|
Home > Archive > 70-217 > May 2002 > Is troytech bullshit?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Is troytech bullshit?
|
|
|
| I have troitech 70-217 and they say, to perform authoritative backup, after and non-auth. DO NOT restart windows, run ntdsutli
As MS Press and Cramsession, they say, after non-autho. restart then run get in restore mode run ntdsutli!!!
I think troytech is having something very wrong here???? | |
| CyberDude 2002-05-21, 3:22 am |
| You only use the ntdsutil when you want to perform an Authoritative backup (although the ntdsutil can also be used for other purposes as wll).
Restart in Directory Services Restore Mode, and login via this modes password (as you will remember you had to provide a password during dcpromo). Restore your data from whatever media you backed it up to. Once that is completed say no when asked if you want to resstart. Then execute ntdsutil and select the correct syntax for whatever you want to become authoritative. Once that has been successful, you will be prompted to restart. Do so, and your system should be up to date.
A non-authoritative restore is basically the same, except that once you have finished running the restore from you back-up media, say yes to restart.  | |
| Slinky 2002-05-21, 6:47 pm |
| No BS here. You must run NTDSUTIL before you restart the server, but after you perform the Non-authoritative restore, just like Cyberdude said. Make sure you understand the differences between the two. You will see this on the exam, and it is critical to know. | |
|
| I still dont think so!
Here is what MS Press say:
To authoritatively restore Active Directory
Perform a nonauthoritative restore as described previously.
Restart the computer.
During the phase of startup where the operating system is normally selected, press F8.
On the Windows 2000 Advanced Startup Options Menu, select Directory Services Restore Mode and press Enter. This ensures that the domain controller is offline and is not connected to the network.
Select Windows 2000 Server.
Log on as Administrator.
On the Desktop message box that warns you that Windows is running in Safe Mode, click OK.
Point to Start, point to Programs, point to Accessories, then select Command Prompt.
At the command prompt, type NTDSutil and press Enter.
At the NTDSUTIL prompt, type authoritative restore and press Enter.
At the authoritative restore prompt:
To authoritatively restore the entire directory, type restore database and press Enter.
To authoritatively restore a portion or subtree of the directory, such as an OU, use the OU's distinguished name, type restore subtree <subtree distinguished name> and press Enter.
AND here is what Troytech say:
An authoritative restore is performed immediately after a nonauthoritative restore and
designates the information that is authoritative. A value of 100,000 is added to the Property
Version number of every object on the domain controller. This ensures the objects on this
domain controller will overwrite the copies of these objects on other domain controllers. To
perform an authoritative restore, perform the standard restore procedure, but do not allow the
domain controller to reboot at the end of the procedure.Click No to bypass the restart
option, then close Backup. From a command prompt, type Ntdsutil. From the Ntdsutil:
prompt, type Authoritative Restore. Then type Restore Database. | |
| Slinky 2002-05-22, 12:38 pm |
| I wholeheartedly disagree. The NTDSUTIL MUST be used BEFORE you restart the server.
To authoritatively restore Active Directory data, you need to run the Ntdsutil utility after you have restored the System State data but before you restart the server. The Ntdsutil utility lets you mark Active Directory objects for authoritative restore. When an object is marked for authoritative restore its update sequence number is changed so that it is higher than any other update sequence number in the Active Directory replication system. This will ensure that any replicated or distributed data that you restore is properly replicated or distributed throughout your organization. | |
| CyberDude 2002-05-22, 2:07 pm |
| Go with Slinky and I. I use New Riders and I have tried it out at home, so it does work. Are you getting hands on, or are you just going to try and pass by reading? | |
| Slinky 2002-05-22, 5:35 pm |
| I see what you are talking about now. It is on page 386 of the MCSE Training Kit for 70-217. It does in fact say restart the computer after performing a non-authoritative restore and then do NTDSUTIL.
BUT, on page 382 it says "To authoritatively restore Active Directory data, you must run the NTDSUTIL utility after you have performed a nonauthoritative restore of the System State data but before you restart the server." This is conflicting information.
Disregard what it says about restarting, as this is not correct. Like we said before, do NTDSUTIL before you restart. Try it and you will see. | |
| Slinky 2002-05-22, 5:59 pm |
| quote:
Originally posted by CyberDude
Go with Slinky and I. I use New Riders and I have tried it out at home, so it does work. Are you getting hands on, or are you just going to try and pass by reading?
He seems to be trying to get hands on because this is in the "How to" section. Unfortunately this is incorrect. | |
| CyberDude 2002-05-23, 2:18 am |
| If I had found one way the book says does not work, I would try the other one. But, saying that, he looks to be very cautious which is a good thing during studies and real life. Me, I normally jump in with both feet, and then look for help after evrything I have tried has gone wrong.
One thing I have found with testing the authoritative restore, is that you need another DC. New Riders book says to test it:
Create a test object and wait for replication. Backup system state and then delete test object and restart in directory services restore mode. Enter admin pasword (remember though that this is not the regular admin password, but the one created for DSRM). Restore system state and say no to restart. Execute ntdsutil and choose the deleted test object for the syntax. When you run this syntax, the dc will look at the the other dc's db and say that it has found so many records. When the process has finished, restart and check the domain. | |
|
|
|
| Well, I refer to W2k resource kit, they still say that, the reason I didn't try is I dont have a pilot LAn to test!
I think it's OK to not restart because the inside process it just running Ntdsulti to set the verinc so it may does not matter you restart or not because you are still in offline mode (Restore mode) But it wont hurt to perform a restart like what MS say!
However, if you think you do not have to restart, where did you read that????
Nice to discuss in this forum, this may the best I have found!
Quy | |
| UKboy 2002-05-27, 10:56 am |
| I love this brainstorming environment! Excellent!
I'm glad to see you are really studying and putting in the foundation work and not just counting on the troytech material.
Once you have passed let us know how well the troytech supported the exam...let us know if it is truly bullshit or not bullshit. I'm curious.
Good Luck! | |
| Slinky 2002-05-27, 11:01 am |
| On page 452 of the "Distributed Systems Guide", it also says that you must use the NTDSUTIL before you restart the server. I see your point though, it shouldn't matter. It was never explained to me why you have to do that before you restart. So I just go by what I read, and every source says that. | |
|
| Very happy to have this discuss!
I dont have a hard copy version of W2k Reskit so dont know what page is this but here is what I copy form it:
Then after the restore operation finishes — but before reconnecting to the network — carry out the Ntdsutil commands for authoritative restore.
To authoritatively restore Active Directory
Perform nonauthoritative restore of Active Directory, and then restart the computer. During the phase of startup where the operating system is normally selected, press F8 to display advanced startup options. In the Windows 2000 Advanced Options menu, select Directory Services Restore Mode. This ensures that the domain controller is offline and is not connected to the network.
Quy | |
| Slinky 2002-05-28, 9:50 pm |
| Thats not what my Resource kit says.  About all I can say more is try it, and see if it works. Let us know also. | |
|
| OK! I'll try it at work!Btw, my Reskit is Eletronic version in .CHM format! From MS Companion CD! |
|
|
|
|