Free Essay

Active Directory Backup


Submitted By Norm86
Words 498
Pages 2
1. Define the two types of backups supported by Active Directory. Describe the difference between each of these backup strategies; how they are implemented and what tools can be deployed to accomplish these tasks.
Active directory has two different types of backups. They are NTBACKUP and Windows Server Backup. The Windows Server Backup is the only “all in one” type of backup. It allows you to work with Volume Shadow Copy Service snapshots in Active Directory. The Window’s Server Backup lets you backup to direct-attached disk volumes, network shares, external hard drives and even DVD’s. You are also able to utilize Group Policy settings to help keep the files safe from people who should not have access to them. The next backup option is NTBACKUP which is a file based backup tool but it has been replaced with the Windows Server Backup. 2. Explain fragmentation. Compare and contrast online defragmentation and offline defragmentation.
Fragmentation is when parts of a file are saved in several different areas on the hard disk instead of all together. Online defragmentation is an automated defragmentation process that runs on a schedule. With online defragmentation the physical size of the database is not reduced. Offline defragmentation is just the opposite of online. Offline defragmentation is used to shrink the database size by removing the unused spaces. 3. What factors must be considered and planned to implement a successful Disaster Recovery Plan for a network using Active Directory?
A couple factors that should be considered are how long it will take to run the recovery, what information will need to be recovered and who will all be affected. 4. List and define four types of disasters than can occur to an Active Directory infrastructure. What strategies could be implemented if these disasters occurred?
Four types of disasters that could occur can include Database corruption, Data corruption, Domain controller hardware failure and also human error. The strategy I would use to fix these disasters would be to restore them from backup or completely reinstall them. 5. Define the Reliability and Performance Monitor. Explain the relationship between performance objects and performance counters.
The reliability and performance monitor is a MMC snap-in that makes older standalone tools useable all in one place. It also gives a graphical user interface for customizing performance data information. A performance object is what collects the data from the pieces of hardware that the computer utilizes like the memory and processor. A performance monitor comes built into the operating system but it is possible to have some programs install their own. Performance counters are built into the performance monitor. Performance counters represent data on specific parts of the system.

Similar Documents

Free Essay

Active Directory

...Active Directory Scenario: The small business that you created new domain controllers for now wants you to develop a backup and recovery plan for Active Directory. You also need to develop a monitoring scheme to ensure the new Active Directory environment remains available. Explain this backup and recovery plan along with the tools needed to monitor the active directory environment. Submission Requirements: Submit your response in a 1-2 page Microsoft Word document through the Questa Learning Plan. Evaluation Criteria: Your instructor will use the following points for evaluating your performance in this assessment: * Did you discuss a backup strategy or Active Directory? * Did you discuss a recovery plan for Active Directory? * Did you discuss a monitoring scheme for Active Directory? Windows Server Backup provides several Group Policy settings that give you some limited control over how backups work on your servers. With these backup policies, you can mitigate some of the risks associated with people performing unauthorized backups to obtain access to unauthorized data. The options include: Allow Only System Backup If this is set, Windows Server Backup can only back up critical system volumes. It cannot perform volume backups. Disallow Locally Attached Storage as Backup Target When enabled, this setting does not allow backups to locally attached drives. You can only back up to a network share. Disallow Network as Backup Target This setting does not...

Words: 297 - Pages: 2

Premium Essay

Nt1330: Week 5 Essay

...Samuele Padalino Week 5 Essay Backing up Active Directory If you lose your Active Directory, you lose everything. Your Windows domain will stop working shortly after losing the Active Directory. The only way to prevent losing your Active Directory and Windows domain is by backing up the Active Directory. Every domain controller has a full copy of the directory and the ability to modify it. To ensure the safety of your active directory, you need to back up any one of the domain controllers. But if you want to be able to restore any domain controller, you’ll have to back them all up. To back up the Active Directory means to capture the System State, this is a collection of system-specific data that includes the Active Directory database and related log and transaction files, Registry, COM+ configuration information, boot files, the SYSVOL system volume, certificate information, and a few other system files. There is a free utility tool provided by Microsoft in Windows 2008. The backup tools will be able to capture a System State. But you have to keep the backup software in a different location than the domain controller in order to easily restore it. To recover the Active Directory you can use the ntdsutil snapshot command to create snapshots of the Active Directory database. By scheduling a task to periodically create snapshots, you can obtain additional copies of the Active Directory database over time. You can use these copies to better identify when the forest-wide failure...

