How to perform a non-authoritative and authoritative AD restore on Windows Server 2012 R2

[@veeranmatmari1340]

One of the best videos has ever seen !!! Great Job If possible, please try to show through GUI as well, It would be helpful for us...

[@alejandrokassimatis1741]

Best and brief explanation i ever seen! Thanks

[@jingrichie2610]

Hey man, that's really a brief and just working video! helpful a lot. thanks for your effort.

[@NLBSolutions]

Hi Jing, thank you for the nice words!

[@santhanamarim7975]

good video.everthing is clear now.thanks for your valuable time..

[@NLBSolutions]

No thank you for your time watching my content. Much appreciated santhanamari!

[@user-jk4hd8df4d]

I like your video and your presentation style not to fast not too slow very clear, good format and you mix it in with some powershell, Bravo sir, I would show both though, show the powershell and the GUI method please, (for future ref)

[@jatindersandhu82]

Thanks a lot for such a nice and well explain the concept.

[@NLBSolutions]

Thank you for the support, Jatinder!

[@abhijithrajabey6531]

Thank you for making such a good video.... Helped me a lot...

[@NLBSolutions]

Thank you, Abhijith!

[@niaz.shovon]

This could be a good example of how to make a simple task complex! Why I need to mess with that powershell thing where I could use a Windows backup GUI? A simple check mark would make it authoritative in there.

[@martinkrabowski2057]

without powershell you are lost. what does an checkmark tell you? nothing. but an return string of an powershell command tells you what realy happened. gui does not give you any proof. and everything is bases on powershell now. including server manager role install etc.

[@niaz.shovon]

@@martinkrabowski2057 no I'm totally fine with the check marks.

[@aaweshaminsayyed1722]

very nice video.. only the voice speed is slow.. hence I set the speed of the video to 1.5x n it was fine.. thanks for such a nice videos.. very nicely done.. :)

[@NLBSolutions]

Thank you, Aawesh! I wonder how I sound in 1.5x, but very nice way to get more information in less time!

[@aaweshaminsayyed1722]

you are welcome! actually I like it that way :)

[@NLBSolutions]

I guess you are a fast learner :)

[@aaweshaminsayyed1722]

yeah.. i am :) Thanks

[@veeranmatmari1340]

scenario-based video, superb !!!!

[@abhimanyusinghshekhawat6871]

Good Video but some correction need to be done at the end. Authoritative restore will increase the Version number by (how many days old backup)*100000, it doesn't change the USN. There might be some coincidence so that you see the USN to be increased by 100000. you can test it using forward the date by some days and than perform restore.

[@NLBSolutions]

Hi abhimanyu, interesting point you have there. Although you are right for the Version number incremental I will have to check for the USN number and the backup days. Thank you for this information, you learn something new every day!

[@abhimanyusinghshekhawat6871]

The below article would be helpful, Please go through it once: blogs.msdn.microsoft.com/richpec/2011/10/06/the-authoritative-restore-explained/

[@NLBSolutions]

This is actually great! Thank you abhimanyu! Reading from the article - One point to note is that the version increase default is 100,000 versions per day since the last time a change was committed to the database (not since the last backup). This version increase is a default value and can be manipulated using the verinc parameter during the authoritative restore.

[@saurav123saha]

Really one of the best videos. Can you please explain how to boot into DSRM if the DC is running in Azure.

[@preetamsalve6256]

Appreciate Your efforts. This was certainly helpful. Happy computing.!

[@NLBSolutions]

Thank you for your support.

[@chaituchaitanya8796]

Good video. Got information on DSRM

[@gancrzgancrz]

you should also run the back link file after your restore. run ldifde -i -f and your ldf file. which will restore your backlink. meaning you would have explict permission for some of groups and exchange attributes that would be restored.

[@beikselect]

Very useful video , am so glad to see it . i have quick quistion , can use restore from Recycle bin also ? ( from AD administrative center, then right click on domain name then Recycle Bin ) ?

[@lakshmidp2766]

Very helpful video. Thanks for your time!

[@AzureADTalk]

Great explanation you have done in this video, i did enjoy watching this video.

[@NLBSolutions]

+Abhay Kumar Thank you ! I am happy that it can help you !

[@sarthak3443]

Awesome video...one question though..if you make the primary as authoritative but if you try to replicate from other or secondary dc will the change be reflected in the primary one?

[@trial000000000000001]

Very Informative. Thank you. Just one thing is confusing me. Why did you perform non-authoritative restore in the first place?

[@vyellajyosula]

I believe he wants to demonstrate both Authoritative and Non-Authoritative.

[@Slayerbros8]

you saved me with this video thank you.

[@RahulChauhan-ow7mj]

Nice job Sir, I need the video about item-level targeting gpo

[@krish7618]

Awesome explaination.. Good .. Thank you

[@ITVOIP]

Good stuff!

[@Oleole56]

Thanks for this really informative video!

[@josephchitwood1374]

Great video! Thank you for the information!

[@NLBSolutions]

Thank you for the support, Joseph!

[@Feed2Brain]

nice, it's very clear with lab.

