Unit 10 In Class Assignment AD Trouble Shooting and Backup

1. What is extensible storage engine (ESE) Also known as JET Blue, is an ISAM (Indexed Sequential Access Method) data storage technology from Microsoft.

How does it work?

It’s purpose is to allow applications to store and retrieve data via indexed and sequential access. Numerous Windows components take advantage of ESE, such as desktop and directory.

Source: https://www.google.com/#q=What+is+extensible+storage+engine+(ESE) Source:

2. Does Active directory offer any fault tolerance, if so what kind?

Yes. In any Active Directory deployment, more than one server with the Active Directory Domain Services role deployed is recommended for fault tolerance. In fact, at least two Domain Controllers are recommended as a best practice for every Domain deployed in an Active Directory forest. The reason for this is to ensure that more than one server exists at any given time with a copy of the Active Directory database.

Source: http://www.techrepublic.com/blog/data-center/active-directory-virtualization- best-practices/

Yes. For fault tolerance, you should always deploy new domains with at least two domain controllers. If you only have a single domain controller for a given domain and the domain controller fails, you will be forced to restore from a backup. This is easily avoided by deploying a second domain controller.

Source: http://eds.b.ebscohost.com.proxy.itt- tech.edu/eds/ebookviewer/ebook/bmxlYmtfXzU2NTg4MV9fQU41?sid=b160d547-da82- 44ce-abbb-8eb31bda8745@sessionmgr110&vid=2&format=EB&lpid=lp_iii&rid=0

3. What is system state backup?
It consists of the core files and registry settings that are used by the Windows operating system.

The System State includes the following information: * The boot files * The system registry settings * The system protected files. These are the critical files needed to run Windows. For example KERNEL32.DLL and NTDLL.DLL. * The Active Directory data files * The shared system volume (SYSVOL) * The COM+ class registration database

Source: https://u-tools.com/help/SystemState.asp

4. What do you need to backup in active directory in order to accomplish a full recovery in the event of a failure? Looks like the system state and the following; If you use Active Directory-integrated DNS, then the zone data is backed up as part of the Active Directory database. If you do not use Active Directory-integrated DNS, you must explicitly back up the zone files. However, if you back up the system disk along with the system state, zone data is backed up as part of the system disk.If you installed Windows Clustering or Certificate Services on your domain controller, they are also backed up as part of system state. Source: https://msdn.microsoft.com/en-us/library/Bb727048.aspx

A nonauthoritative restore simply restores Active Directory without marking any of the data as authoritative. This means that any changes that have happened since the backup will replicate to the restored server. Also, any changes that were made on the server that had not replicated will be lost.

Source: http://eds.a.ebscohost.com.proxy.itt- tech.edu/eds/ebookviewer/ebook/bmxlYmtfXzU2NTg4MV9fQU41?sid=f5fed586-68fa- 44a5-827e-bf4300decfe1@sessionmgr4004&vid=1&format=EB&ppid=pp_502

5. What types of restoration methods are available for a full AD restore?
There are two general methods for restoring Active Directory from backup media: nonauthoritative and authoritative.

Source: https://technet.microsoft.com/en-us/library/Cc961934.aspx

Active Directory restores come in a few different flavors, nonauthoritative and authoritative.

Source: http://eds.a.ebscohost.com.proxy.itt- tech.edu/eds/ebookviewer/ebook/bmxlYmtfXzU2NTg4MV9fQU41?sid=f5fed586-68fa- 44a5-827e-bf4300decfe1@sessionmgr4004&vid=1&format=EB&ppid=pp_502

6. What Is DCdiag, repadmin and ADSIEdit?

DCdiag is a command-line tool that encapsulates detailed knowledge of how to identify abnormal behavior in the system. Dcdiag displays command output at the command prompt.

RepAdmin is a command-line tool assists administrators in diagnosing replication problems between Windows domain controllers. Administrators can use Repadmin to view the replication topology (sometimes referred to as RepsFrom and RepsTo) as seen from the perspective of each domain controller.

ADSIEdit is a Microsoft Windows® Server tool that you can use to view and edit raw Active Directory® directory service attributes through the Active Directory Services Interfaces (ADSI) protocol. ADSI Edit is suitable for editing a single object or a small number of objects in Active Directory.

How do they help in diagnostics? They help by giving you the ability detect, edit and remove and unforeseen issues that may arrive in Active Directory.

Source: https://technet.microsoft.com/en-us/library/Cc731968.aspx Source: http://eds.a.ebscohost.com.proxy.itt- tech.edu/eds/ebookviewer/ebook/bmxlYmtfXzU2NTg4MV9fQU41?sid=f5fed586-68fa- 44a5-827e-bf4300decfe1@sessionmgr4004&vid=1&format=EB&ppid=pp_502

7. What third party backup solutions are available for backing up a full sever as well as just active directory?
Other backup servers available are as follows;

Sources:

Barracuda

https://www.barracuda.com/products/backup?&a=[google_na]backup_search&grp=backup_solution_phrase&ad=70488540501&kw=backup%20solutions&gclid=CjwKEAjwpPCuBRDris2Y7piU2QsSJAD1Qv7BV0SVrN4DiZTPPcxLDIsKu3IFR0PSvYrDRxtCeeU_fBoCeGDw_wcB

Carbonite http://www.carbonite.com/lp/VSB/lookback-server.aspx?&catid=200271&mkwid=s7KbXhR5c|dc&adnumber=72987504061&cm_mmc=ppc-_-google-_-72987504061-_-s7KbXhR5c&c3apimn=7KbXhR5c&pkw=server%20backup%20solution&pmt=b&gclid=CjwKEAjwpPCuBRDris2Y7piU2QsSJAD1Qv7BFLOPXmtz_Kp7QeZuxaWJTmkYvmuCqtZN50pQ3j3DeRoC1mfw_wcB Symantec

http://www.symantec.com/pages.jsp?id=symantec-backup-exec&om_sem_cid=biz_sem_s164618460770546|pcrid|59680685569|pmt|b|plc||pdv|c