Recommended Posts

Hey guys, I set up a domain controller in Windows Server 2008 R2 in an old computer that I'm fooling around with at home. Long story short, after some time, the motherboard fried and I couldn't put the HDD into another box because it wouldn't start the OS because of different hardware.

I didn't have a secondary DC and didn't have any useful backups, although the HDD was in perfect running condition. Eventually I was able to boot up the OS in vmware directly from the HDD then create a secondary DC on a new physical machine, promote it to the primary, then demote the old primary DC. This was a long, tedius process and was wondering what the best practices are for backing up servers and domain controllers.

I know 2k8 R2 has Windows Server Backup, but I've also heard some good things about 3rd party solutions like Acronis or EaseUS. Is there an easier way to backup a domain controller in the event of a hardware failure (hdd or otherwise)?

Aside from having a secondary DC, what is the best solution for backing up DCs?

My setup is basically a Microsoft Hyper-V server and it serves:

Windows 2008 R2 Enterprise edition

Windows 2008 R2 Standard edition (minimal install which acts as a secondary DC/Back up)

Windows 7 for doing dev stuff and work.

And the easiest solution would be to keep active back ups of the VHD files.

Depending how old the computer is and if it has a processor that has hardware virtual processor support and if you have enough memory (4GB might be enough). You could just run a config like mine, minus the Windows 7 dev environment.

I would recommend getting Acronis with the plugins (Universal Restore and De-duplication) and automate the backup and validations of those backups. Then make sure you store them on a NAS or SAN and offline/offsite. This would in a really bad situation allow you to recover to new hardware by being able to do a bare metal restore, or recover only what you need from the partitions to the actual files if needed. The best thing is you can encrypt the backups and have them stored wherever you want without worrying about your disk be damaged over time with products like Ghost.

My setup is basically a Microsoft Hyper-V server and it serves:

Windows 2008 R2 Enterprise edition

Windows 2008 R2 Standard edition (minimal install which acts as a secondary DC/Back up)

Windows 7 for doing dev stuff and work.

And the easiest solution would be to keep active back ups of the VHD files.

Depending how old the computer is and if it has a processor that has hardware virtual processor support and if you have enough memory (4GB might be enough). You could just run a config like mine, minus the Windows 7 dev environment.

Nice was looking at this setup also. Will be looking into this more!

I would recommend getting Acronis with the plugins (Universal Restore and De-duplication) and automate the backup and validations of those backups. Then make sure you store them on a NAS or SAN and offline/offsite. This would in a really bad situation allow you to recover to new hardware by being able to do a bare metal restore, or recover only what you need from the partitions to the actual files if needed. The best thing is you can encrypt the backups and have them stored wherever you want without worrying about your disk be damaged over time with products like Ghost.

This is exactly what I was going to say. If it is just a domain controller and not an exchange server then acronis is the perfect choice.

However, if you plan on making it an exchange 2010 server in the future, invest in a different solution, like, backup exec. Because acronis does not support exchange 2010.

I would recommend getting Acronis with the plugins (Universal Restore and De-duplication) and automate the backup and validations of those backups. Then make sure you store them on a NAS or SAN and offline/offsite. This would in a really bad situation allow you to recover to new hardware by being able to do a bare metal restore, or recover only what you need from the partitions to the actual files if needed. The best thing is you can encrypt the backups and have them stored wherever you want without worrying about your disk be damaged over time with products like Ghost.

Ok so here's my dilemma. Either I didn't perform the backups or recoveries properly or Acronis Universal Restore does not work the way I expect it to. I didn't have any backups of the DC before the motherboard crash, but after the crash, I put the harddrive into another computer and booted the computer off an Acronis Boot CD to back up the OS partition in hopes that I could use the Universal Restore to restore it so it could be used in the new tower. But it didn't work. This was a while ago, so I can't quote the exact steps I took, but I racked my brains trying a lot of different ways to recover the OS partition to different hardware.

I'm not sure if it made a difference but the old (dead) computer was a dell optiplex and the new computer is a dell vostro, which is a workstation PC, so there are no drivers specifically for windows server OSs, but the win7 64bit drivers work fine for the chipset on server 2008 r2. Either way, i tried a lot of different things and could not, for the life of me, get acronis to restore the backups to the different hardware.

My setup is basically a Microsoft Hyper-V server and it serves:

Windows 2008 R2 Enterprise edition

Windows 2008 R2 Standard edition (minimal install which acts as a secondary DC/Back up)

Windows 7 for doing dev stuff and work.

And the easiest solution would be to keep active back ups of the VHD files.

Depending how old the computer is and if it has a processor that has hardware virtual processor support and if you have enough memory (4GB might be enough). You could just run a config like mine, minus the Windows 7 dev environment.

I've never used Hyper-V before (or heard of it for that matter). I was doing some quick reading about it -- so essentially, its a role that you install on server 2008 r2 that allows you to run virtual DCs? Then you just keep backups of the VMs? This sounds interesting.

