需求:

主域控制器出现灾难故障,辅助域控制器正常

在辅助域控制器使用ntdsutil工具清理主域控制器并夺取PDC角色

首先清理孤立的域控制器

ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net #登陆到本地域
server connections:quit
select operation target: list sites
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit
metadata cleanup:Remove selected server #删除一个域控制器
metadata cleanup:quit
ntdsutil: quit

辅助域控制需要夺取五种FMSO成为主域控制器

ntdsutil
ntdsutil: metadata cleanup
metadata cleanup: select operation target
select operation target: connections
server connections: connect to domain 3b.net #登陆到本地域
server connections:quit
select operation target: list sites
select operation target: List domains in site
select operation target: select domain 0
select operation target: select server 0
select operation target: quit ##夺取角色
fsmo maintenance:Seize domain naming master fsmo maintenance:Seize infrastructure master fsmo maintenance:Seize PDC fsmo maintenance:Seize RID master fsmo maintenance:Seize schema master fsmo maintenance:quit
ntdsutil: quit

  

04-22 12:24