ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY

1
ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING,
AND DISASTER RECOVERY

• Chapter 11

2
MAINTAINING ACTIVE DIRECTORY

• Active Directory Database.
• Managed by Extensible Storage Engine (ESE).
• Changes to the database are made as transactions.
• Database fragmentation occurs over time.

3
ACTIVE DIRECTORY TRANSACTIONS
4
DEFRAGMENTATION

• Automatic online defragmentation
• Garbage collection process
• Tombstone (default life 60 days)
• Manual offline defragmentation
• F8 Directory Services Restore mode
• Ntdsutil files
• Compact to drive\directory
• Replace systemroot\ntds\ntds.dit

5
MOVING THE ACTIVE DIRECTORY DATABASE
6
SYSTEM STATE DATA BACKUP
7
RESTORING SYSTEM STATE DATA

• Normal restore
• Primary restore
• Authoritative restore

8
NORMAL RESTORE PROCESS
9
PRIMARY RESTORE
10
AUTHORITATIVE RESTORE
11
MONITORING ACTIVE DIRECTORY AND FILE REPLICATION

• Measurement tool
• Gaining a performance baseline
• Objects NTDS and FileReplicaSet
• Other benefits
• Early warnings to problems
• Improved system reliability
• Fewer support calls
• Improved system performance

12
DIRECTORY SERVICE LOG
13
FILE REPLICATION SERVICE LOG
14
SYSTEM MONITOR NTDS
15
SYSTEM MONITOR FILEREPLICASET
16
DIAGNOSTIC LOGGING
17
DCDIAG
18
DSASTAT
19
REPLMON
20
REPADMIN
21
NETDOM
22
NTDSUTIL
23
NTFRSUTL
24
NETDIAG
25
ADSIEDIT.MSC
26
LDP.EXE
27
KERBTRAY.EXE
28
NLTEST.EXE
29
DSACLS.EXE
30
SYSTEM SERVICES

• Distributed file system
• File replication
• Intersite messaging
• Kerberos key distribution
• Remote procedure call (RPC)
• DNS server
• Net logon
• Windows time

31
SUMMARY

• Which startup option allows you to perform
  offline maintenance on the Active Directory
  database?
• Which tool allows you to defragment and compact
  ntds.dit?
• What is the difference between an authoritative
  restore and a normal restore?
• In which tool do you find the option to perform a
  primary restore?
• Which tool allows you to baseline Active
  Directory performance on NTDS and the
  FileReplicaSet?