AD使用ntdsutil工具 恢复主域控制器 清理孤立域控制器

Posted 2020-09-26

需求：

主域控制器出现灾难故障，辅助域控制器正常

在辅助域控制器使用ntdsutil工具清理主域控制器并夺取PDC角色

首先清理孤立的域控制器

ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net  #登陆到本地域
server connections:quit
select operation target: list sites        
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit
metadata cleanup:Remove selected server    #删除一个域控制器
metadata cleanup:quit
ntdsutil: quit

 

辅助域控制需要夺取五种ＦＭＳＯ成为主域控制器

ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net  #登陆到本地域
server connections:quit
select operation target: list sites        
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit

##夺取角色
fsmo maintenance:Seize domain naming master 
 
fsmo maintenance:Seize infrastructure master 

fsmo maintenance:Seize PDC 

fsmo maintenance:Seize RID master 

fsmo maintenance:Seize schema master 

fsmo maintenance:quit 
ntdsutil: quit