Active Directory 2003

[razizul]

I have question. I have 1 Active Directory (AD) with DNS. If this AD failed, I don’t have any backup for this server. What the best option do I need a cluster server or need to migration?

[Igor Karasik]

The best option is to create additional Domain controller server which will hold AD.
Install DNS server on this additional server too, use DNS ActiveDirectory integrated zone

[razizul]

Thanks Igor. I install AD and DNS in same server. We facing a problem when we investigate the AD infected with virus. We afraid we lost the AD server and donâ t have any backup. I donâ t know with the best option, do I need make a cluster or migration.

[Igor Karasik]

You do not need cluster
Just install second Domain controller as I wrote before
http://anothersysadmin.wordpress.com/2007/07/27/quasi-high-availability-for-windows-2003-active-directorydns/


P.S. Since you are new on this forum read:
http://forums1.itrc.hp.com/service/forums/helptips.do?#22

[Peter Turek]

Is this Windows 2003 Small Business server? These have special considerations and are painful to work with (migrations etc).

Always take a system state backup on Domain controllers as that allows you to restore the directory in case of serious trouble.

You could also export your directory with csvde or other tools and import the accounts etc back into a new domain if all else failed.

As the other poster pointed out, if possible, it's best to create another domain controller and just move FSMO roles to it as needed or move all roles and remove the old DC if it's unrecoverable.

[tulcak]

Thanks for the information on AD!  There is so little info on this (which surprises me).  Can you point me to HP documentation on this.  I've been searching for hours and cannot find anything!