Windows Server 2003及Active Directory的除錯及災難回復 (M )

Size: px

Start display at page:

Download "Windows Server 2003及Active Directory的除錯及災難回復 (M050103403)"

供康
9 years ago
Views:

1 4 Active Directory 易度易 1. Windows Server Windows XP 3. Windows Media Service 劉路 M /01/21 不狀不更不不 CPU 不不不不狀了更 DC( ) DC 更來 DC 不不 Active Directory 不來 Active Directory 念識復更 DC 狀不路理狀了不理來不句說行劉劉路立龍念林龍鈴行瑩李行劉劉行行 [email protected] 律 1

DC( ) DC 更來 DC 不不 Active Directory 不來 Active Directory 念識復更 DC 狀不路理

2 1. 不不 ( ) 不 ( 例 ) 裡來錄 2. 了不 ( ) 狀 (Cluster) 句樂了不便來兩不來說力 ( 來便了 ) 例 2

3 CPU 不復不復來了立念料不了 ( System Partition) ( Boot Partition) ( 例 C:\Program files\) (Mirrored RAID 1) 兩 Mirrored 料兩料不了不讀 Mirrored 來料率 50% ( 1) 讀 Mirrored Partition 不料料 RAID 5 Volume 來料不料度更料便來 3 SCSI 率來不列 (Disk Array) 了 ( 了 ) 3

$C:\Program files\) (Mirrored RAID 1) 兩 Mirrored 料兩料不了不讀$

4 裡料不念 5. 狀料 (system state data) 來便復行狀料了錄 (Registry) Active Directory 料料了復靈 (ASR Backup) 來了 ( ) 不兩狀 ASR Backup 了來 ASR Backup ASR Restore 不不念立復立 2 2 狀料 (System State data) 復 (Recovery Console) (installation CD) 易理了念 1. 利 Administrators Backup Operators Server Operators 料利料讀利料 2. 類 (ntbackup.exe) 類量異類來 Mark( ) 來不 Mark( ) 量更 Mark( ) 異更不 Mark( ) 更不 Mark( ) 什 Mark( ) 來立來了便 Mark( ) 便錄 Mark( ) 行了量 Mark( ) 裡滑 ( 2) 便 Mark( ) 4

來 ASR Backup ASR Restore 不不念立復立 2 2 狀料 (System State data) 復 (Recovery Console) (installation CD) 易理了念 1.

5 2 3. 見見念兩讀參量 ( 3) 3 異 ( 4) 4 5

6 4. Active Directory Database 狀料了 Active Directory Database Active Directory Database 狀料狀料狀料 -- Registry Boot files, including the system files System files that are under Windows File Protection Active Directory directory service DC( ) SYSVOL Directory DC( ) Certificate Services database CA IIS metadirectory IIS Service Cluster service information cluster 行不行 DC Active Directory 料 DC 行 Active Directory Database 例 Root Domain Child Domain( 5) Active Directory Database Root Domain Child Domain DC System State Data 5 見狀來 Mary 理數更更弄了復來狀? 復 6

Services database CA IIS metadirectory IIS Service Cluster service information cluster 行不行 DC Active Directory 料 DC 行 Active Directory

7 復更來 %systemroot%\system32\reinstallbackups\0000 (0000 數 ) 料復 ( 6) 便裡來復復例 1.0 更 2.0 更 3.0 復 Mary 理了 ( Service ) Configuration 不狀? LaskKnow Good Configuration 來不更 Configuration 復復更 Lastknow Good Configuration F8 3. 良 (Lastknow Good Configuration) 7

0 6 Mary 理了 ( Service ) Configuration 不狀?

8 了什 Lastknow Good Configuration 類來 Windows Server 2003 行 Configuration Lastknow Good Configuration 行 Configuration 了不 F8 良 ( Lastknow Good Configuration) 來便 Mary 理了便 Mary 不 Mary 狀? 了復 Lastknow Good 8

9 Configuration Safe Mode Safe Mode F8 3. (Safe Mode) Mary 理 (Boot Sector)? Recovery Console 來烈 Recovery Console 來行 E:\i386\winnt32.exe /cmdcons(e:) Recovery Console 來 Recovery Console 行 Recovery Console R Recovery Console 復 Boot Sector Recovery Console fixboot 令 Mary 理 Mary ASR 復? ASR 不復 ASR 1. 復靈 2. ASR 來行 ASR 3. ASR 來例 ( 不 USB ASR 不 USB ) 了行 ASR ASR F2 ASR 4. ASR 5. 來 6. 行行行 ASR 行 7. 狀六 Mary 理 Server1 (Mirror) Mary 9

exe /cmdcons(e:) Recovery Console 來 Recovery Console 行 Recovery Console R Recovery Console 復 Boot Sector

