Contents Overview 1 Recovering from Disasters in a Windows 2000 Network 2 Repairing a Network Server 3 Restoring Active Directory 10 Restoring Active Directory Objects 12 Rebuilding a Network Server 15 Lab A: Implementing Disaster Recovery for Active Directory and Windows 2000 16 Best Practices 24 Review 25 Module 10: Implementing Disaster Recovery Information in this document is subject to change without notice. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Complying with all applicable copyright laws is the responsibility of the user. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation. If, however, your only means of access is electronic, permission to print one copy is hereby granted. Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property. ??1999 Microsoft Corporation. All rights reserved. Microsoft, Active Directory, PowerPoint, and Windows are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A. and/or other countries. The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted. Other product and company names mentioned herein may be the trademarks of their respective owners. Project Lead and Instructional Designer: Mark Johnson Instructional Designers : Aneetinder Chowdhry (NIIT Inc.), Kathryn Yusi (Independent Contractor) Lead Program Manager: Ryan Calafato Program Manager: Joern Wettern (Wettern Network Solutions) Graphic Artist: Julie Stone (Independent Contractor) Editing Manager: Tina Tsiakalis Substantive Editor: Kelly Baker (Write Stuff) Copy Editor: Wendy Cleary (S&T OnSite) Online Program Manager: Nikki McCormick Online Support: Arlo Emerson (MacTemps) Compact Disc Testing: Data Dimensions, Inc. Production Support: Arlene Rubin (S&T OnSite) Manufacturing Manager: Bo Galford Manufacturing Support: Mimi Dukes (S&T OnSite) Lead Product Manager, Development Services: Elaine Nuerenberg Lead Product Manager: Sandy Alto Group Product Manager: Robert Stewart Module 10: Implementing Disaster Recovery iii Introduction This module provides students with the knowledge and skills to repair member servers and domain controllers and recover data if a network disaster should occur. Students will learn how to use advanced startup options and the Recovery Console. Students will also learn how to restore Active Directory ™ directory service and specific Active Directory objects. In the hands-on lab in this module, students will perform recovery procedures on servers. They will install the Recovery Console and use it to repair a system file. They will restore the system state data on a domain controller (which includes Active Directory). Students will also restore specific Active Directory objects by performing an authoritative restore. Materials and Preparation This section provides you with the materials and preparation needed to teach this module. Materials To teach this module, you need the following materials: ?? Microsoft® PowerPoint® file 1558A_10.ppt Preparation To prepare for this module, you should: ?? Read all the materials for this module. ?? Complete the lab. ?? Study the review questions and prepare alternative answers to discuss. ?? Anticipate questions that students may ask. Write out the questions and provide the answers. ?? Review Appendix F, Recovery Console Commands, on the Student Materials compact disc Presentation: 45 Minutes Lab: 45 Minutes iv Module 10: Implementing Disaster Recovery Module Strategy Use the following strategy to present this module: ?? Recovering from Disasters in a Windows 2000 Network In this topic, you will introduce the methods for disaster recovery in a Microsoft Windows® 2000 network, including a high-level overview of the different types of recovery that can occur. Emphasize the importance of quickly recovering from disasters so that network resources are always available. ?? Repairing a Network Server In this topic, you will explain the different methods to use to repair a server, including a domain controller. First, present information on advanced startup options. Emphasize that advanced startup options disable certain parts of Windows 2000 so that an administrator can bypass a problem and start Windows 2000. When presenting the options and their descriptions, be sure also to present the reasons that an administrator would select a particular option. Next, present information on the Recovery Console. Emphasize that it is a minimal version of Windows 2000 that also contains the command that an administrator can use to repair servers. If time permits, start the Recovery Console and show students the commands. Finally, present information on the system state data. Emphasize that it defines the configuration of the operating system on a computer. ?? Restoring Active Directory In this topic, present information on restoring Active Directory on a domain controller. Mention that when you restore the system state data, you restore Active Directory and the Sysvol folder. Emphasize that Active Directory cannot be running when you restore Active Directory files. ?? Restoring Active Directory Objects In this topic, present information on restoring individual Active Directory objects. First, present information on an authoritative restore. Define it and explain how it is used. Emphasize that by marking Active Directory objects as authoritative, the objects are assigned the highest update