Hi All
With regards to protecting my ad settings I wondering what the most effecient & easiest way is.
Im concerned that if AD goes spastic for some weird reason or if another user does something dumb is there a way to rervert back in time to time when things were working correctly? With 2 DC's the mishap can replicate and then every DC could have the wrong configuration.
I was musing over
* having an e.g. extra DC that only receives replication traffic periodically and lags behind the others and servers as a potential means to recover and re replicate. perhaps having this on a virtual machine that can be pulled out for AD disaster recovery but I am worried about replication errors in the mean time as it would be a DC that just disspears with without being gracefully removed from the network.
* taking an AD snapshot, though Im not sure how thorough this is and if its dependable
Is there a good way to recover a bad AD without resorting to backup tapes?
Thanks for reading
Confuseis
confuseis