Re: [ActiveDir] cloning DC's
A KB article might be a good idea actually. Definitely be good to be able to point to a definitive article on the subject when consultants bring this up as a possibility. Phil On 9/8/05, Almeida Pinto, Jorge de <[EMAIL PROTECTED]> wrote: Funny how this topic comes up now and then...I may even be worth creating a KB article on this issue or is that useless?Windows 2000/2003 DCs should NEVER, NEVER, NEVER be imaged forbackup/restore purposes! Imaging is NOT AD aware backup/restore solutionand thus not MS approoved!A W2K3 pre-SP1 hotfix, a W2K post-SP4 hotfix and W2K3 SP1 will stop DCs replicating by disabling replication when USN rollback is detected. As Iknow the detection is not guaranteed, but when it detects it does thatto prevent further damage.The same problem CAN occur when DCs are used in a virtual environment and snapshots are used for exampleBe very carefull with this!Read more at:MS-KBQ875495_How to detect and recover from a USN rollback in WindowsServer 2003MS-KBQ885875_How to detect and recover from a USN rollback in Windows 2000 ServerIf you don't pay attention to this mail or to mail from others aboutthis and still want to do it... Well, be sure you get enough coffee,painkillers (for the headache you will get from it), dust off your ABBA collection ;-) and afterwards possibly search for a new job or be readyto get yelled at.CheersJorge-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom KernSent: Wednesday, August 17, 2005 23:03To: activedirectorySubject: [ActiveDir] cloning DC's I know i read this thread before but i can't seem to find it.we are creating a new forest root and the IBM consultants here createdthe first root dc and now they want to clone it using Disk Image and sysprep to create the other DC's in the root.I think i heard this is a bad idea. Am I right?I can't seem to find any article on this but I do remember this beingspoken of on the list and I don't remeber what the conculsion was. thanksList info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspx List archive:http://www.mail-archive.com/activedir%40mail.activedir.org/This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspxList FAQ: http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Funny how this topic comes up now and then... I may even be worth creating a KB article on this issue or is that useless? Windows 2000/2003 DCs should NEVER, NEVER, NEVER be imaged for backup/restore purposes! Imaging is NOT AD aware backup/restore solution and thus not MS approoved! A W2K3 pre-SP1 hotfix, a W2K post-SP4 hotfix and W2K3 SP1 will stop DCs replicating by disabling replication when USN rollback is detected. As I know the detection is not guaranteed, but when it detects it does that to prevent further damage. The same problem CAN occur when DCs are used in a virtual environment and snapshots are used for example Be very carefull with this! Read more at: MS-KBQ875495_How to detect and recover from a USN rollback in Windows Server 2003 MS-KBQ885875_How to detect and recover from a USN rollback in Windows 2000 Server If you don't pay attention to this mail or to mail from others about this and still want to do it... Well, be sure you get enough coffee, painkillers (for the headache you will get from it), dust off your ABBA collection ;-) and afterwards possibly search for a new job or be ready to get yelled at. Cheers Jorge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 23:03 To: activedirectory Subject: [ActiveDir] cloning DC's I know i read this thread before but i can't seem to find it. we are creating a new forest root and the IBM consultants here created the first root dc and now they want to clone it using Disk Image and sysprep to create the other DC's in the root. I think i heard this is a bad idea. Am I right? I can't seem to find any article on this but I do remember this being spoken of on the list and I don't remeber what the conculsion was. thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Uh... I hope they brought a lot of pixie dust They will need it and no amount of calls to MS will help out when this blows. Does anyone on this list work for Itsy Bitsy Machine? Go talk to your people! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 5:03 PM To: activedirectory Subject: [ActiveDir] cloning DC's I know i read this thread before but i can't seem to find it. we are creating a new forest root and the IBM consultants here created the first root dc and now they want to clone it using Disk Image and sysprep to create the other DC's in the root. I think i heard this is a bad idea. Am I right? I can't seem to find any article on this but I do remember this being spoken of on the list and I don't remeber what the conculsion was. thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Title: RE: [ActiveDir] cloning DC's I'm not equating it with cloning in the impact to the directory nor steps followed, only in the typically desired result of most who try and clone (most who try and clone typically do so to bring up a DC fast, which is effectively what IFM gives you, just in a safe manner via a different set of steps of course). ~Eric From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED]Sent: Wed 8/17/2005 10:22 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] cloning DC's Eric,I just want to be sure that you are not equating backup with cloning. I amafraid that the OP may take your "eat cake" statement to mean that you areagreeing with the cloning proposal. Install from media was not made forcloning. Unless I am wrong again, the install from media is not done (nor isit supposed to be done) on a cloned image of existing DCs. "Cloned" in thiscase means something like Ghost image of a DC