sequence number (USN) in Active Directory. Next, present the steps for performing an authoritative restore. Emphasize that an administrator must not restart the domain controller after restoring the system state data and before starting Ntdutil.exe. If an administrator did restart the domain controller, replication would probably change the object just restored. ?? Rebuilding a Network Server In this topic, present the method for rebuilding a network server. This topic provides a checklist to organize the different steps required for rebuilding a server. Different courses in the Microsoft Official Curriculum (MOC) present the detailed content for these steps. These courses include course 1556A, Administering Microsoft Windows 2000, course 1557A, Installing and Configuring Microsoft Windows 2000, and this course, 1558A, Advanced Administration for Microsoft Windows 2000. Module 10: Implementing Disaster Recovery v ?? Lab A: Implementing Disaster Recovery for Active Directory and Windows 2000 Prepare students for the lab in which they will install and use a Recovery Console, restore the system state data on a domain controller, and perform an authoritative restore. Make sure that students run the command file for the lab, and tell them that they will work with their partners’ computers. After students have completed the lab, ask them whether they have any questions. ?? Best Practices Present best practices for implementing disaster recovery. vi Module 10: Implementing Disaster Recovery Customization Information This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs. This information is provided to assist you in replicating or customizing MOC courseware. The labs in this module are also dependent on the classroom configuration that is specified in the Customization Information section at the end of the Classroom Setup Guide for course 1558A, Advanced Administration for Windows 2000. Lab Setup The following list describes the setup requirements for the labs in this module. Setup Requirement 1 The labs in this module require a Shipping organizational unit (OU) and several Active Directory objects in it. To prepare student computers to meet this requirement, perform one of the following actions: ?? Run C:\MOC\Win1558A\Labfiles\Lab10\Setup\Lab1001.cmd. ?? Create the OU manually, and then create some objects in it. Lab Results Performing the labs in this module will install the Windows 2000 Recovery Console on student computers. You can run C:\MOC\Win1558A\Labfiles\Lab10\Setup\Lab10Rm.cmd to remove most configuration changes introduced during the labs in the module. To remove the Recovery Console, delete the Cmdcons folder and edit C:\Boot.ini to remove the line that refers to the Recovery Console. Important Important Module 10: Implementing Disaster Recovery 1 Overview ? Recovering from Disasters in a Windows 2000 Network ? Repairing a Network Server ? Restoring Active Directory ? Restoring Active Directory Objects ? Rebuilding a Network Server ? Best Practices Disaster recovery involves the efforts by administrators to reduce the time that a computer is nonfunctional in the event of a network disaster. Network disasters can be caused by power outages, virus attacks, fires, and hardware and software failures. A nonfunctioning server or domain controller is particularly damaging to your organization because your network resources, including Active Directory ™ directory service, reside on them. Microsoft® Windows® 2000 provides you with alternative methods for starting network computers that you are unable to start by using the normal methods, as well as the means to repair servers and restore critical system data after startup. At the end of this module, you will be able to: ?? Identify the methods that Windows 2000 provides to help you recover from network disasters. ?? Repair a network server, including a domain controller. ?? Restore Active Directory by restoring the system state data for a domain controller. ?? Restore Active Directory objects by performing an authoritative restore. ?? Identify the steps for rebuilding a network server. ?? Apply best practices for implementing disaster recovery. Slide Objective To provide an overview of the module topics and objectives. Lead-in In this module, you will learn about techniques in Windows 2000 for recovering from system failure and minimizing the impact of system failure on your network. 2 Module 10: Implementing Disaster Recovery Recovering from Disasters in a Windows 2000 Network Rebuild a Server Rebuild a Server Rebuild a Server Format FormatFormat Data Data Repair a Server Repair a Server Repair a Server Advanced Startup Options Advanced Startup Options Recovery Console Recovery Console Restoring System State Data Restoring System State Data Restore Active Directory Restore Active DirectoryRestore Active Directory Restore Active Directory Objects Restore Active Restore Active Directory ObjectsDirectory Objects OU OU OU OU When member servers and domain controllers do not function because of hardware or software problems, users may not be able to gain access to needed resources or log on to the network. Windows 2000 provides the following methods to ensure that your network computers can function in the event of a network disaster: ?? Repair a server. When a server does not start properly, Windows 