Running NTDSUTIL in Directory Services Restore mode - should be connected or NOT connected to the network?

[Spin]

Gurus,

I have been studying Windows Server 2003. Say you have an operations master
which is off-line due to a lengthy hardware failure, such as the Schema
Master, and you want to seize that role onto another DC. Two questions:

1) To seize the role, one needs to restart a DC in Directory Services
Restore mode and run NTDSUTIL, correct?
2) And when one runs NTDSUTIL on the DC in Directory Services Restore mode,
should the DC itself be connected or NOT connected to the network?

[Miha Pihler]

Hi,

There is no need to go to Directory Services Restore mode for this task. You
also want to be on-line with DC. The DC on which you will perform operation
master seizure will first try to transfer the role. Since it won't be able
to contact DC that had this roles till now, it will seize them (one at the
time as you put in the commands) and notify any other DC running in
domain/forest.

Mike


"Spin" <Spin@spin.com> wrote in message news:2kqs6lF5aaeuU1@uni-berlin.de...

> Gurus,
>
> I have been studying Windows Server 2003. Say you have an operations
> master
> which is off-line due to a lengthy hardware failure, such as the Schema
> Master, and you want to seize that role onto another DC. Two questions:
>
> 1) To seize the role, one needs to restart a DC in Directory Services
> Restore mode and run NTDSUTIL, correct?
> 2) And when one runs NTDSUTIL on the DC in Directory Services Restore
> mode,
> should the DC itself be connected or NOT connected to the network?
>
>

[Spin]

And I take it one does not need to use NTDSUTIL either, correct?

"Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:%23p14dzeYEHA.716@TK2MSFTNGP11.phx.gbl...

> Hi,
>
> There is no need to go to Directory Services Restore mode for this task.

You

> also want to be on-line with DC. The DC on which you will perform

operation

> master seizure will first try to transfer the role. Since it won't be able
> to contact DC that had this roles till now, it will seize them (one at the
> time as you put in the commands) and notify any other DC running in
> domain/forest.
>
> Mike
>
>
> "Spin" <Spin@spin.com> wrote in message

news:2kqs6lF5aaeuU1@uni-berlin.de...

> > Gurus,
> >
> > I have been studying Windows Server 2003. Say you have an operations
> > master
> > which is off-line due to a lengthy hardware failure, such as the Schema
> > Master, and you want to seize that role onto another DC. Two questions:
> >
> > 1) To seize the role, one needs to restart a DC in Directory Services
> > Restore mode and run NTDSUTIL, correct?
> > 2) And when one runs NTDSUTIL on the DC in Directory Services Restore
> > mode,
> > should the DC itself be connected or NOT connected to the network?
> >
> >

>
>

[Miha Pihler]

Wrong again. I guess you will have to study harder ;-)

Mike

"Spin" <Spin@spin.com> wrote in message news:2kqv7lF54k2iU1@uni-berlin.de...

> And I take it one does not need to use NTDSUTIL either, correct?
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:%23p14dzeYEHA.716@TK2MSFTNGP11.phx.gbl...

>> Hi,
>>
>> There is no need to go to Directory Services Restore mode for this task.

> You

>> also want to be on-line with DC. The DC on which you will perform

> operation

>> master seizure will first try to transfer the role. Since it won't be
>> able
>> to contact DC that had this roles till now, it will seize them (one at
>> the
>> time as you put in the commands) and notify any other DC running in
>> domain/forest.
>>
>> Mike
>>
>>
>> "Spin" <Spin@spin.com> wrote in message

> news:2kqs6lF5aaeuU1@uni-berlin.de...

>> > Gurus,
>> >
>> > I have been studying Windows Server 2003. Say you have an operations
>> > master
>> > which is off-line due to a lengthy hardware failure, such as the Schema
>> > Master, and you want to seize that role onto another DC. Two
>> > questions:
>> >
>> > 1) To seize the role, one needs to restart a DC in Directory Services
>> > Restore mode and run NTDSUTIL, correct?
>> > 2) And when one runs NTDSUTIL on the DC in Directory Services Restore
>> > mode,
>> > should the DC itself be connected or NOT connected to the network?
>> >
>> >

>>
>>

>
>

[Spin]

Yeah, you can use AD GUI utilities for that!!

"Miha Pihler" <mihap-news@atlantis.si> wrote in message
news:uk4OxLfYEHA.2016@TK2MSFTNGP09.phx.gbl...

> Wrong again. I guess you will have to study harder ;-)
>
> Mike
>
> "Spin" <Spin@spin.com> wrote in message

news:2kqv7lF54k2iU1@uni-berlin.de...

> > And I take it one does not need to use NTDSUTIL either, correct?
> >
> > "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> > news:%23p14dzeYEHA.716@TK2MSFTNGP11.phx.gbl...

> >> Hi,
> >>
> >> There is no need to go to Directory Services Restore mode for this

task.

> > You

> >> also want to be on-line with DC. The DC on which you will perform

> > operation

> >> master seizure will first try to transfer the role. Since it won't be
> >> able
> >> to contact DC that had this roles till now, it will seize them (one at
> >> the
> >> time as you put in the commands) and notify any other DC running in
> >> domain/forest.
> >>
> >> Mike
> >>
> >>
> >> "Spin" <Spin@spin.com> wrote in message

> > news:2kqs6lF5aaeuU1@uni-berlin.de...