taken from who knows when. Thisis completely different from a backup of a DC, backup being NTBackup orsimilar.So, I am not very sure that he is not going to be eating some very stalecakes if he reads you literally.Sincerely,Dèjì Akómöláfé, MCSE+M MCSA+M MCP+IMicrosoft MVP - Directory Serviceswww.readymaids.com - we know ITwww.akomolafe.comDo you now realize that Today is the Tomorrow you were worried aboutYesterday? -anonFrom: [EMAIL PROTECTED] on behalf of Eric FleischmanSent: Wed 8/17/2005 9:52 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] cloning DC'sThere is a way to have your cake and eat it too, however.Take a backup of the DC, then use the install from media (IFM) featureto dcpromo more machines in to the environment using the backup taken asa seed for the dataset. This will allow you to rapidly bring up new DCswithout having to re-source all of the info yet still not do damage toyour environment (with the definition of "do damage" left out forbrevity, as it has been covered on this DL previously if memory servesme correctly).IFM was added in WS2003 to address scenarios such as this.~Eric-Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Rick KingslanSent: Wednesday, August 17, 2005 7:57 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] cloning DC'sTom -Regardless of the scenario and how it's done - you never, never, never,clone DCs. This will lead to very bad things - possibly including theappearance of the Anti-Christ, opening of Black Holes, ABBA coming backtoprominence.Do NOT do this. Do NOT allow IBM to do it. Period.Rick-Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Tom KernSent: Wednesday, August 17, 2005 7:56 PMTo: activedirectorySubject: Re: [ActiveDir] cloning DC'sI went back and i saw B. Shirley's remarks on cloning dc's.I'm wondering if this applies to my senario below-cloning a DC with Disk Image and sysprep and creating new DC's thatway?Is this very very bad? is there an article or paper explaining why?or anyone care to explain why.or is this ok?thanks. sorry to harp but these AD consultants from IBM want to gothis route tomorrow and I'm thinking its not a good idea for somereason but I'd like to be sure before i bring it up.Thanks againOn 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote:> I know i read this thread before but i can't seem to find it.>> we are creating a new forest root and the IBM consultants here created> the first root dc and now they want to clone it using Disk Image and> sysprep to create the other DC's in the root.>> I think i heard this is a bad idea. Am I right?>> I can't seem to find any article on this but I do remember this being> spoken of on the list and I don't remeber what the conculsion was.>> thanks>List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive:http://www.mail-archive.com/activedir%40mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive:http://www.mail-archive.com/activedir%40mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/List info : http://www.activedir.org/List.aspxList FAQ : http://www.activedir.org/ListFAQ.aspxList archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Eric, I just want to be sure that you are not equating backup with cloning. I am afraid that the OP may take your "eat cake" statement to mean that you are agreeing with the cloning proposal. Install from media was not made for cloning. Unless I am wrong again, the install from media is not done (nor is it supposed to be done) on a cloned image of existing DCs. "Cloned" in this case means something like Ghost image of a DC taken from who knows when. This is completely different from a backup of a DC, backup being NTBackup or similar. So, I am not very sure that he is not going to be eating some very stale cakes if he reads you literally. Sincerely, Dèjì Akómöláfé, MCSE+M MCSA+M MCP+I Microsoft MVP - Directory Services www.readymaids.com - we know IT www.akomolafe.com Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon From: [EMAIL PROTECTED] on behalf of Eric Fleischman Sent: Wed 8/17/2005 9:52 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] cloning DC's There is a way to have your cake and eat it too, however. Take a backup of the DC, then use the install from media (IFM) feature to dcpromo more machines in to the environment using the backup taken as a seed for the dataset. This will allow you to rapidly bring up new DCs without having to re-source all of the info yet still not do damage to your environment (with the definition of "do damage" left out for brevity, as it has been covered on this DL previously if memory serves me correctly). IFM was added in WS2003 to address scenarios such as this. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Wednesday, August 17, 2005 7:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] cloning DC's Tom - Regardless of the scenario and how it's done - you never, never, never, clone DCs. This will lead to very bad things - possibly including the appearance of the Anti-Christ, opening of Black Holes, ABBA coming back to prominence. Do NOT do this. Do NOT allow IBM to do it. Period. Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 7:56 PM To: activedirectory Subject: Re: [ActiveDir] cloning DC's I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