2000 provides you with two methods for restarting and repairing it. These methods include the advanced startup options (which allow you to start Windows 2000 so that you can repair it) and the Recovery Console (which allows you to start and repair Windows 2000). Windows 2000 also provides you with the ability to restore the system state data (the configuration information for a computer) by using Windows Backup. ?? Restore Active Directory. When Active Directory is corrupted or deleted, Windows 2000 provides you with the ability to restore the entire Active Directory, as it is part of the system state data. ?? Restore Active Directory objects. When Active Directory objects are changed or deleted, Windows 2000 provides you with the ability to restore individual Active Directory objects from a backup. ?? Rebuild a server. When hardware or software problems prevent a member server or domain controller from starting or running Windows 2000, you can completely rebuild the computer and restore Windows 2000 it to its previous functioning state. This includes setting up the hard disk and reinstalling the operating system, its configuration, and its lost data. Slide Objective To explain the different tasks that an administrator can perform to recover from a network disaster. Lead-in Windows 2000 minimizes downtime for network computers and the resources that reside on them by providing you with the capability to recover from the different types of network disasters that may occur in your network. Do not go into detail on this topic, because the content will be covered in following topics. Module 10: Implementing Disaster Recovery 3 ? Repairing a Network Server ? Using Advanced Startup Options ? Using the Recovery Console ? Using Windows Backup to Restore the System State Data You need to repair a failed server that does not start as soon as possible so that the resources stored on the server are not lost or made unavailable to users for extended periods. Any downtime caused by a failed server reduces the productivity of your organization. Windows 2000 provides several methods and utilities to repair a failed server, including the use of alternative startup methods when a normal startup fails. Slide Objective To introduce the topics related to repairing a network server. Lead-in If you are unable to start a network server, Windows 2000 provides you with the means to start the server and then repair the server so that critical resources are not lost or made unavailable for an extended period. 4 Module 10: Implementing Disaster Recovery Using Advanced Startup Options Option Option Option Description Description Description Enable Boot Logging Enable Boot Logging Creates a log file that references the device driver and system services Creates a log file that references the device driver and system services Safe Mode Safe Mode Loads basic services and drivers Loads basic services and drivers Safe Mode with Networking Safe Mode with Networking Enables networking and loads basic services and drivers Enables networking and loads basic services and drivers Safe Mode with Command Prompt Safe Mode with Command Prompt Starts a command prompt instead of the graphical user interface and loads basic services and drivers Starts a command prompt instead of the graphical user interface and loads basic services and drivers Enable VGA Mode Enable VGA Mode Loads the basic VGA driver Loads the basic VGA driver Last Known Good Configuration Last Known Good Configuration Uses the last good configuration to start the computer Uses the last good configuration to start the computer Directory Services Restore Mode Directory Services Restore Mode Allows you to start Windows 2000 on a domain controller without starting Active Directory Allows you to start Windows 2000 on a domain controller without starting Active Directory Debugging Mode Debugging Mode Sends debugging information to another computer Sends debugging information to another computer F8 The Windows 2000 advanced startup options are a collection of alternate startup methods that you can use to start a server (including a domain controller) when a startup fails. You can use an advanced startup option to disable that part of the operating system that is preventing Windows 2000 from starting. After you start Windows 2000, you can then repair the problem. To display the advanced startup options, press F8 when Windows 2000 displays the boot loader menu during startup (which prompts you to select an operating system). The following table describes each Windows 2000 advanced startup option and when to select a specific option. Option Description Select when Enable Boot Logging Creates a log file that references all of the device drivers and system services that the system loads (or does not load). This log file (Ntbtlog.txt) is located in the systemroot folder (by default, C:\Winnt). You can start Windows 2000, but problems occur during startup. Reviewing this log file will help you diagnose startup problems. Safe Mode Loads only the basic services and drivers that are required to start the computer, including the mouse, keyboard, mass storage device drivers, base video, and the standard, default set of system services. This allows you to bypass nonessential services and drivers. This option also creates a Ntbtlog.txt