574 - ESE: Restoring a domain controller with a Windows Image Backup using WSB / Wbadmin

Background

When using a Windows Image Backup, the restore of a domain controller must be run from a different mode within Windows, and requires additional steps.

To restore:

1) Install Windows 2008 on your recovery machine.
2) Install the ESE Agent.
3) Reconnect to your backup account using the Agent.
4) To restore from the Windows Image Backup, certain features are required. Run the Add Features wizard and ensure that Windows PowerShell, Windows Server Backup and Command-line Tools are checked. Then complete the Add Features wizard.

5) Select the system state data to restore. This will appear in the root of a volume as WindowsImageBackup.

6) Restore the data to its original location, or another volume root location (e.g. if it was originally on Z:\WindowsImageBackup, restoring to E:\ is fine).

7) To function as a domain controller, at a minimum the DNS and Active Directory domain services must be installed before restoring the system state. Use the Add Roles wizard to install both services, and any other Active Directory services you require.

Note: DNS and ADDS cannot be installed at the same time, so run the wizard twice to install these roles.

8) Run the command dcpromo from the command prompt to start the Active Directory domain services installation wizard. This installs the additional software components needed by a domain controller.

9) You will also need to create a new domain. Enter any details, as these will be overwritten by the restore process.

10) Set the forest functional level as appropriate, although this will also be overwritten by the restore process. You will be prevented from configuring further options, as the server is considered the first in the forest. Click Next to continue.

11) You may encounter warning messages concerning dynamic IP addresses and DNS. If so, click Yes to continue.

12) Select the location for the database, log files and SYSVOL.

13) Create a Directory Services Restore Mode (DSRM) administrator password. Record it somewhere safe, and click Next to continue.

14) Click Finish to complete the wizard and reboot as prompted.

15) To restore Active Directory, a system state recovery must be run from Directory Services Restore Mode. In the Start menu, navigate to Administrative Tools > System Configuration.

16) On the Boot tab, enable Safe Boot and select Active Directory repair. Click OK, and you will be prompted to restart. If the WindowsImageBackup folder has restored to disk, restart the machine in Safe Mode (which functions as DSRM).

Note: DSRM can also be entered by pressing F8 on startup and selecting the appropriate option.

17) Log in using the administrator account with the DSRM administrator password.

18) In DSRM, navigate to the WindowsImageBackup folder and open a command prompt window with adminstrative privileges.

Note: If restoring to a location different from the one used during backup, the original Dump destination will be name of the folder on the new drive. For example: Dump destination volume Z: restored to volume F: will result in F:\Z_\WindowsImageBackup. After restoring, the WIB folder needs to be moved to the root of the restore location. For example: F:\WindowsImageBackup

19) Determine the correct version name of the backup to be restored by listing the versions contained in the backup. Open a command prompt window and run the following command:

wbadmin get versions -backupTarget:E:

where "backupTarget" is the drive letter containing the WindowsImageBackup folder.

20) Switch to the drive containing the WindowsImageBackup folder (in this example, the E: drive). Run the following command with the version identifier from the previous step:

wbadmin start systemstaterecovery -version:03/16/2010-17:30 -backupTarget:E:

where "backupTarget" is the drive letter containing the WindowsImageBackup folder and "versions" is for the version identifier.

21) Confirm that you wish to start the restore process by pressing Y.

22) System state restore may advise you that you are not restoring to the original machine. You may also be warned that the recovery option will cause all replicated content to resynchronise after recovery. Press Y to continue in both cases.

23) The Wbadmin system state restore process may take several moments. When it completes, it will advise you to restart. Do not restart yet. There is an additional step to be completed.

24) Open System Configuration and disable Safe Mode. Click OK and restart as prompted. (Note: This is not necessary if you pressed F8 to enter DSRM mode).

25) After restarting, log in to the domain using the administrator account.

26) When prompted, press Enter to continue the recovery.

27) You should now restart the machine to allow some Active Directory details to reload.
28) Log in again and open Windows Services. Select Active Directory Domain Services and restart the service. You will be prompted to restart the dependent services. Click Yes to confirm this.

29) Open Active Directory Users and Computers. You may encounter an error message that the domain does not exist, or could not be contacted. Click OK and select Change Domain... from the file menu.

30) Browse to your domain and select it. Click OK. Then select Save the domain setting for the current console and click OK again.

31) Active Directory is now restored and can be administered as normal.

Note: Further configuration of Active Directory may be required, e.g, you may need to transfer the operations masters' roles after the restore.