There is a way to have your cake and eat it too, however. Take a backup of the DC, then use the install from media (IFM) feature to dcpromo more machines in to the environment using the backup taken as a seed for the dataset. This will allow you to rapidly bring up new DCs without having to re-source all of the info yet still not do damage to your environment (with the definition of "do damage" left out for brevity, as it has been covered on this DL previously if memory serves me correctly). IFM was added in WS2003 to address scenarios such as this. ~Eric -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Kingslan Sent: Wednesday, August 17, 2005 7:57 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] cloning DC's Tom - Regardless of the scenario and how it's done - you never, never, never, clone DCs. This will lead to very bad things - possibly including the appearance of the Anti-Christ, opening of Black Holes, ABBA coming back to prominence. Do NOT do this. Do NOT allow IBM to do it. Period. Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 7:56 PM To: activedirectory Subject: Re: [ActiveDir] cloning DC's I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Tom - Regardless of the scenario and how it's done - you never, never, never, clone DCs. This will lead to very bad things - possibly including the appearance of the Anti-Christ, opening of Black Holes, ABBA coming back to prominence. Do NOT do this. Do NOT allow IBM to do it. Period. Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 7:56 PM To: activedirectory Subject: Re: [ActiveDir] cloning DC's I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
I'm thinking out loud here, why not clone/sysprep the server as stand alone machine then join the root domain and then DCPROMO? Those steps can be automated and are from my perspective very easy to do. If you sending DCs to a remote location then use dcpromo with install from media Francis -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: August 17, 2005 5:03 PM To: activedirectory Subject: [ActiveDir] cloning DC's I know i read this thread before but i can't seem to find it. we are creating a new forest root and the IBM consultants here created the first root dc and now they want to clone it using Disk Image and sysprep to create the other DC's in the root. I think i heard this is a bad idea. Am I right? I can't seem to find any article on this but I do remember this being spoken of on the list and I don't remeber what the conculsion was. thanks List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
As far as documentation that states this please see the following Knowledge Base Article: http://support.microsoft.com/default.aspx?scid=kb;en-us;830958 Thanks, -Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve Linehan Sent: Wednesday, August 17, 2005 8:59 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] cloning DC's Yes this is a very very bad idea and is not supported. In fact I believe that sysprep will even block in this scenario and not run. While you can build the base Operating System and while it is a member or stand alone server sysprep it and then use that image to build several servers which can then be DC Promoed you can not image an existing DC. If you are running Windows Server 2003 here is what I suggest doing: 1) Create a base OS image of a standalone or member server. 2) Use this image to create the servers that you will use then promote to new DCs. 3) Make a system state backup of the original DC. 4) Use the Install From Media(IFM) option to build the new DC/GCs, see http://support.microsoft.com/default.aspx?scid=kb;en-us;311078 This is a supported method and should result in an install time that is very close to the unsupported cloning method. Thanks, -Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 7:56 PM To: activedirectory Subject: Re: [ActiveDir] cloning DC's I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] cloning DC's
Yes this is a very very bad idea and is not supported. In fact I believe that sysprep will even block in this scenario and not run. While you can build the base Operating System and while it is a member or stand alone server sysprep it and then use that image to build several servers which can then be DC Promoed you can not image an existing DC. If you are running Windows Server 2003 here is what I suggest doing: 1) Create a base OS image of a standalone or member server. 2) Use this image to create the servers that you will use then promote to new DCs. 3) Make a system state backup of the original DC. 4) Use the Install From Media(IFM) option to build the new DC/GCs, see http://support.microsoft.com/default.aspx?scid=kb;en-us;311078 This is a supported method and should result in an install time that is very close to the unsupported cloning method. Thanks, -Steve -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Kern Sent: Wednesday, August 17, 2005 7:56 PM To: activedirectory Subject: Re: [ActiveDir] cloning DC's I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] cloning DC's
I went back and i saw B. Shirley's remarks on cloning dc's. I'm wondering if this applies to my senario below- cloning a DC with Disk Image and sysprep and creating new DC's that way? Is this very very bad? is there an article or paper explaining why? or anyone care to explain why. or is this ok? thanks. sorry to harp but these AD consultants from IBM want to go this route tomorrow and I'm thinking its not a good idea for some reason but I'd like to be sure before i bring it up. Thanks again On 8/17/05, Tom Kern <[EMAIL PROTECTED]> wrote: > I know i read this thread before but i can't seem to find it. > > we are creating a new forest root and the IBM consultants here created > the first root dc and now they want to clone it using Disk Image and > sysprep to create the other DC's in the root. > > I think i heard this is a bad idea. Am I right? > > I can't seem to find any article on this but I do remember this being > spoken of on the list and I don't remeber what the conculsion was. > > thanks > List info : http://www.activedir.org/List.aspx List FAQ: http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/