[@dkkrish09]

Nice Job!! Sir..And i need the video about how to fix the patches,hotfixes and drivers..monitoring the mcafee antivirus in server basic..can u pls share it if it is possible sir!!

[@NLBSolutions]

Thank you, Dinesh! Patches can be easily controlled with a WSUS server, and this is a thing I am looking to create. Hotfixes and drivers on the other hand depend on the environment that you have. In most IT nowadays servers are consolidated into virtual machines and the drivers are not really applicable, except for the underlying hypervisor. Working with Macafee or any other 3rd party anti-virus tools is a bit out of scope of this channel. But in the future, I can definitely look into securing the environment, so stay tuned.

[@weedee77]

Great video man. Thank you

[@505bhargav]

nice explanation

[@NLBSolutions]

Thank you, mancham!

[@user-nc9sx9jk6e]

Very helpfull and informative. Thanks a lot man!

[@SZM6262]

You are doing good JOB , best video Thanks a lot.

[@NLBSolutions]

Thank you very much for your support !

[@Hari-ed5es]

Thank you brother!

[@NLBSolutions]

Thank you for the support, Hariharan.

[@techsupportline5019]

What's the point in using the powershell commands as well as putting the system into Safe mode when the windows server itself has a built-in Restore feature? Why making things too complicated?

[@vivekprajapati7911]

Nice Job!! Sir.. thanks a lot...

[@fawazsahyouni8622]

dear all i had a Power problem with the main 2012 R2 AD DC and i had to do the recovery after i fix the power supply on it >>> now i had this problem .... (This server is the owner of the following FSMO role, but does not consider it valid. For the partition which contains the FSMO, this server has not replicated successfully with any of its partners since this server has been restarted. Replication errors are preventing validation of this role) and the other one ... (The DFS Replication service stopped replication on the folder with the following local path: C:\Windows\SYSVOL\domain. This server has been disconnected from other partners for 71 days, which is longer than the time allowed by the MaxOfflineTimeInDays parameter (60). DFS Replication considers the data in this folder to be stale, and this server will not replicate the folder until this error is corrected) ... nothing work on it any idea to get it back to work as a main domain controller

[@pg4694]

Can this not be done simply thrigh ADAC and we can restore deleted object in same state

[@mohammedasifkhanp5032]

this is the great one.

[@harshadrathod454]

Great Vedio ! thanks for sharing

[@NLBSolutions]

Thank you for the support, Harshad!

[@karthickk1990]

Awesome video ! so helpful ....thanks a lot.............

[@NLBSolutions]

Thank you for the support, karthickk!

[@harbinger200]

great job man

[@NLBSolutions]

Thank you harbinger!

[@aurimaspaulauskas5613]

NIce video, all clearly explained

[@NLBSolutions]

Thank you Aurimas!

[@Boychev87]

Good job !

[@NLBSolutions]

+Tsvetan Boychev Thank you !

[@skutsenkow]

Nice video! Question - If you have the Active Directory Recycle Bin enabled, is there any reason to do a non-authoritative/authoritative restore anymore? Are there any use cases you can think where you would still do that?

[@NLBSolutions]

Hi Steven, depends on the actual environment. If you have a single Domain Controller (not really recommended) and it goes corrupt you will need to restore it using alternative methods.

[@1robertone]

Nice Work !!!

[@DMarcus7114]

Subscribed, good vid very helpful.

[@NLBSolutions]

Thank you. Much appreciated.

[@kumaresans4077]

Nice job! I had a question. If it's a multi site domain . One of the OU is deleted or AD Database is corrupted in the DC. So what is the probability. All site receive the replication and become the major domain failure or else? . If yes that time which will help to recover the DC's in all site?

[@NLBSolutions]

Hi Kumaresan, few things that can be done to prevent such problems: 1. OU deleted - make sure you have Prevent from accidental deletion tick box enabled on all OUs. If this scenario happens for some reason you have few options: 1. If you find our that the OU is deleted prior to full Inter-site replication, you can stop the replication between the sites. Use one of the Domain Controllers in the site with the present OU and make an authoritative restore on that OU. It should bring it back to the DCs with the missing OU. 2 If you have full replication, you need to restore the OU on one of the DCs and make it authoritative again. Or use AD Recycle Bin if it is enabled. 2. AD Corruption - this should be a trouble one. In most cases you again should move fast to isolate the affected DCs from the network. Make a normal restore on them and leave them to replicate the changes from the other Domain Controllers.

[@jele75]

How about AD forest restoration where all entire forest gone?

[@SivaKumar-xu3dd]

its very good

[@NLBSolutions]

Thank you Siva!

[@jjhatnm]

thanks!

[@NLBSolutions]

No problems, Jason!

[@jibbyjohn4749]

hi thanks need the link for exchange server by you friend Johnny

[@Nareshmanam458]

How to perform non authoritative restore?

[@c-jay8500]

[@timsamanchi3004]

Useful but painfully slow. it took you 12minutes to describe what Authoritative and none Authoritative are. 5 minutes just to delete an OU. you do like the sound of your voice.

[@tanyagonzalez9685]

Stop charging me for a service I don't need. I'm westing my time, writing you because you are not going to publicize my comment!!!