Shulou(Shulou.com)06/03 Report--

In the environment of multi-domain controller, the primary domain controller is suddenly damaged due to hardware failure, and there is no backup in advance, how to make the extra domain controller take over its work and make the Active Directory run normally, and how to restore the damaged primary domain controller after the hardware is repaired.

Treatment method:

Clear the primary domain controller object from AD

Perform five capturing FMSO operations through the ntdsutil.exe tool on additional domain controllers

Set the extra domain controller to GC (global catalog)

Reinstall and restore damaged primary domain controller

View the commands of the five roles: netdom query fsmo

Delete useless primary domain control:

1. Domain Super Admin account (administrator) must be used

two。 Administrative tools-- active directory sites and services-- find the bad domain control server-- delete all content in NTDS Settings-- delete server sites

3. Open active Directory and computer-- domain controllers-- removes the broken primary domain control computer.

Use Ntdsutil to compete for roles

Use the command line tool ntdsutil on essBDC to compete for RID master. Disconnect the network connection from the essDC. The simulated ess failed.

To compete for the operation master role using the ntdsutil command, perform the following steps:

1. Type cmd in the run text box and press enter.

two。 At the command prompt, type ntdsutil.

3. At the ntdsutil prompt, type roles.

4. At the fsmo maintenance prompt, type connections.

5. At the server connections prompt, type connect to server essBDC.ess.com.

6. At the server connections prompt, type quit.

7. At the fsmo maintenance prompt, enter?, enter, and you can see the commands available at that prompt.

8. At the fsmo maintenance prompt, type one of the following commands to compete for the appropriate operational master:

Seize RID master

Seize PDC

Seize schema master

Seize infrastructure master

Seize naming master

Please note that there are two methods: Seize and Transfer. If the owner of the original FSMO role is offline, use Seize, and if you are online, use Transfer. Here, since the primary domain E-copa is offline, use "Seize"

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.