When you run the backup for the first time try doing it from inside the operating system to check for issues, I've had no problems doing backups from the bootcd or inside the operating system. I would recommend backing up the entire disk as at times Windows installs extra on other partitions (you will notice this if there is a small amount of MBs being used up after installation, without backing up this partition normally a FAT32 partition then the system will not boot from restore but still allow you to restore files from within Acronis while booted into the operating system).

I've never used Hyper-V before (or heard of it for that matter). I was doing some quick reading about it -- so essentially, its a role that you install on server 2008 r2 that allows you to run virtual DCs? Then you just keep backups of the VMs? This sounds interesting.

Not exactly. Yes, Hyper-V can be installed as a role, but you can also download Hyper-V server edition which is basically a very basic install with Hyper-V which you then manage from either that computer or another and you can add VM's to it and manage them remotely. This is a good solution as if you back up the VHD's and the Hyper-V server goes down, you can transfer them to another Hyper-V server without risk of installing or damaging the DC environment. Or if you ever upgraded to another computer, the VM's could be transferred to the new computer without much fuss.

Edit: If I remember correctly, Hyper-V server edition is free as well, but I'm not sure if that's changed.

yep, seems like it's free: http://www.microsoft.com/en-us/server-cloud/hyper-v-server/default.aspx

This seems like a much better solution. So do I have to use VMware or does MS have it's own virtualization software?

Would it be easy to back up the current server 2008 R2 installation and restore it to a VHD inside hyper-v?

What a surprise that you mentioned easeus. I notice it when just fooling around the Download.cnet and wanna find me one remarkable backup software. After reviewing what others say about it. I decide to download its free version for a try.

So amazed to find it provides so many backup functions i need, like system backup, disk/partition backup,schedule backup as well as incremental/differential. Disk clone successfully help me to upgrade my older and small disk to a larger and brand-new hard disk. I like.

Therefore, I think its server version also would be awesome two. And i know that windows server backup in w2k8 is able to backup data. But it might be much better to use one really professional. What's more, I just received its email, saying now it has made another upgrade - new interface as well as more improved functions. You might go to its website: http://www.todo-backup.com

Thanks!

A RAID setup helps to protect you from Hard Drive Failure, but is completely useless if something goes horribly wrong inside the OS (won't boot or corrupted/deleted data).

You need restore points to go back in time to restore the OS or retrieve individual files.

I am running a VMware vSphere 5.0 High Availability Cluster (SAN) at Work with Veeam Backup & Replication 6.0 backing up to our Main PC (Windows Server 2008 R2). SugarSync Online Backup uploads the Incremental Restore Points offsite (in case of a Catastrophic Failure).

Overkill for most users (also, kinda pricey), but I am loving it...

