Els's blog

Monday, June 26, 2006

Recovering from USN Rollback

A bit later as promised, but here it is: part 2 on the USN Rollback.
Enjoy!

There are 3 methods to recover from a USN Rollback.

  1. Reinstall AD.
    Use Dcpromo to remove AD from the faulty DC and demote the machine to a standalone server. Clean up all references to the DC, if this DC was hosting FSMO roles, make sure to transfer them to another (healthy) DC.
  2. Restore the system state.
    If a valid system state backup was made before the rolled-back DC was restored from image, restore the system state from the most recent backup.
  3. Fool your image-restored DC (requires Windows Server 2003 SP1!).
    - Restore your image.
    - Start the DC in Directory Services Restore Mode. Do NOT start normally or it’s all too late!!!
    - Open Registry Editor and look for the value ‘DSA Previous Restore Count’ (HKEY_LM\System\CurrentControlSet\Services\NTDS\Parameters). Make a note of this value. If the entry is not there, assume a value of 0. Do not add the entry.
    - Add the registry entry ‘Database restored from backup’ in HKEY_LM\System\CurrentControlSet\Services\NTDS\Parameters
    Data type: REG_DWORD
    Value: 1
    - Restart the DC normally.
    - Check the registry to be sure that the value of ‘DSA Previous Restore Count’ is equal to its previous value plus 1.
    - In the Directory Service event log, check to see that Event ID 1109 or 1587 appears.
    - This event confirms that AD has been restored and that the Invocation ID has changed.

4 Comments:

  • hello

    The 1st option i.e "Reinstall the AD" is known as Seizing of Role.

    I hope i am correct.

    By Blogger Hemant Singh, at 5:36 PM  

  • Can anyone recommend the best Patch Management system for a small IT service company like mine? Does anyone use Kaseya.com or GFI.com? How do they compare to these guys I found recently: N-able N-central remote environment manager
    ? What is your best take in cost vs performance among those three? I need a good advice please... Thanks in advance!

    By Anonymous Anonymous, at 5:05 AM  

  • You made some really good points there. I checked on the net to find out more about the issue and found most individuals will go along
    with your views on this website.
    Feel free to surf my blog post ... tods shoes

    By Anonymous Anonymous, at 7:32 PM  

  • These are truly wonderful ideas in on the topic
    of blogging. You have touched some nice things here.
    Any way keep up wrinting.
    Also see my webpage - nova scotia goose

    By Anonymous Anonymous, at 12:25 PM  

Post a Comment

<< Home