10 Mary Server1 復? (Moiiored) 立裡兩 Disk0 Disk1 Disk1 不 Disk0 1. BIOS Disk1 2. JUMP Disk1 Disk0 3. Disk0 行裡 NTLDR Boot.ini NTDETECT.COM 3. Bootfont.bin 4. Boot.ini ARC path 列 rdisk(0) rdisk(1) 了 multi(0)disk( 0 )rdisk(0)partition(1)\windows (DC) 不不念 (Domain) (DC, Domain Controller) DC Active Directory Database 2 DC NT4.0 ( ) PDC BDC Windows 2000 DC 了 5 不不 FSMO Windows 2000 DC Multiple Master Replication DC Active Directory Database Read/Write DC 5 DC ( ) 3. ( 不 ) DC SID 識 FSMO DC 5 了 1. Schema Master() Forest 2. Domain Naming Master() Forest 3. PDC Emulator(PDC ) Domain 4. RID Master(RID ) Domain 5. Infrastructure Master( ) Domain 10

$ini ARC path 列 rdisk(0) rdisk(1) 了 multi(0)disk( 0 )rdisk(0)partition(1)\windows (DC) 不不念 (Domain) (DC, Domain Controller) DC Active Directory Database 2 DC NT4.$

11 Schema Master Schema 料 Forest 1 Root Domain 1 DC 力 Schema Admins Schema ( Regsvr32 schmmgmt.dll ) mmc Active Directory 理 Schema 料 Forest DC Forest 行 Forest 1 Root Domain 1 DC 力 Enterprise Admins Active Directory PDC Windows 2000 (NT4.0) PDC (GPO) Domain 1 Domain 1 DC 力 Domain Admins Active Directory RID RID DC (object) SID Domain 1 Domain 1 DC 力 Domain Admins Active Directory GC Domain 1 Domain 1 DC 力 Domain Admins Active Directory 11

12 (DC) 見狀 Mary 路理理 DC 了來 Mary 來了來 (DC) Mary 行 DC? 1. 行 DCPROMO 令 DC 2. 行 DCPROMO 令降降 member Server 降 5 切 Mary 路理理 DC 8:00pm DC System State data 不 Jack user Object 了 Jack User Object 來? 狀 DC System State Data( 了 Active Directory Database) 了行 Active Directory Database 1. DC F8 2. 錄 3. 錄理 4. (ntbackup.exe) 行 System state data 5. Mary 路理理 2 DC 8:00pm DC System State data DC1 不 Jack user Object 了 Jack User Object 來? 狀 2 DC DC 5 Active Directory Database 5 DC Active Directory Database 1. DC1 F8 2. 錄 3. 錄理 4. (ntbackup.exe) 行 System state data 5. 不 6. 令 7. 令 ntdsutil ntdsutil: Authoritative restore Authoritative restore: Restore object cn=jack,ou=sales,dc=nwtraders,dc=com 12

狀 DC System State Data( 了 Active Directory Database) 了行 Active Directory Database 1. DC F8 2. 錄 3. 錄理 4. (ntbackup.exe) 行 System state data 5.

13 Authoritative restore: quit ntdsutil: quit 8. 什 System state data 行 DC2 DC1 DC1 行 Active Directory Database 60 Mary 路理理 DC Mary 來了 DC 5 FSMO (DC) 行? DC 降 member server 行 (safe transfer) Active Directory 來 PDC Emulator, RID master, Infrastructure master Active Directory 來 Domain Naming master Active Directory 來 Schema master 1. 連 DC 2. 更 ( 9) 13

14 9 狀 Mary 路理理 mis.uuu.com 2 DC 1 DC 了 1 DC 3 FSMO 2 DC Mary 行? 1 DC 不 (Seize) 例 ( 10 11) DC2 ntdsutil 令 ntdsutil: Roles fsmo maintenance: Connections server connections: Connect to server DC2 連 DC2... 來連 DC2 server connections:quit fsmo maintenance: Seize PDC PDC FSMO 10 14

maintenance: Connections server connections: Connect to server DC2 連

15 11 狀 Mary 路理理 Root Domain DC 了來 Mary 來了來 (DC) DC 便 DC (Sub Domain) Mary? 狀理 1 DC 不立理行 DC1 不來了裡了 DC 行 (Seize) 行 5 FSMO 來復裡見狀參路理了 (DC) 理更 15 Sam Chen 練 Windows NT/2000/2003 路 ISA Server ExchangeServer 路 IIS