+ Post New Thread
Results 1 to 14 of 14
Wireless Networks Thread, Rebuilt server - now lacking trust relationships!!! in Technical; Had a HDD fail in the PDC, turns out it was the HDD with the System partition on so have ...
  1. #1
    InspireICT's Avatar
    Join Date
    Dec 2010
    Location
    North London
    Posts
    110
    Thank Post
    17
    Thanked 6 Times in 6 Posts
    Rep Power
    9

    Rebuilt server - now lacking trust relationships!!!

    Had a HDD fail in the PDC, turns out it was the HDD with the System partition on so have replaced the HDD and restored an older Ghost image of the HDD. Everything looks ok except for the fact that every workstation on the network can't login with the following error, "The trust relationship between this workstation and the primary domain failed."

    Windows 7 clients and Server 2008 (non R2)

    Is there any way to fix this besides dropping every machine off the domain and rejoining?

    Thanks in advance.

  2. #2

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    I'm not sure you can restore a DC in this way. Do you have any other DCs? Do you have a System State backup?

  3. #3
    InspireICT's Avatar
    Join Date
    Dec 2010
    Location
    North London
    Posts
    110
    Thank Post
    17
    Thanked 6 Times in 6 Posts
    Rep Power
    9
    Quote Originally Posted by 3s-gtech View Post
    I'm not sure you can restore a DC in this way. Do you have any other DCs? Do you have a System State backup?
    Embarrassingly, no and no

    This is soul destroying!

  4. #4

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    1. How many DC's in your env?
    2. How many domains/forest?
    3. You should not restores a DC using a image.

    Sukh

  5. #5

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    The clients are going to be way out of date due to you restoring an old image.

    Without an up to date ad backup you will be sad.

    Ben

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    Quote Originally Posted by sukh View Post
    3. You should not restores a DC using a image.

    Sukh
    Well if that image was taken the day before the hdd died it would be fine but if it's an original install image what you say is true

    Ben

  7. #7
    InspireICT's Avatar
    Join Date
    Dec 2010
    Location
    North London
    Posts
    110
    Thank Post
    17
    Thanked 6 Times in 6 Posts
    Rep Power
    9
    Quote Originally Posted by sukh View Post
    1. How many DC's in your env?
    2. How many domains/forest?
    3. You should not restores a DC using a image.

    Sukh
    1. - Just the one
    2. - again, just the one
    3. - Yeah I'm starting to get that impression

    Any recommendations as to what Backup to use? Is the new Windows Backup in server 2008 any good?

  8. #8
    InspireICT's Avatar
    Join Date
    Dec 2010
    Location
    North London
    Posts
    110
    Thank Post
    17
    Thanked 6 Times in 6 Posts
    Rep Power
    9
    OK, it looks like dropping off the domain and rejoining is the way forward and a valuable lesson learned. Thanks all.

  9. #9

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    @plexer - Correct. I assume there InspireICT knows. Also restoring an image can have others side effects which can destroy your entore AD which I assume InspirtICT is aware of.

    Sukh

  10. #10

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,272
    Thank Post
    614
    Thanked 1,567 Times in 1,407 Posts
    Rep Power
    412
    Server 2008 builtin backup solution is better than no back up at all.

    Server 2008 builtin backup solution only supports backup to disk.

    It's a start and I would strongly recommend getting something in place.

    Don't forget that your AD will also be missing any objects created since that image, computer accounts, user accounts, OU's, GPO's etc...

    If you have to re-create user accounts you will also have permissions issues to overcome with their existing files and folders.

    A user account with the same name is not equal to the old missing in action account.

    Ben

  11. #11

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,137
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    77
    as suggested by plexer use the built in WIndows backup.

    Better still, I'd recommend that you have a minimum of 2 DC in any domain for HA/FT. AD is the core of your infrastructure, make sure it is HA.

    Sukh

  12. #12

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    A good lesson is also to have another DC. It can be anything hardware wise really - an old PC with enough RAM can run Windows Server and replicate the AD. I bought an old server from Ebay as one of my DCs, cost less than a tenner fully working. If you get a failure of one DC, the other can be a life saver.

  13. #13
    InspireICT's Avatar
    Join Date
    Dec 2010
    Location
    North London
    Posts
    110
    Thank Post
    17
    Thanked 6 Times in 6 Posts
    Rep Power
    9
    Will look into secondary DCs. Has anyone used windows inbuilt software mirroring? I know there will be a performance overhead but is it any good?

  14. #14

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,698
    Thank Post
    143
    Thanked 542 Times in 486 Posts
    Rep Power
    148
    Yup, I have it on a Dell 1550. Slow, but works okay.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 29
    Last Post: 7th May 2010, 03:26 PM
  2. Server 2008 AD issue across forest trust with Server 2003 R2 AD
    By dhess1013 in forum Windows Server 2008
    Replies: 5
    Last Post: 11th October 2008, 10:00 AM
  3. Replies: 5
    Last Post: 12th June 2008, 04:14 PM
  4. Trust Relationships and DeepFreeze
    By AdamWilden in forum How do you do....it?
    Replies: 6
    Last Post: 4th February 2008, 11:16 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •