Ripristino funzionalità AD in caso di ripristino DC da Snapshot o backup

Passaggi in caso di “How to detect and recover from a USN rollback in Windows Server 2003, Windows Server 2008, and Windows Server 2008 R2”.

Primo:

Collegarsi sul DC primario ed eseguire: (http://exchangeserverpro.com/recovering-a-single-domain-controller-from-a-usn-rollback/)

Open Regedit

Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

Locate the key “Dsa Not Writable”=dword:00000004

Delete the entire key

Enable replication by running repadmin /options servername -DISABLE_OUTBOUND_REPL and repadmin /options servername -DISABLE_INBOUND_REPL

Reboot

Secondo:

sempre sul DC primario impostare il BurFlags su D4 :

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup

In the right pane, double click BurFlags.

In the Edit DWORD Value dialog box, type D4 and then click OK.

Quit Registry Editor, and then switch to the Command box.

In the Command box, type net start ntfrs.

Terzo:

Ripristinare le default Domanin Policy e DC :

dcgpofix /ignoreschema /target:both

Quarto: (http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/ActiveDirectory/WhatIsStrictReplicationandHowDoYouEnable.html)

Porto a 0 il Strict Replication Consistency

KEY Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters

Registry Entry: Strict Replication Consistency

Value: 1 (enabled), 0 (disabled)

Type: REG_DWORD

In my case these changes didn't resolve the problem:

1. Stop FRS.

2. Start Registry Editor (Regedt32.exe).

3. Locate and click the following key in the registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters

4. On the Edit menu, click Add Value, and then add the following registry value:

Value name: Enable Journal Wrap Automatic Restore

Data type: REG_DWORD

Radix: Hexadecimal

Value data: 1 (Default 0)

5. Quit Registry Editor.

6. Restart FRS.