> >> > Gurus,
> >> >
> >> > I have been studying Windows Server 2003. Say you have an operations
> >> > master
> >> > which is off-line due to a lengthy hardware failure, such as the

Schema

> >> > Master, and you want to seize that role onto another DC. Two
> >> > questions:
> >> >
> >> > 1) To seize the role, one needs to restart a DC in Directory Services
> >> > Restore mode and run NTDSUTIL, correct?
> >> > 2) And when one runs NTDSUTIL on the DC in Directory Services Restore
> >> > mode,
> >> > should the DC itself be connected or NOT connected to the network?
> >> >
> >> >
> >>
> >>

> >
> >

>
>

[Miha Pihler]

Yes, you are right, you can use GUI. Actually you have to use 3 different
ones to transfer 5 roles. Personally I much rather use ntdsutil.

Mike


"Spin" <Spin@spin.com> wrote in message news:2kr0ddF5fd7bU1@uni-berlin.de...

> Yeah, you can use AD GUI utilities for that!!
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:uk4OxLfYEHA.2016@TK2MSFTNGP09.phx.gbl...

>> Wrong again. I guess you will have to study harder ;-)
>>
>> Mike
>>
>> "Spin" <Spin@spin.com> wrote in message

> news:2kqv7lF54k2iU1@uni-berlin.de...

>> > And I take it one does not need to use NTDSUTIL either, correct?
>> >
>> > "Miha Pihler" <mihap-news@atlantis.si> wrote in message
>> > news:%23p14dzeYEHA.716@TK2MSFTNGP11.phx.gbl...
>> >> Hi,
>> >>
>> >> There is no need to go to Directory Services Restore mode for this

> task.

>> > You
>> >> also want to be on-line with DC. The DC on which you will perform
>> > operation
>> >> master seizure will first try to transfer the role. Since it won't be
>> >> able
>> >> to contact DC that had this roles till now, it will seize them (one at
>> >> the
>> >> time as you put in the commands) and notify any other DC running in
>> >> domain/forest.
>> >>
>> >> Mike
>> >>
>> >>
>> >> "Spin" <Spin@spin.com> wrote in message
>> > news:2kqs6lF5aaeuU1@uni-berlin.de...
>> >> > Gurus,
>> >> >
>> >> > I have been studying Windows Server 2003. Say you have an
>> >> > operations
>> >> > master
>> >> > which is off-line due to a lengthy hardware failure, such as the

> Schema

>> >> > Master, and you want to seize that role onto another DC. Two
>> >> > questions:
>> >> >
>> >> > 1) To seize the role, one needs to restart a DC in Directory
>> >> > Services
>> >> > Restore mode and run NTDSUTIL, correct?
>> >> > 2) And when one runs NTDSUTIL on the DC in Directory Services
>> >> > Restore
>> >> > mode,
>> >> > should the DC itself be connected or NOT connected to the network?
>> >> >
>> >> >
>> >>
>> >>
>> >
>> >

>>
>>

>
>

[Mike Brannigan [MSFT]]

"Spin" <Spin@spin.com> wrote in message news:2kqv7lF54k2iU1@uni-berlin.de...

> And I take it one does not need to use NTDSUTIL either, correct?
>

Yes you do need to use the NTDSUTIL command it is this that allows you to
seize the role.
Have a look at al the parameters and options of the ntdsutil command. It has
many uses such as management of the AD files, Operations Master management
and also recover and authoritative restore options.

--

Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

"Spin" <Spin@spin.com> wrote in message news:2kqv7lF54k2iU1@uni-berlin.de...

> And I take it one does not need to use NTDSUTIL either, correct?
>
> "Miha Pihler" <mihap-news@atlantis.si> wrote in message
> news:%23p14dzeYEHA.716@TK2MSFTNGP11.phx.gbl...

> > Hi,
> >
> > There is no need to go to Directory Services Restore mode for this task.

> You

> > also want to be on-line with DC. The DC on which you will perform

> operation

> > master seizure will first try to transfer the role. Since it won't be

able

> > to contact DC that had this roles till now, it will seize them (one at

the

> > time as you put in the commands) and notify any other DC running in
> > domain/forest.
> >
> > Mike
> >
> >
> > "Spin" <Spin@spin.com> wrote in message

> news:2kqs6lF5aaeuU1@uni-berlin.de...

> > > Gurus,
> > >
> > > I have been studying Windows Server 2003. Say you have an operations
> > > master
> > > which is off-line due to a lengthy hardware failure, such as the

Schema

> > > Master, and you want to seize that role onto another DC. Two

questions:

> > >
> > > 1) To seize the role, one needs to restart a DC in Directory Services
> > > Restore mode and run NTDSUTIL, correct?
> > > 2) And when one runs NTDSUTIL on the DC in Directory Services Restore
> > > mode,
> > > should the DC itself be connected or NOT connected to the network?
> > >
> > >

> >
> >

>
>