Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

Share this Page URL
Help

Part III: Administer the Network > Managing Active Directory - Pg. 535

Chapter 17 Managing Active Directory Maintaining the AD DS Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .535 Backing Up AD DS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .541 Restoring AD DS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .546 Managing the AD DS Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552 Auditing AD DS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567 Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572 After completing your deployment and initial configuration of your Active Directory envi- ronment, you will find that your work load is much reduced. When Active Directory is properly deployed, it is very stable and requires little daily maintenance. However, you need to perform some tasks regularly. These tasks include managing the AD DS database and domain controller roles and ensuring that you have a consistent disaster recovery process in place. Maintaining the AD DS Database One of the important components of managing AD DS is maintaining the AD DS data- base. Under normal circumstances, you will rarely manage the AD DS database directly because regular automatic database management will maintain the health of your data- base in all but exceptional situations. These automatic processes include an online defragmentation of the AD DS database as well as a garbage collection process to clean up deleted items. For those rare occasions when you do need to directly manage the AD DS database, Windows Server 2008 provides the Ntdsutil tool. AD DS Data Storage The AD DS database is stored in a file called Ntds.dit, which is located in the %system- root%\NTDS folder by default. The contents of this folder are shown in Figure 17-1. This folder also contains the following files: 535