최고의 답변자
repairing ntds.dit file

질문
답변
-
Hello,
how do you know that it is broken?
If you have another DC that can take over FSMO roles and you have configured as DNS/GC also then the better solution is demoting and promoting the server as this create a fresh database without any errors from the other existing DC.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
2011년 5월 9일 월요일 오전 10:49 -
You can use esentutl to repair Active Directory database.
For more information:
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, ConfigurationMicrosoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
- 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
2011년 5월 9일 월요일 오전 9:29
모든 응답
-
You can use esentutl to repair Active Directory database.
For more information:
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.Microsoft Student Partner
Microsoft Certified Professional
Microsoft Certified Systems Administrator: Security
Microsoft Certified Systems Engineer: Security
Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, ConfigurationMicrosoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
- 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
2011년 5월 9일 월요일 오전 9:29 -
If you got other DC in your domain, i would not suggest for repairing the AD database. I tried few times repairing the AD database, but was not successful all the time & i find using DCpromo directly on the server & allow it to replicate with other DC is better option.
Repair the AD database using NTDSutil tool
http://support.microsoft.com/kb/258062
Regards
Awinish Vishwakarma| CHECK MY BLOG
Disclaimer: This posting is provided AS-IS with no warranties or guarantees and confers no rights.
2011년 5월 9일 월요일 오전 10:02 -
Hello,
how do you know that it is broken?
If you have another DC that can take over FSMO roles and you have configured as DNS/GC also then the better solution is demoting and promoting the server as this create a fresh database without any errors from the other existing DC.
Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.- 답변으로 표시됨 Abhay Tyagi 2011년 5월 9일 월요일 오전 11:17
2011년 5월 9일 월요일 오전 10:49 -
Woah! This method can cause all sorts of issues with the database. Especially if you use esentutl /r. Esentutl has no idea this is an Active Directory database, all it knows is that it is a jet database. As such, it will look for inconsistencies and truncate the database if necessary. Start with NTDSUtil. Specifically, ntdsutil\activate instance ntds\semantic database analysis\go fixup (you will need to stop ADDS if 2008+, or reboot into DSRM if 2003).
Only if this does not work would I consider using esentutl. Even then, I'd likely just demote the DC and repromote it as mentioned by Meinolf Weber.
For more information check this out:
http://technet.microsoft.com/en-us/library/cc940337.aspx
Recover
Invokes Esentutl.exe to perform a soft recovery of the database. Soft recovery scans the log files and ensures all committed transactions therein are also reflected in the data file. The Windows 2000 Backup program truncates the log files appropriately.
Logs are used to ensure committed transactions are not lost if your system fails or if you have unexpected power loss. In essence, transaction data is written first to a log file and then to the data file. When you restart after failure, you can rerun the log to reproduce the transactions that were committed but hadn't made it to the data file.Repair
Invokes Esentutl.exe to perform a low-level repair of the data file. Use the repair command only on the advice of qualified service personnel, as it can cause data loss. Furthermore, this can only repair what ESENT knows about. This means that its notion of repair might eliminate some data that is key to the safe operation of the directory service.
Thanks!
- 답변으로 제안됨 Sean Ivey [MSFT]Microsoft employee 2011년 5월 9일 월요일 오후 1:01
2011년 5월 9일 월요일 오후 1:01