1. 11 ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY Chapter 11

2. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY2 MAINTAINING ACTIVE DIRECTORY  Active Directory Database.  Managed by Extensible Storage Engine (ESE).  Changes to the database are made as transactions.  Database fragmentation occurs over time.  Active Directory Database.  Managed by Extensible Storage Engine (ESE).  Changes to the database are made as transactions.  Database fragmentation occurs over time.

3. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY3 ACTIVE DIRECTORY TRANSACTIONS

4. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY4 DEFRAGMENTATION  Automatic online defragmentation  Garbage collection process  Tombstone (default life 60 days)  Manual offline defragmentation  F8 – Directory Services Restore mode  Ntdsutil files  Compact to drive:\directory  Replace %systemroot%\ntds\ntds.dit  Automatic online defragmentation  Garbage collection process  Tombstone (default life 60 days)  Manual offline defragmentation  F8 – Directory Services Restore mode  Ntdsutil files  Compact to drive:\directory  Replace %systemroot%\ntds\ntds.dit

5. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY5 MOVING THE ACTIVE DIRECTORY DATABASE

6. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY6 SYSTEM STATE DATA BACKUP

7. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY7 RESTORING SYSTEM STATE DATA  Normal restore  Primary restore  Authoritative restore  Normal restore  Primary restore  Authoritative restore

8. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY8 NORMAL RESTORE PROCESS

9. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY9 PRIMARY RESTORE

10. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY10 AUTHORITATIVE RESTORE

11. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY11 MONITORING ACTIVE DIRECTORY AND FILE REPLICATION  Measurement tool  Gaining a performance baseline  Objects: NTDS and FileReplicaSet  Other benefits  Early warnings to problems  Improved system reliability  Fewer support calls  Improved system performance  Measurement tool  Gaining a performance baseline  Objects: NTDS and FileReplicaSet  Other benefits  Early warnings to problems  Improved system reliability  Fewer support calls  Improved system performance

12. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY12 DIRECTORY SERVICE LOG

13. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY13 FILE REPLICATION SERVICE LOG

14. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY14 SYSTEM MONITOR: NTDS

15. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY15 SYSTEM MONITOR: FILEREPLICASET

16. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY16 DIAGNOSTIC LOGGING

17. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY17 DCDIAG

18. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY18 DSASTAT

19. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY19 REPLMON

20. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY20 REPADMIN

21. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY21 NETDOM

22. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY22 NTDSUTIL

23. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY23 NTFRSUTL

24. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY24 NETDIAG

25. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY25 ADSIEDIT.MSC

26. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY26 LDP.EXE

27. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY27 KERBTRAY.EXE

28. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY28 NLTEST.EXE

29. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY29 DSACLS.EXE

30. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY30 SYSTEM SERVICES  Distributed file system  File replication  Intersite messaging  Kerberos key distribution  Remote procedure call (RPC)  DNS server  Net logon  Windows time  Distributed file system  File replication  Intersite messaging  Kerberos key distribution  Remote procedure call (RPC)  DNS server  Net logon  Windows time

31. Chapter 11: ACTIVE DIRECTORY MAINTENANCE, TROUBLESHOOTING, AND DISASTER RECOVERY31 SUMMARY  Which startup option allows you to perform offline maintenance on the Active Directory database?  Which tool allows you to defragment and compact ntds.dit?  What is the difference between an authoritative restore and a normal restore?  In which tool do you find the option to perform a primary restore?  Which tool allows you to baseline Active Directory performance on NTDS and the FileReplicaSet?  Which startup option allows you to perform offline maintenance on the Active Directory database?  Which tool allows you to defragment and compact ntds.dit?  What is the difference between an authoritative restore and a normal restore?  In which tool do you find the option to perform a primary restore?  Which tool allows you to baseline Active Directory performance on NTDS and the FileReplicaSet?