Restore to one of those otherwise non-functional DCs, or into some virtual machine somewhere.
Surely you can find one machine with enough RAM to support VirtualBox with one VM as an alternative. -ASB: http://XeeMe.com/AndrewBaker Sent from my Motorola Droid RAZR On Jun 13, 2012 9:28 AM, "Daniel Chenault" <dchena...@lgnetworksinc.com> wrote: > A lab.. nice. You have one? Wish I did. I lack the hardware to set one > up. I’ve tried many times to get the boss to let loose of some cash so I > can set one up, even older used equipment would be useful, but no…**** > > ** ** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > ** ** > > *From:* Carl Houseman [mailto:c.house...@gmail.com] > *Sent:* Tuesday, June 12, 2012 9:01 PM > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > ** ** > > <Failure to communicate alert>**** > > ** ** > > You've misunderstood the suggestion.**** > > ** ** > > You've been advised to restore a *recent* backup (one made *since the > problem began*) to an isolated lab DC, as an experiment. The theory is, > since recent backups complete successfully, perhaps the backup does not > contain the corruption, or the corruption may not be restored.**** > > ** ** > > Carl**** > > ** ** > > *From:* Daniel Chenault [mailto:dchena...@lgnetworksinc.com] > *Sent:* Tuesday, June 12, 2012 5:57 PM > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > ** ** > > **shrug****** > > ** ** > > Alrighty then… **** > > ** ** > > I may actually be able to get my grubby little hands on a backup that > predates the first 447 event (that is, before 1/6/12). Rather concerned > though; that is well past the default tombstone age of 60 days (and what is > currently set). From what I read in Technet the restore of one that old > will be disallowed.**** > > ** ** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > ** ** > > *From:* Andrew S. Baker [mailto:asbz...@gmail.com] > *Sent:* Tuesday, June 12, 2012 4:50 PM > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > ** ** > > What Steven said.**** > > You only have one functional DC, and no useful historical backups. You > might want to know if the one you have can be restored, and, if perchance > the restore avoids the problem.**** > > -ASB: http://XeeMe.com/AndrewBaker**** > > Sent from my Motorola Droid RAZR**** > > On Jun 12, 2012 5:17 PM, "Daniel Chenault" <dchena...@lgnetworksinc.com> > wrote:**** > > Uh… what’s the point? The problem I’m having predates that backup by > MONTHS.**** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > *From:* Andrew S. Baker [mailto:asbz...@gmail.com] > *Sent:* Tuesday, June 12, 2012 3:53 PM > *To:* NT System Admin Issues > *Subject:* Re: in-depth AD**** > > **** > > Try restoring that somewhere offline and see if the problem remains**** > > > **** > > *ASB***** > > *http://XeeMe.com/AndrewBaker***** > > *Harnessing the Advantages of Technology for the SMB market…***** > > ** ** > > On Tue, Jun 12, 2012 at 3:56 PM, Daniel Chenault < > dchena...@lgnetworksinc.com> wrote:**** > > Did a backup last night before booting into DSRM and it completed without > error for whatever that is worth.**** > > **** > > 2008 R2 SP1, English, 64-bit**** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > *From:* Damien Solodow [mailto:damien.solo...@harrison.edu] > *Sent:* Tuesday, June 12, 2012 2:04 PM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > Ah… I was thinking something different based on what you were saying > earlier.**** > > **** > > Are able to get a successful system state backup from that DC?**** > > Also, what Windows version is the DC in question?**** > > **** > > DAMIEN SOLODOW**** > > Systems Engineer**** > > 317.447.6033 (office)**** > > 317.447.6014 (fax)**** > > HARRISON COLLEGE**** > > **** > > *From:* Daniel Chenault [mailto:dchena...@lgnetworksinc.com] > *Sent:* Tuesday, June 12, 2012 2:38 PM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > It’s an object of type… uh… I dunno… you tell me…**** > > **** > > NTDS (1836) A bad page link (error -327) has been detected in a B+ Tree > (ObjectID: 163, PgnoRoot: 952) of database c:\windows\ntds\ntds.dit (2596 > => 3372, 3369)**** > > **** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > *From:* Damien Solodow [mailto:damien.solo...