Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- DownloadDownload
- PrintPrint
Chapter 12. Managing Active Directory an... > Backing Up and Restoring AD
Backing Up and Restoring AD
The notion of backing up AD may seem pointless. If you have multiple domain controllers running multimaster replication with, potentially, multiple domain controllers over multiple sites, the idea of a total loss of all the domain controllers seems unlikely. If your eight locations spread over the whole United States suddenly disappeared, it’s unlikely you’re still here anyway. Create backups to recover from data loss or corruption, and in reality, most of this is from accidental deletion of objects. In Windows Server 2008, you have the option to enable a Prevent Accidental Deletion option when creating a new OU. That option is not an accident. It is common for an administrator to accidentally delete an entire OU and all its content with a single click. What happens if an OU or an object is deleted? Restore it. From where do you restore? The backup.
Note
If you delete a user, it may be tempting to just re-create him. That won’t work. The user object has a security identifier, which is what is given access to resources. Just creating a new user with the same name as the old user doesn’t re-create the user; the new user won’t be able to access his old resources.