log file. A nonessential service or driver does not function correctly and prevents Windows 2000 from starting. Slide Objective To describe the different advanced startup options. Lead-in If you cannot start a server running Windows 2000 Server normally, you can use one of the advanced startup options to start the server so that you can repair the problem. Discuss the advanced startup options. Be sure to explain to students when to use each option. Mention to students that they will be able to use the advanced startup options in the lab. Key Points Each advanced startup option disables specific parts of Windows 2000. By disabling a particular part of the operating system, an administrator can bypass a problem and start Windows 2000. After Windows 2000 starts, the administrator can repair the problem. The Ntbtlog.txt file is a log file that can be created by using different advanced startup options. [...]... for you to log on using a user account in Active Directory 6 Module 10: Implementing Disaster Recovery Using the Recovery Console Slide Objective To explain what the Recovery Console is and when to use it ? The Recovery Console: ? Lead-in If you cannot start Windows 2000 normally or by using the advanced startup options, then you can use the Recovery Console ? Is a minimal version of the Windows 2000... Administration for Microsoft Windows 2000, Student Materials compact disc Module 10: Implementing Disaster Recovery 7 Installing the Recovery Console You install the Recovery Console from a Windows 2000 compact disc You should install the Recovery Console before you need to use it so that it is on the hard disk when you need it To install the Recovery Console, perform the following steps: 1 Start a command... 45 minutes Module 10: Implementing Disaster Recovery Exercise 1 Installing the Windows 2000 Recovery Console Scenario You want to be prepared to resolve problems that may prevent Windows 2000 from starting You decide to install the Recovery Console now so that you can easily troubleshoot startup problems when they occur Your Task Your task is to install the Recovery Console ?? install the Recovery Console... box appears, providing you with information about the Recovery Console 4 Click Yes to install the Recovery Console 5 After Windows 2000 Setup finishes installing the Recovery Console on your computer, click OK to close the Windows 2000 Advanced Server Setup dialog box 17 18 Module 10: Implementing Disaster Recovery Exercise 2 Using the Windows 2000 Recovery Console Scenario After installing a new hardware... server For information on how to back up and restore configuration information and data for these applications, refer to the documentation for the server applications 16 Module 10: Implementing Disaster Recovery Lab A: Implementing Disaster Recovery for Active Directory and Windows 2000 Slide Objective To introduce the lab Lead-in In this lab, you will repair a server, restore Active Directory, and restore... it after a disaster First you restore the operating system, and then while it is running, you restore the data In addition, if the partition that contains data becomes damaged, you do not have to shut down the server to restore the operating system Module 10: Implementing Disaster Recovery 25 Review Slide Objective To reinforce module objectives by reviewing key points ? Recovering from Disasters in... For information about performing backups and restores on computers, see module 10, “Backing Up and Restoring Data,” in course 1556A, Administering Microsoft Windows 2000 To restore the system state data on a domain controller, you must use the Directory Services Restore Mode advanced startup option Module 10: Implementing Disaster Recovery To restore system state data on a computer other than a domain... restarts 11 To confirm that the problem has been resolved, log on as Administrator@domain.nwtraders.msft Module 10: Implementing Disaster Recovery 19 Exercise 3 Backing Up the System State Data Scenario You want to be prepared to restore your computers’ system configuration, including Active Directory, if a disaster occurs To be able to restore the most recent version of the system configuration, you back... 4 Close all windows, and log off 24 Module 10: Implementing Disaster Recovery Best Practices Slide Objective To present best practices for recovering from system failure and minimizing the impact of system failure on your network Back Up the System State Data Frequently Back Up the System State Data Frequently Lead-in Review this checklist before you implement disaster protection Change the Administrator’s... that resides in the local user account database on the domain controller Note that this administrator account is the same one used to log to a domain controller when using the Recovery Console Module 10: Implementing Disaster Recovery 4 Use Windows Backup to restore the latest system state data 5 Restart the domain controller After the computer restarts, Windows 2000 performs consistency checks, initializes . 15 Lab A: Implementing Disaster Recovery for Active Directory and Windows 2000 16 Best Practices 24 Review 25 Module 10: Implementing Disaster Recovery. Administration for Microsoft Windows 2000. Module 10: Implementing Disaster Recovery v ?? Lab A: Implementing Disaster Recovery for Active Directory and Windows