Words: 388 - Pages: 2

Premium Essay

Windows Server Proposal for Worldwide Advertising Inc. solution.  I will be covering infrastructure server roles such as:  DHCP and DNS, which work behind the scenes, to the application servers which give life to your advertising dreams.  I have prescribed an active directory schema that will require effortless management. I have proposed a File and Sharing implementation that suites a growing enterprise as well as state of the art data storage. I have also noted some preliminary estimates of scheduling and manpower required for the solution. Deployment and Server Edition             Throughout the infrastructure the most advanced server operating system, Windows Server 2008 R2, will be used. Enterprise edition will be leveraged on all servers, because it has 4 virtual licenses per OS. To increase reliability and security Server Core will be on all servers. There will be a total of 10 servers for the Worldwide Advertising Inc. internal network. The majority of the servers will be managed from the Los Angeles main office while four servers will be located at the New York branch. All 35 desktops will run Windows Vista Service Pack 1 for its’ operability with the network and specifically Terminal Services Web Access. Thirty terminals will be utilized to satisfy the current employees’ needs, and five desktops for backup. (Zacker, 2009)  All servers and operating systems will be installed using image files remotely from a master...

Words: 2342 - Pages: 10

Premium Essay

Client Server 2 Final Exam Study Guide

...Workstation settings 12. What zone would a DNS server may have? Primary zone 13. What is in a forward/reverse lookup zone? Primary,secondary, and stud 14. If you have a IP based on name, what type of zone is it? Reverse lookup zone 15. If you have Server 2008 with DS role is has? Domain controller 16. If you have domain controller, what is the process called for keeping it up to date? Replication 17. The “read only” domain controller holds this file? NTDS.Dit 18. Distinguished name includes the entire name (whole hierarchal structure). 19. Dc promo.exe makes the wizard to make server a domain controller. 20. What is the minimum numory requirement for active directory? 200 MB 21. Application directory partitions are used to divide forest wide DNS info from Domain wide info. 22. How often the intersight replication occurs? Every 15 minutes 23. In order...

Words: 654 - Pages: 3

Premium Essay

Server Questions set? 1.       automatic private IP address 2.       fixed IP address 3.       static IP address 4.       none of the above ques 6:- What is the minimum number of physical computers required to allow you to use a KMS key? 1.       20 Vista and ten Windows Server 2008 computers 2.       20 Vista and five Windows Server 2008 computers 3.       15 Vista and ten Windows Server 2008 computers 4.       25 Vista and five Windows Server 2008 computers Ques 7:- A striped volume uses which type of striping to interleave data across the disks? 1.       Raid 6 2.       Raid 4 3.       Raid 0 4.       Raid 5 Ques 8:- A computer running Server Core will allow you to launch which of the following consoles? 1.       Computer Management 2.       Active Directory Users and Computer 3.       Windows Registry Editor 4.       None of the above Ques 9:- BOOTP enables a TCP/IP workstation to retrieve settings for all of the...

Words: 4583 - Pages: 19

Free Essay

Nt1330 Unit 10 Exercises

...Unit 10 In Class Assignment AD Trouble Shooting and Backup 1. What is extensible storage engine (ESE) Also known as JET Blue, is an ISAM (Indexed Sequential Access Method) data storage technology from Microsoft. How does it work? It’s purpose is to allow applications to store and retrieve data via indexed and sequential access. Numerous Windows components take advantage of ESE, such as desktop and directory. Source: Source: 2. Does Active directory offer any fault tolerance, if so what kind? Yes.  In any Active Directory deployment, more than one server with the Active Directory Domain Services role deployed is recommended for fault tolerance. In fact, at least two Domain Controllers are recommended as a best practice for every Domain deployed in an Active Directory forest. The reason for this is to ensure that more than one server exists at any given time with a copy of the Active Directory database. Source: best-practices/ Yes. For fault tolerance, you should always deploy new domains with at least two domain controllers. If you only have a single domain controller for a given domain and the domain controller fails...

Words: 918 - Pages: 4

Free Essay

Active Directory

...To back up Active Directory, you must install the Windows Server Backup feature from the Server Manager console. To perform backups from the command line, you will also need to install Windows PowerShell. Windows Server Backup supports the use of the disk drives as backup destinations. Windows Server 2008 supports two types of backup: • Manual backup: This type of backup can be initiated by using Server Backup or the Wbadmin.exe command-line tool when a backup is needed. You must be a member of the Administrators group or the Backup Operators group to launch a manual backup. • Scheduled backup: Members of the local Administrators group can schedule backups using the Windows Server Backup utility or the Wbadmin.exe command-line tool. Scheduled backups will reformat the desired drive that hosts the backup files, and can only be performed on a local physical drive that does not have any critical volumes. With all this taken into consideration I would perform a manual backup every time a major change is taking place and then use a scheduled backup every month to make sure every small change is saved and is not over looked. When a domain has multiple domain controllers, the Active Directory database is replicated within each domain controller. Windows Server 2008 allows several different restoration methods, depending on the goals for your restore. Wbadmin, is the command-line component of the Windows Server Backup snap-in, which restores a single Active Directory domain controller...

