have come across this, and have some solution or suggestions (the Microsoft suggestions seem, as always, extremely complex).
We don't really want to demote and promote this back to a DC, as it has masses of other tasks like SYNC to Office 365 etc., and ADFS service.
Thanks for any help,
Bob
Bob Eadie
Computer Manager at Bedford School, UK (since 1999).
Veeam user since 2009.

readie
Expert
Posts: 158
Liked: 30 times
Joined: Dec 05, 2010 9:29 am
Full Name: Bob Eadie
Contact:

Re: Restoring a Domain Controller problems

Post by readie » Dec 09, 2013 9:53 pm

Ah - I have found that my backup job was not 'application aware'. I am now completely lost, or is there a manual process to put things right?
Bob Eadie
Computer Manager at Bedford School, UK (since 1999).
Veeam user since 2009.

Gostev
SVP, Product Management
Posts: 24019
Liked: 3254 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Restoring a Domain Controller problems

Post by Gostev » Dec 09, 2013 10:10 pm

I believe I recall from my past life that there was a recovery process from USN rollback that included a number of manual steps. Basically, you need to remove the bad DC completely from AD by manually cleaning up references in a few places. Try Googling for the exact process.

Gostev
SVP, Product Management
Posts: 24019
Liked: 3254 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: Restoring a Domain Controller problems

Post by Gostev » Dec 09, 2013 10:12 pm

Yep, this was the very first link in Google searching for "recover from usn rollback" :D
And the process is exactly as I remember it > http://support.microsoft.com/kb/875495
Hope this helps!

Post Reply

Who is online

Users browsing this forum: rboynton and 26 guests