ActiveDirectory snapshot Management

ActiveDirectory snapshot management through the ActiveDirectory snapshot function, we can easily see the information in the original AD before recovering the AD information, such as users, groups, OU and other information. Next we will do it.

ActiveDirectory snapshot management through the ActiveDirectory snapshot function, we can easily see the information in the original AD before recovering the AD information, such as users, groups, OU and other information. Next we will do it.

Active Directory snapshot Management

Through the Active Directory snapshot function, we can easily see the information in the original AD before recovering the AD information, such as users, groups, OU and other information. Let's do it.

Environment:

Operating System: Windows Server 2012

Domain Controller: xiaohui.srv.com

Objective: To create a snapshot-delete testOU-create a snapshot-delete Steven, and then use the snapshot to view the different AD statuses and information at different times.

Now let's take a look at the current AD information. Now we have two OU: test and test1, and another user named steven.

Next we can discuss our theme, and we can open Powershell (CMD is also good, depending on personal habits)

Let's enter the ntdsutil command. Can we enter? Or help to get help, because my system is in English, so it is an English prompt. If your system is in Chinese, it is a Chinese prompt, so don't worry, Hong Kong Space, here we are talking about snapshots, so we use snapshot, and we just need to enter it directly.

Input Snapshot or SN. Similarly, you can also use help to obtain it, that is, each level can be obtained.

Now let's list all and check whether there are any snapshots. For example, no available snapshots are found.

Now, enter create to create a snapshot of the current time. Similarly, to activate the current instance, the default value is ntds.

We enter Activate Instance ntds to Activate the current Instance, and enter create to create a snapshot.

Let's list all again. We can see that a snapshot is available.

The preceding figure shows how to create a snapshot. Next, we will try to use the snapshot. Now we will delete the test OU. For example, the test OU has been deleted.

Now let's create a snapshot. We already have two snapshots. The first snapshot contains the original one, and the second snapshot does not have the ou test.

Delete the user Steven, and then create a snapshot.

Okay, we already have three snapshots. Let's verify the information about the active directory on the server in the US. For example, I want to view the Active Directory information, I want to check whether the ou test is still absent at this time. If it succeeds, the server space and the ou test should be absent. here we need to use the mount command, for example, the mount is successful, c: \ $ snap _...

We need to use another command, dsamain. Can we use the same command? Take a look at the help

Let's hang up. For example, dbpath indicates the path you are hanging on. If ldapport is not currently using the port number, for example, if my port number is 5555, Microsoft Active Directory Domain Services startup complete appears, version 6.2.9200.16384 indicates that this snapshot has been successfully started.

Now let's verify, open the AD user and computer, right-click on the root node, and choose to replace the domain controller.

Here we enter the domain controller, and enter our snapshot port number, and then click OK)

We do not have the test ou, but there is another user named Steven, which indicates that this snapshot is valid. We will verify the next snapshot, and the next result should be the Test OU, no Steven

We turn off the active users and computers, and then mount the third snapshot. We need to unmount the snapshot first, and then mount the third snapshot.

For example, in the same location, we continue the above steps and use dsamain to start this snapshot.

For example, the startup is successful.

As shown in, the entire experiment is successful.

This article is from the "Sunshine ☆ endeavor" blog. Please keep this source