Words: 423 - Pages: 2

Free Essay

Week 4 – Active Directory Design Scenario

...Week 4 – Active Directory Design Scenario Since the two new braches office will be directly connected to main office you can configure hub and spoke topology. I would also recommend in hub site to have minimum two DC for redundancy. In the event of failure if second DC does not exist irrespective of OS version AD replication will be down totally. At least in the hub site you should have additional DC if not present. Branch 1 – For this site I would recommend setting up another line to the main hub to remove single point of failure. Also setting a backup for branch 1 located at main site and if possible at branch 2. A two way trust will need to be set up to support backup at main site/branch 2 if servers fail at branch 1. To support AD replication I would use two way trust network. Branch 2 – With branch 2 being located at a remote site I would recommend setting a VSAT system to remove the single point of failure. With the slow speed at this branch it would not make for a very good backup site. I would use two way trusts for replication of services. *Recommendations for Optimum Performance For Active Directory replication, a rule of thumb is that a given domain controller that acts as a bridgehead server should not have more than 50 active simultaneous replication connections at any given time in a replication window. (This was determined on a reference server that had four Pentium III Xeon processors with 2 gigabytes (GB) of RAM and 2 megabytes (MB) of L2 cache.) Adjusting...

Words: 683 - Pages: 3

Free Essay

Fault Tolerance Disaster Recovery

...”(Witt, 2009) In the event the system does fail either by, disk failures, administrative errors, natural disasters, or unauthorized changes to data, a recovery plan must be in place to minimize downtime. In the scenario as described for Kudler Fine Foods, there would be a backup drive at each location, where daily backups of data will take place and those backups will be stored on a tape drive that way information is not lost at any time and stored offsite. The files would be stored off site in the event there is a natural disaster or fire or some other catastrophic event to take place that actually destroys the servers and hard drives, the tape drives being stored offsite preserves the data once a new server is in place. Data redundancy is a key aspect to recovering from such system failures. In the case of restoring Active Directory Directory Services in the event of data loss or system failure, there are several utilities within Active Directory that can assist with the recovery of system settings: * Windows includes the very basic NTBACKUP utility, which can be used to perform a system state backup of a DC. The system state of a domain controller includes its registry, SYSVOL, Active Directory DIT files, and critical system files. *...

Words: 486 - Pages: 2

Free Essay

Active Directory Domain Services

...that you created new domain controllers for now wants you to develop a backup and recovery plan for Active Directory. You also need to develop a monitoring scheme to ensure the new Active Directory environment remains available. Explain this backup and recovery plan along with the tools needed to monitor the active directory environment. Active Directory domain services are a crucial and vital component for a windows workplace. Any failure can result in serious damages. Failure from corruption can result in being unable to log in and the inability to access data from the directory database. To back up Active Directory, you must install the Windows Server Backup feature from the Server Manager console. At a minimum, we need to back up two domain controllers in each domain, one of which should be an operations master role holder (excluding the relative ID (RID) master, which should not be restored). A good backup includes at least the system state and the contents of the system disk. Backing up the system disk ensures that all the required system files and folders are present so you can successfully restore the data. Restoring Active Directory can be done using the Windows Server Backup utility as well. A non-authoritative restore returns the domain controller to its state at the time of backup, then allows normal replication to overwrite that state with any changes that have occurred after the backup was taken. After you restore the system state, the domain controller queries...

Words: 412 - Pages: 2

Premium Essay

Unit Exercises

...Jason Wells NT 1230 Unit 8 Assignment 2 Active Directory Benefits Multimaster replication and sites One of the benefits of an Active Directory environment is the concept of sites and multimaster replication. In Windows NT, when you make a change to the SAM (Security Accounts Manager), the change is applied directly to the PDC (Primary Domain Controller) and is later replicated to each BDC (Backup Domain Controller). In an Active Directory multimaster replication environment, each domain controller contains a copy of Active Directory, not just the information for a single domain. Therefore, when a change is made to Active Directory, the change is applied to whatever domain controller is the closest, and is then replicated to the remaining domain controllers. This prevents a designated PDC (Primary Domain Controller) from being overburdened. A better representation of the network Centralization sums up a primary reason for implementing Active Directory. The Active Directory structure makes it possible for you to achieve truly centralized management of users, regardless of how big the client’s network has become. In Windows NT a domain is a completely independent entity, and while it's possible to create a trust relationship between domains that exist on a common network, the domains are never truly integrated with each other because there is no higher authority that manages the domains. With Active Directory, this is possible. Organizational Structure The domain level...

