Otdfbt

Multi tool use

Pass variable to cat

Side by side histograms

How to connect an offset point symbol to its original position in QGIS?

Does any lore text explain why the planes of Acheron, Gehenna, and Carceri are the alignment they are?

Why is Colorado so different politically from nearby states?

Applicants clearly not having the skills they advertise

What are the words for people who cause trouble believing they know better?

What are the words for people who cause trouble believing they know better?

How much water is needed to create a Katana capable of cutting flesh, bones and wood?

PhD student with mental health issues and bad performance

Does the growth of home value benefit from compound interest?

Is it a problem that pull requests are approved without any comments

Did Darth Vader wear the same suit for 20+ years?

Diet Coke or water?

Can a magnetic field of an object be stronger than its gravity?

Is the decompression of compressed and encrypted data without decryption also theoretically impossible?

Align text within align

Is there any word or phrase for negative bearing?

Accidentally cashed a check twice

Personalization conditions switching doesn`t work in Experience Editor (9.1.0, Initial Release)

Regarding eBGP Multipath

Is it legal in the UK for politicians to lie to the public for political gain?

How were concentration and extermination camp guards recruited?

What happens if you do emergency landing on a US base in middle of the ocean?

Active Directory full forest recovery - Doubts about obscure sentence in MS documentation

Windows Active Directory naming best practices?Promoting Active Directory external forest trust to full forest trustActive Directory disaster recovery with DPMDomain Controller DNS Best Practice/Practical Considerations for Domain Controllers in Child DomainsActive Directory Domain Controller in Multiple Sites - Server 2012Naming a new Active Directory forest - why is split-horizon DNS not recommended?one of the single dc per domain DCs has suffered USN rollbackAllowing LDAP authentication from DMZ to Active Directory. Is my idea secure?Active Directory migration from Windows 2003 to Windows 2016Active Directory Domain same as web domain

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and Love the Forest Recovery” and thoroughly explained in “AD Forest Recovery Guide”.

However, this note is to me really obscure: “Caution: Perform an authoritative (or primary) restore operation of SYSVOL only for the first DC to be restored in the forest root domain. Incorrectly performing primary restore operations of the SYSVOL on other DCs leads to replication conflicts of SYSVOL data.” (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-forest-recovery-perform-initial-recovery)

What are the motivations of not to perform an authoritative restore of SYSVOL once per domain but only once per forest (in the root domain)? SYSVOL isnt’it replicated just at the domain level? So, wouldn’t it be correct to perform an authoritative restore of one only SYSVOL for each domain of the forest (the one of the recovered DC for each domain of the forest) instead that just on the root domain? The conflict shouldn’t arise just only if I set as authoritative the SYSVOL folder in more than one DC in the same domain?
It is only a Microsoft typo (less likely but possible) or am I missing something (surely more likely)?

Thanks, Diego

active-directory disaster-recovery best-practices

share|improve this question

asked May 18 at 21:22

Diego ADiego A

83

add a comment | 

0

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and Love the Forest Recovery” and thoroughly explained in “AD Forest Recovery Guide”.

However, this note is to me really obscure: “Caution: Perform an authoritative (or primary) restore operation of SYSVOL only for the first DC to be restored in the forest root domain. Incorrectly performing primary restore operations of the SYSVOL on other DCs leads to replication conflicts of SYSVOL data.” (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-forest-recovery-perform-initial-recovery)

What are the motivations of not to perform an authoritative restore of SYSVOL once per domain but only once per forest (in the root domain)? SYSVOL isnt’it replicated just at the domain level? So, wouldn’t it be correct to perform an authoritative restore of one only SYSVOL for each domain of the forest (the one of the recovered DC for each domain of the forest) instead that just on the root domain? The conflict shouldn’t arise just only if I set as authoritative the SYSVOL folder in more than one DC in the same domain?
It is only a Microsoft typo (less likely but possible) or am I missing something (surely more likely)?

Thanks, Diego

active-directory disaster-recovery best-practices

share|improve this question

asked May 18 at 21:22

Diego ADiego A

83

add a comment | 

I am trying to apply and test best practices about Active Directory full forest recovery as warmly advised in “Best Practices for Implementing Schema Updates or : How I Learned to Stop Worrying and Love the Forest Recovery” and thoroughly explained in “AD Forest Recovery Guide”.

However, this note is to me really obscure: “Caution: Perform an authoritative (or primary) restore operation of SYSVOL only for the first DC to be restored in the forest root domain. Incorrectly performing primary restore operations of the SYSVOL on other DCs leads to replication conflicts of SYSVOL data.” (https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/manage/ad-forest-recovery-perform-initial-recovery)

What are the motivations of not to perform an authoritative restore of SYSVOL once per domain but only once per forest (in the root domain)? SYSVOL isnt’it replicated just at the domain level? So, wouldn’t it be correct to perform an authoritative restore of one only SYSVOL for each domain of the forest (the one of the recovered DC for each domain of the forest) instead that just on the root domain? The conflict shouldn’t arise just only if I set as authoritative the SYSVOL folder in more than one DC in the same domain?
It is only a Microsoft typo (less likely but possible) or am I missing something (surely more likely)?

Thanks, Diego

active-directory disaster-recovery best-practices

share|improve this question

asked May 18 at 21:22

Diego ADiego A

83

share|improve this question

asked May 18 at 21:22

Diego ADiego A

83

share|improve this question

asked May 18 at 21:22

Diego ADiego A

83

asked May 18 at 21:22

Diego ADiego A

83

asked May 18 at 21:22

Diego ADiego A

83