ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY

1
ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING,
AND DISASTER RECOVERY

• Chapter 11

2
MAINTAINING ACTIVE DIRECTORY

• Active Directory Database.
• Managed by Extensible Storage Engine (ESE).
• Changes to the database are made as transactions.
• Database fragmentation occurs over time.

P282
3
ACTIVE DIRECTORY TRANSACTIONS
P282
4
DEFRAGMENTATION

• Automatic online defragmentation
• Garbage collection process
• Tombstone (default life 60 days)
• Manual offline defragmentation
• F8 Directory Services Restore mode
• Ntdsutil files
• Compact to drive\directory
• Replace systemroot\ntds\ntds.dit

P282
5
MOVING THE ACTIVE DIRECTORY DATABASE
P284
6
SYSTEM STATE DATA BACKUP
P285
7
RESTORING SYSTEM STATE DATA

• Normal restore
• Primary restore
• Authoritative restore

P292
8
NORMAL RESTORE PROCESS
P292
9
PRIMARY RESTORE
P293
10
AUTHORITATIVE RESTORE
P295
11
MONITORING ACTIVE DIRECTORY AND FILE REPLICATION

• Measurement tool
• Gaining a performance baseline
• Objects NTDS and FileReplicaSet
• Other benefits
• Early warnings to problems
• Improved system reliability
• Fewer support calls
• Improved system performance

P297
12
DIRECTORY SERVICE LOG
P297
13
FILE REPLICATION SERVICE LOG
P297
14
SYSTEM MONITOR NTDS
P299
15
SYSTEM MONITOR FILEREPLICASET
16
DIAGNOSTIC LOGGING
17
DCDIAG
P306
18
DSASTAT
P306
19
REPLMON
P306
20
REPADMIN
P306
21
NETDOM
P306
22
NTDSUTIL
P306
23
NTFRSUTL
P306
24
NETDIAG
P306
25
ADSIEDIT.MSC
P306
26
LDP.EXE
P306
27
KERBTRAY.EXE
P306
28
NLTEST.EXE
P306
29
DSACLS.EXE
P306
30
SYSTEM SERVICES

• Distributed file system
• File replication
• Intersite messaging
• Kerberos key distribution
• Remote procedure call (RPC)
• DNS server
• Net logon
• Windows time

P307
31
SUMMARY

• Which startup option allows you to perform
  offline maintenance on the Active Directory
  database?
• Which tool allows you to defragment and compact
  ntds.dit?
• What is the difference between an authoritative
  restore and a normal restore?
• In which tool do you find the option to perform a
  primary restore?
• Which tool allows you to baseline Active
  Directory performance on NTDS and the
  FileReplicaSet?