What to do if AD is dead?

Question

Active Directory

I have not encountered such a situation myself, but sometimes it comes in a bad dream. Actions for deploying a park of lonely destitute computers in a new AD?) Plus, I wonder who backups this case and where you can read about it . I'll clarify
. It has always been easier for me to backup virtual machines. =)

Answer 1

I will say that the best CD backup is another CD, further down the chain. Resources allow - deploy more. For example: I never keep 1 CD and always on different "carriers" (meaning either another physical machine or another virtual machine, on another carrier)
At the moment: on ~ 60 workstations - I have 3 domain controllers. Due to the complexity in authorization, in the process of starting the entire infrastructure (for example, after turning off the power of all equipment), I plan to raise 4 CDs.
Now imagine: you have "EVERYTHING", as you say. In that case - to restore - there is nothing.
As far as I remember, restoring a CD, even from a snapshot of a virtual machine, is a catastrophic problem, and then with the condition that there are still live CDs on the network. Therefore, snapshots to Wirth. machines for CD - do not use. Because it's useless.
Regarding the "other backup" - use software solutions that allow you to copy directory data, but again, they will only help if you have a live directory into which you can deploy some kind of "package of archived data".
Nonsense about a domain with "similar parameters, credentials, etc." are left behind in the past. A twisted version that could be used as nothing more than a crutch. Now it doesn't work and shouldn't work. Each account, be it a user account or a machine account, is a unique id - and not "login-password" text data, so nothing "identical" can be created.
I recommend carefully! see what all this stuff is in the ADSI editor (adsiedit) and MOST IMPORTANTLY! Get to know more about the mechanism of how AD works, if you want to work with it for "you". Try to start with Microsoft MVA . free, informative.
And drink a sedative at night so that you don’t dream of horrors :)

Answer 2

Welcome to workgroup, son!!! =)

Answer 3

a long time ago, when vin2003 was still in vogue, I had a CD. user cars entered the domain, authorization of users in the domain, etc. So, I set the CD from scratch. The user logged in from his computer for the first time for a long time, but everything went off with a bang. Slave table, docks - everything was in place. Well, the second CD, yes, is needed