Operation Manual

303 Copyright © Acronis International GmbH, 2002-2015
11.4.3 Restoring the Active Directory database
If the Active Directory database files are corrupted but the domain controller is able to start in
normal mode, you can restore the database in one of the following ways.
Re-promoting the domain controller
This method of restoring the database is available only if the domain has other domain controllers. It
does not require having a backup.
To restore the database, use the Dcpromo tool to demote the domain controller with the corrupted
database, and then to promote that domain controller again.
To re-promote the domain controller, run the following commands:
dcpromo /forceremoval
dcpromo /adv
Recovering the database from a backup
This method of restoring the database can be used regardless of whether the domain has other
domain controllers.
To restore the database, recover the Active Directory database files (p. 291). In addition, if you have
made any changes to Group Policy Objects (GPOs) since backup, you also need to recover the SYSVOL
folder (p. 296).
To recover the Active Directory database from a backup
1. Restart the domain controller and press F8 during startup.
2. On the Advanced Boot Options screen, select Directory Services Restore Mode.
3. [Optional] Create a copy of the current Active Directory database files in case the changes need
to be undone.
4. Change the original account of the Acronis agent service to the Directory Services Restore Mode
(DSRM) Administrator account:
a. Open the Services snap-in.
b. In the list of services, double-click Acronis Managed Machine Service.
c. On the Log On tab, in This account, specify the user name and password that you use to log
on to Directory Services Restore Mode, and then click Apply.
d. On the General tab, click Start. After the service starts, click OK.
Details. This change is needed because the Acronis agent service on a domain controller runs
under a domain user account, but domain user accounts are unavailable in Directory Services
Restore Mode.
5. Start Acronis Backup and recover the database files from the backup. If necessary, also recover
the SYSVOL folder.
Details. For paths to these files and folders, see "Active Directory backup" (p. 296). The recovery
procedure is similar to the one described in "Recovering Exchange Server database files (p. 299).
6. If the domain has other domain controllers, ensure that a USN rollback problem will not occur (p.
304).
7. Restart the domain controller in normal mode. Ensure that the Active Directory service has
started successfully.
8. Change the account for the Acronis agent service back to the original one, as described in step 4.