DC restored from backup having AD issues...

[Guest]

Our primary DC was hit by a rootkit and required formatting and restoration
from tape backup. Before doing so I transferred the Global Catalog role to
another DC in the domain, then demoted the infected DC to a member server and
removed it from the domain. The DC is back via a non-authoritative restore.
The copy of the AD on the newly restored DC is current, obviously receiving
replications from the other DCs. However, the newly restored DC cannot make
any changes to it's copy of the AD. Also, this DC can't be demoted because it
can't seem to "see " the other DCs (and within AD it isn't listed as one of
the Domain Controllers).
A tape backup of it's current System State failed due to

"Active Directory Service not responding."

Any suggestions?

Thanks!

 

[sjungdahl]

The DNS settings look good?

Our primary DC was hit by a rootkit and required formatting and restoration
from tape backup. Before doing so I transferred the Global Catalog role to
another DC in the domain, then demoted the infected DC to a member server and
removed it from the domain. The DC is back via a non-authoritative restore.
The copy of the AD on the newly restored DC is current, obviously receiving
replications from the other DCs. However, the newly restored DC cannot make
any changes to it's copy of the AD. Also, this DC can't be demoted because it
can't seem to "see " the other DCs (and within AD it isn't listed as one of
the Domain Controllers).
A tape backup of it's current System State failed due to

"Active Directory Service not responding."

Any suggestions?

Thanks!

 

[Kevin D. Goodknecht Sr. [MVP]]

In

Our primary DC was hit by a rootkit and required
formatting and restoration from tape backup. Before doing
so I transferred the Global Catalog role to another DC in
the domain, then demoted the infected DC to a member
server and removed it from the domain. The DC is back via
a non-authoritative restore. The copy of the AD on the
newly restored DC is current, obviously receiving
replications from the other DCs. However, the newly
restored DC cannot make any changes to it's copy of the
AD. Also, this DC can't be demoted because it can't seem
to "see " the other DCs (and within AD it isn't listed as
one of the Domain Controllers).

Of course not, you demoted it.

A tape backup of it's current System State failed due to

"Active Directory Service not responding."

Any suggestions?

Because you demoted the DC out of the domain, the only way to bring it back
into the domain is to use DCPROMO to bring it back in. Do a force removal of
AD from it, then promote it into the domain. The restore may have worked had
you not already demoted it to a member.