需求:
主域控制器出现灾难故障,辅助域控制器正常
在辅助域控制器使用ntdsutil工具清理主域控制器并夺取PDC角色
首先清理孤立的域控制器
ntdsutil ntdsutil: metadata cleanup metadata cleanup: select operation target select operation target: connections server connections: connect to domain 3b.net #登陆到本地域 server connections:quit select operation target: list sites select operation target: List domains in site select operation target: select domain 0 select operation target: select server 0 select operation target: quit metadata cleanup:Remove selected server #删除一个域控制器 metadata cleanup:quit ntdsutil: quit
辅助域控制需要夺取五种FMSO成为主域控制器
ntdsutil ntdsutil: metadata cleanup metadata cleanup: select operation target select operation target: connections server connections: connect to domain 3b.net #登陆到本地域 server connections:quit select operation target: list sites select operation target: List domains in site select operation target: select domain 0 select operation target: select server 0 select operation target: quit ##夺取角色 fsmo maintenance:Seize domain naming master fsmo maintenance:Seize infrastructure master fsmo maintenance:Seize PDC fsmo maintenance:Seize RID master fsmo maintenance:Seize schema master fsmo maintenance:quit ntdsutil: quit