@harrison.edu] > *Sent:* Tuesday, June 12, 2012 1:27 PM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > Couple questions:**** > > 1) I assume there are multiple domain controllers? Do they all > report this same error or is it just one DC?**** > > 2) What object is an error being reported on? Depending on the > object type you may have different options for dealing with it**** > > **** > > DAMIEN SOLODOW**** > > Systems Engineer**** > > 317.447.6033 (office)**** > > 317.447.6014 (fax)**** > > HARRISON COLLEGE**** > > **** > > *From:* Daniel Chenault [mailto:dchena...@lgnetworksinc.com] > *Sent:* Tuesday, June 12, 2012 2:19 PM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > Failed with an error (1206 I believe) stating the database is corrupt.**** > > **** > > Let me clarify: I, and Microsoft, have run every possible switch or > command available via ntdsutil and esentutl. Each one failed with an error > stating corruption. Wanting to try and edit the file manually is not a whim > or a wild idea but a last-ditch effort unless someone has a better idea.** > ** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > *From:* Michael B. Smith [mailto:mich...@smithcons.com] > *Sent:* Tuesday, June 12, 2012 11:56 AM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > Have you done a defrag of the ntds.dit?**** > > **** > > *From:* Daniel Chenault [mailto:dchena...@lgnetworksinc.com] > *Sent:* Tuesday, June 12, 2012 12:23 PM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > Oh yes, it’s up and running. Basic AD functionality is there; I can create > users, assign permissions and other simple stuff. No replication is > happening and it’s to the point that I cannot open the EMC.**** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > *From:* Brian Desmond [mailto:br...@briandesmond.com] > *Sent:* Tuesday, June 12, 2012 11:13 AM**** > > > *To:* NT System Admin Issues > *Subject:* RE: in-depth AD**** > > **** > > *Does the machine boot?***** > > * ***** > > *Thanks,***** > > *Brian Desmond***** > > *br...@briandesmond.com* <br...@briandesmond.com>**** > > * ***** > > *w – 312.625.1438 | c – 312.731.3132***** > > * ***** > > *From:* Daniel Chenault [mailto:dchena...@lgnetworksinc.com] > *Sent:* Tuesday, June 12, 2012 10:54 AM**** > > > *To:* NT System Admin Issues**** > > *Subject:* in-depth AD**** > > **** > > It’s a long story, aren’t they all, but the root of my issue is this: I am > getting Event ID 447 for Database Corruption on ntds.dit. Microsoft is > telling me to do an authoritative restore. Problem is this problem goes > back to January; it is highly doubtful I can locate a backup pre-dating > that time frame. I inherited this mess and am just trying to fix it. This > corruption is causing several different problems (naturally). **** > > **** > > What I want to know from the collective list wisdom and knowledge is… is > it possible to use a tool, such as adsiedit, to locate a specific object > (it is called out specifically in the aforementioned event) and > edit/massage/delete/assassinate the object? ** ** > > **** > > Because, as I see it, I have three choices at this point:**** > > 1) Auth restore (highly unlikely)**** > > 2) Edit/massage ntds.dit (maybe?)**** > > 3) Recreate this entire domain from scratch (seven locations > internationally, hundreds of users and computers, lord knows how many > printers total, plus Exchange and Great Plains, permissions on > umpty-hundred shares – just shoot me now)**** > > **** > > Daniel Chenault**** > > dchena...@lgnetworksinc.com**** > > Office: 972-528-6546 x 1002**** > > Fax: 972-982-0054**** > > 9550 Skillman Road**** > > Suite 500**** > > Dallas, TX 75243**** > > [image: Description: Description: cid:image001.jpg@01CCF24C.F9B05160]**** > > **** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin**** > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
<<image001.jpg>>