none
repairing ntds.dit file RRS feed

답변

  • Hello,

    how do you know that it is broken?

    If you have another DC that can take over FSMO roles and you have configured as DNS/GC also then the better solution is demoting and promoting the server as this create a fresh database without any errors from the other existing DC.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
    2011년 5월 9일 월요일 오전 10:49
  • You can use esentutl to repair Active Directory database.

    For more information:

    http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/AdminTips/ActiveDirectory/UseEsentutlwhenNtdsutiltoolfailstorepairtheActiveDirectorydatabase.html

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

     

    • 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
    2011년 5월 9일 월요일 오전 9:29

모든 응답

  • You can use esentutl to repair Active Directory database.

    For more information:

    http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/AdminTips/ActiveDirectory/UseEsentutlwhenNtdsutiltoolfailstorepairtheActiveDirectorydatabase.html

     


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Microsoft Student Partner
    Microsoft Certified Professional
    Microsoft Certified Systems Administrator: Security
    Microsoft Certified Systems Engineer: Security
    Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
    Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

    Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

     

    • 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
    2011년 5월 9일 월요일 오전 9:29
  • If you got other DC in your domain, i would not suggest for repairing the AD database. I tried few times repairing the AD database, but was not successful all the time & i find using DCpromo directly on the server & allow it to replicate with other DC is better option.

    Repair the AD database using NTDSutil tool

    http://support.microsoft.com/kb/258062

     

    Regards


    Awinish Vishwakarma| CHECK MY BLOG 

    Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.

    2011년 5월 9일 월요일 오전 10:02
    중재자
  • What exactly are the errors/symptoms you are seeing?

    hth
    Marcin

    2011년 5월 9일 월요일 오전 10:39
  • Hello,

    how do you know that it is broken?

    If you have another DC that can take over FSMO roles and you have configured as DNS/GC also then the better solution is demoting and promoting the server as this create a fresh database without any errors from the other existing DC.


    Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
    • 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
    2011년 5월 9일 월요일 오전 10:49
  • Woah!  This method can cause all sorts of issues with the database.  Especially if you use esentutl /r.  Esentutl has no idea this is an Active Directory database, all it knows is that it is a jet database.  As such, it will look for inconsistencies and truncate the database if necessary.  Start with NTDSUtil.  Specifically, ntdsutil\activate instance ntds\semantic database analysis\go fixup (you will need to stop ADDS if 2008+, or reboot into DSRM if 2003).

    Only if this does not work would I consider using esentutl.  Even then, I'd likely just demote the DC and repromote it as mentioned by Meinolf Weber.

     

    For more information check this out:

    http://technet.microsoft.com/en-us/library/cc940337.aspx

    Recover

    Invokes Esentutl.exe to perform a soft recovery of the database. Soft recovery scans the log files and ensures all committed transactions therein are also reflected in the data file. The Windows 2000 Backup program truncates the log files appropriately.
    Logs are used to ensure committed transactions are not lost if your system fails or if you have unexpected power loss. In essence, transaction data is written first to a log file and then to the data file. When you restart after failure, you can rerun the log to reproduce the transactions that were committed but hadn't made it to the data file.

    Repair

    Invokes Esentutl.exe to perform a low-level repair of the data file. Use the repair command only on the advice of qualified service personnel, as it can cause data loss. Furthermore, this can only repair what ESENT knows about. This means that its notion of repair might eliminate some data that is key to the safe operation of the directory service.

    Thanks!

     

    2011년 5월 9일 월요일 오후 1:01
  • Grete solution

    It is work from my side

    many thanks

    2020년 1월 18일 토요일 오후 8:34