A. You can’t restore Active Directory (AD) to a domain controller (DC) while the Directory Service (DS) is running. To restore AD, perform the following steps.
- Reboot the computer.
- At the boot menu, select Windows 2000 Server. Don’t press Enter. Instead, press F8 for advanced options. You’ll see the following text.
OS Loader V5.0
Windows NT Advanced Options Menu
Please select an option:
Safe Mode
Safe Mode with Networking
Safe Mode with Command Prompt
Enable Boot Logging
Enable VGA Mode
Last Known Good Configuration
Directory Services Restore Mode (Windows NT domain controllers only)
Debugging Mode
Use | and | to move the highlight to your choice.
Press Enter to choose.
- Scroll down, and select Directory Services Restore Mode (Windows NT domain controllers only).
- Press Enter.
- When you return to the Windows 2000 Server boot menu, press Enter. At the bottom of the screen, you’ll see in red text Directory Services Restore Mode (Windows NT domain controllers only).
The computer will boot into a special safe mode and won’t start the DS. Be aware that during this time the machine won’t act as a DC and won’t perform functions such as authentication.
- Start NT Backup.
- Select the Restore tab.
- Select the backup media, and select System State.
- Click Start Restore.
- Click OK in the confirmation dialog box.
After you restore the backup, reboot the computer and start in normal mode to use the restored information. The computer might hang after the restore completes; I’ve experienced a 30-minute wait on some machines.
*You have left out the following steps that must be performed after the restore*
After the data has been restored, use Ntdsutil.exe to perform the authoritative restore:
At a command prompt, type ntdsutil, and then press ENTER.
Type authoritative restore and then press ENTER.
Type restore database, press ENTER, click OK, and then click Yes.
David Rokich October 24, 2000