Impact Of Authoritative Restore On Trust Relationships And Network Connections

By Author: kennie
Total Articles: 129
Comment this article

Both parent and child trust relationships in Microsoft exam 70-297 domains and Kerberos and NTLM trust relationships to other Windows domains reside in the domain directory partition. Because trust relationship and computer account passwords are renegotiated at a specified interval, if you authoritatively restore an entire domain directory partition, computer passwords and trust relationship passwords are restored to the values at the time of the backup. If the password values are different from the current values, trust relationships and computer accounts might be invalidated. For trust relationships, domain controllers may no longer be able to communicate with domain controllers from other domains. If an older computer account password is restored, the member's workstation may no longer be able to communicate with the server and the domain controller. If you authoritatively restore objects that affect trust relationships or computer account passwords, you must reset the passwords. Therefore, you should restore only those portions of the domain directory partition that are absolutely ...
... necessary. The more of the domain hierarchy included in the restore, the greater chance that trust relationships are affected.
You restore Active Directory data by performing a nonauthoritative restore (default) or an authoritative restore.
In nonauthoritative restore, the distributed services on a domain free 70-297 test questions controller are restored from backup media and the restored data is then updated through normal replication. Each restored directory partition is updated with that of its replication partners.
An authoritative restore brings a domain or a container back to the state it was in at the time of backup and overwrites all changes made since the backup.
Before you can restore Active Directory, you must ensure that you can access all locations that require the restoration of files, the appropriate device for the storage medium containing the data to be restored is attached to a computer on the network and is turned on, and the medium containing the data to be restored is loaded in the device.
To restore the system state data on a domain controller, you must start your computer in directory sen-ices restore mode. To perform a nonauthoritative restore, use the Backup Or Restore Wizard. To perform an authoritative restore, use the Backup Or Restore Wizard and the Ntdsutil command.
Active Directory Users And Computers Console The Active Directory Users And Com-puters console allows you to add, modify, delete, and organize Windows Server 2003 user accounts, computer accounts, security and distribution groups, and published resources in your organization's directory. It also allows you to manage domain free Microsoft practice tests controllers and organizational units (OUs).