This topic is now closed to further replies.
  • Posts

    • You've tried DuckDuckGo and Brave Search, now get serious with SearXNG by Paul Hill Over the last decade, it has become quite trendy to dump Google Search in favor of privacy-preserving alternatives such as DuckDuckGo, Startpage, and Brave Search. These search engines have done a very good job at highlighting dodgy practices by Google, such as adjusting search results based on what it thinks you’ll like (filter bubble) and stalking you around the web to advertise to you. While these search engines are good starting points when compared to non-private services like Google, there are still quite a few issues with them. For example, both DuckDuckGo and Brave Search require running non-free JavaScript in your web browser, which is comparable to running proprietary software on your computer, meaning you can be sure about what it’s actually doing in the background. Another issue is that these search engines are hosted on the respective companies’ servers, and you are using a service that you don’t control. Finally, DuckDuckGo, while offering privacy features, relies heavily on Microsoft’s infrastructure for its results and, in the past, has permitted Microsoft tracking scripts. If you are looking for a more private search solution than DuckDuckGo, Brave Search, and Startpage, then I recommend taking a look at SearXNG. It is a privacy-respecting metasearch engine that can be used via different public instances, which is useful for mobile users, or you can install it on your computer or server and run it locally with maximum control. Unlike Google, Bing, or Brave Search, which crawl the web and have their own search indexes, SearXNG is a metasearch engine, meaning it taps other search engines, stripping your identifying data, such as IP address, user agent, and cookies, in the process. Your search query is sent to the other search engines you enable before aggregating the results. SearXNG has deployment flexibility. If you are a casual user or a mobile user and don’t want to run SearXNG locally, you can use a public instance that is hosted by someone else. The main problem with this is that you are putting trust in the maintainer of the instance regarding stuff like logs that they may keep; good hosts should have a privacy policy explaining their policies. If you are trying to use SearXNG, you can also install the software on your device and then head to 127.0.0.1:8080 in your browser and search from there. While you don’t have to worry about a third-party admin like the public instances, search engines could ultimately block your IP address if they frown on you pulling in their search results locally. If you want to run it locally, it’s a good idea to use proxies or VPNs to hide your actual IP. You don’t have to worry about this with a public instance, as search engines never see your IP address. The main privacy benefit of using SearXNG is that it isolates your identity from the underlying engines that it’s capable of searching, such as Google and Bing. These search engines will only see requests coming from a generic server, so they can’t profile you and create a bubble filter that influences what results you see. This also ensures that your search engine doesn’t turn into an echo chamber that prevents you from reading alternative points of view. As a free software project, you are allowed to inspect SearXNG to make sure there are no negative features bundled inside. This sets it apart from the privacy search engines mentioned earlier because you can’t check their source code. As a meta search engine, you are not restricted to getting results from one source. Due to the fact that it scrapes content from other websites, your SearXNG instance will periodically get blocked from different providers, so it’s good to select a range of sources as a backup. While enabling all of the services will give you great results, this can make searching slower. I am personally happy with slower searches for the best results, but you can always check which providers are slowing down your search from the search results page and disable them to speed things up. If you want decent results quickly, enable the main search providers such as Google, Brave, DuckDuckGo, Qwant, Bing, and Yahoo. This way, you get wide coverage without the latency. On the Engines tab in Preferences, do note that there are different tabs, such as General, Images, and Videos, with their own providers that can be toggled and are not covered by "Enable all" while on the General tab, so be sure to dig into each. Just a note, if you want to enable everything, press "Enable all" in one tab, then hit save at the bottom of the page, then do the next tab, and so on. If you press "Enable all", then do that in each tab, and then save, nothing will stick. When I had just some of the search engines enabled, I searched “define nefarious” and results came back with the definition of “define” - obviously that was a sucky result. However, when I had everything enabled, it found dictionary pages for the word “nefarious” and even had an inline definition on the sidebar, which is quite nice too - that was delivered by WolframAlpha for anyone wondering! Probably the worst thing about this meta search engine is that the engines you select are saved with a cookie, so you must enable them on every new device you use SearXNG on, including if you decide to go into incognito mode with your web browser. Honestly, I would say this is the most annoying aspect, and perhaps if your browser lets you choose a separate private browsing search engine, then it would be best to use DuckDuckGo for this portion of your browsing. Another weakness of SearXNG is the random blocking of it by search providers. When you are on the results page, expand the “Response time” box, and it will show things like “Suspended: too many requests” or “access denied”. This is why it is good to enable several providers so that there is always a fallback to get results from. I won’t pretend SearXNG will be for everyone, however, if you enable all of the providers and put up with the slower response time, the results can be really amazing. Even if you don’t want to use it as your daily driver, keeping a bookmark handy that links to it is a good idea if you ever feel like doing a deep dive into a niche topic where other search engines are just failing to bring up any good result, due to the amount of sources it looks on. If you’re interested in radical user control over the software you use, installing SearXNG locally can also be a good idea, but be prepared to be temporarily blocked from sites if you trigger bot sensors without a VPN. Personally, I’ve opted to use a public instance, rather than install it myself. If you want to use it via a public instance, head over to searx.space to find a provider. Let us know in the comments if you have used SearXNG or its predecessor, Searx. What do you think about the quality of the results?
    • Dear Neowin, If it is not too much trouble, can you start using the new-ish designations for Insider Preview? "Experimental" is different than "former Dev" as it can apply to different models, eg 26H1 or 26H2 etc, right? No need to seed confusion IMHO. And, please "finally" update your graphics. OK?
    • Did you see their FAQ, its quite good. Have a look in the Advanced section. https://delta.chat/en/help
    • Just install Linux Mint that is a real blessing and many times cheaper because you can continue using your old Windows computer/laptop with the latest Linux updates.
    • Interesting share -- however it does not make sense: Email messages get stored somewhere, so how is Delta Chat "based on email" and decentralized without actually storing anything? By Web3 standard practices, the various Relays would require dedicated storage to make messages available to the recipients (like a large series of message queue channels, akin to racks of traditional post office boxes)... and Contacts must be two-way confirmed in order for encryption keys to be exchanged (ostensibly every key-pair is uniquely bound between sender and recipient) and the Relays would preserve the public keys in order to facilitate message carriage... or every device stores all sorts of keys and contact info. All of this to say, decentralized messaging is like running Bluesky nodes except instead of discovering/browsing public feeds by various posters (at the given node) these Delta Chats would be relaying encrypted messages (via Relays) that only trusted recipients would have the appropriate decryption key (their own private key) to read it. But this doesn't solve the "it's like email" sales pitch. The only way it's like email is that there's encrypted binary stuff being transported from your app into the federated ether of Delta Chat Relays for others to decrypt (hopefully only the intended recipient)... but outside of this federated relays framework, it is absolutely nothing like email.
  • Recent Achievements

    • Week One Done
      Woland13 earned a badge
      Week One Done
    • One Month Later
      Woland13 earned a badge
      One Month Later
    • One Year In
      bernmeister earned a badge
      One Year In
    • Week One Done
      Scoobystu earned a badge
      Week One Done
    • Week One Done
      tuben earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      502
    2. 2
      +Edouard
      226
    3. 3
      PsYcHoKiLLa
      158
    4. 4
      Steven P.
      75
    5. 5
      FloatingFatMan
      71
  • Tell a friend

    Love Neowin? Tell a friend!