Words: 322 - Pages: 2

Free Essay

Dns Scenario

...The best location is going to be at the branches that need to utilize active directory services on a regular basis. These locations will benefit the most from having access to a domain controller with DNS services. It is important to note that Domain members will consistently utilize the DNS services to access domain resources. When the computer boots it will try to find a Domain controller to authenticate using the DNS serves. If there is not an instance of DNS created within the system then this process will traverse the site link. The site link could be very slow causing a longer boot time for that workstation and decreased productivity. Also if the site links cease to function on a network that doesn’t have an instance of DNS then the users will not be able to access the internet at all. For the small branch office with only 5 computers the authentication credentials can be accessed from the cached credentials. You will also need to ensure that non-domain DNS servers are available if the site link goes down. This is a solution you could employ if you did not want to set-up a DNS server at the smaller branch. However it would help to create a stable network by having one there as well as provide a backup in case of site link failure. The larger location will definitely need to have its on domain controller and DNS system set-up to ensue that the network will function properly. You can use active directory zones for both locations as well. Regards, IT Admin Aaron...

Words: 296 - Pages: 2

Free Essay

Nt1330 Unit 4 Assignment 1

...NT1330 Unit 4 Assignment 1. AD Design Replication Scenario AD Design Replication Scenario To whom it may concern: I am the IT Administrator for the company and I have been asked to give my recommendations for the Active Directory Replication Design of the two new Branches. The first I can recommend for you is that all the information that is needed for each new site is correctly documented and added to the Root Active Directory through the Active Directory sites and services. This is done because the Root AD automatically builds the inter-site replication topology based on the information provided about the new site connections. Each new site’s AD will have one each domain controller that is known as the inter-site topology generator and they are assigned to build the topology at their sites. To add two new branch offices we will need to find a strategy to design a replication process. To implement this we will need to use inter-site replication. Inter-site replication is needed when adding domain controllers located in different sites. We will also need a site link (Site link is a logical, transitive connection between two sites that allows replication to occur) protocol of Remote Procedure Call (RPC) over Internet Protocol (IP) which is the preferred choice for the replication process. This allows you to communicate with network services on various computers and also keep data secure when being transmitted by using both encryption and authentication...

Words: 580 - Pages: 3

Free Essay


...distributed Active Directory service and the services that it relies upon helps maintain consistent directory data and the needed level of service throughout the forest. You can monitor important indicators to discover and resolve minor problems before they develop into potentially lengthy service out Benefits for End-Users Monitoring Active Directory helps resolve issues in a timely manner, and users experience the following benefits: * Improved reliability of productivity applications that rely on back-end servers, such as e-mail. * Quicker logon time and more reliable resource usage. * Decreased help desk support issues Monitoring Active Directory also assures administrators that: * All necessary services that support Active Directory are running on each domain controller. * Data is consistent across all domain controllers and end-to-end replication completes in accordance with your service level agreements. * Lightweight Directory Access Protocol (LDAP) queries respond quickly. * Domain controllers do not experience high CPU usage. * The central monitoring console collects all events that can adversely affect Active Directory. Even if you are doing full backups, Windows Server Backup provides some great space efficiencies on the target disks. For instance, you might perform multiple full backups of the same volume. Since Windows Server Backup uses Volume Shadow Copy Service snapshots on the target disks where it stores the backup images,...

Words: 269 - Pages: 2

Free Essay

Nt 1330 Unit 10 Exercise

...Table: Active Directory Troubleshooting Tools Tool | Location | Function | Active Directory Domains and Trusts snap-in | Windows Server 2003 Administrative Tools Pack | Administer domain trusts, add user principal name suffixes, and change the domain mode. | Active Directory Sites and Services snap-in | Windows Server 2003 Administrative Tools Pack | Administer the replication of directory data. | Active Directory Users and Computers snap-in | Windows Server 2003 Administrative Tools Pack | Administer and publish information in the directory. | Active Directory Service Interfaces (ADSI) Edit snap-in | Windows Server 2003 Support Tools | View, modify, and set access control lists (ACLs) on objects in the directory. | Backup Wizard | Windows Server 2003 operating system tool | Back up and restore data. | Control Panel | Windows Server 2003 | View and modify computer, application, and network settings. | Dcdiag.exe | Windows Server 2003 Support Tools and Windows Server 2003 Server Resource Kit | Analyze the state of domain controllers in a forest or enterprise; assist in troubleshooting. | DNS snap-in | Windows Server 2003 Administrative Tools Pack | Manage DNS. | Dsastat.exe | Windows Server 2003 Support Tools | Compare directory information on domain controllers and detect differences. | Event viewer | Windows Server 2003 Administrative Tools Pack | Monitor events recorded in event logs. | Ldp.exe | Windows Server 2003 Support Tools | Perform Lightweight...

Words: 602 - Pages: 3