安裝AD Schema

http://technet.microsoft.com/en-us/library/cc732110.aspx

Install the Active Directory Schema Snap-In

19 out of 23 rated this helpful - Rate this topic

Updated: October 22, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012

You can use this procedure to first register the dynamic-link library (DLL) that is required for the Active Directory Schema snap-in. You can then add the snap-in to Microsoft Management Console (MMC).

Membership in Domain Admins , or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To install the Active Directory Schema snap-in

1. To open an elevated command prompt, click Start , type command prompt , and then right-click Command Prompt when it appears in the Start menu. Next, click Run as administrator , and then click OK .
   To open an elevated command prompt in Windows Server 2012, click Start , type cmd , right click cmd and then click Run as administrator .
2. Type the following command, and then press ENTER:
   regsvr32 schmmgmt.dll
   

   Tip

   Although the regsvr32 command shows that it is a 32-bit based command, it does run properly in the 64-bit versions of the supported operating systems (see Applies To near the start of this topic). If you do not run the command from an elevated command prompt or if you do not have the appropriate permissions, the following error message appears The module ‘schmmgmt.dll’ was loaded but the call to DllRegisterServer failed with error code 0x80040201. If you see this error message, check the group memberships of the user account that you are using to ensure that the user account is a member of the Schema Admins group. Also, ensure also that you run the command from an elevated command prompt.
3. Click Start , click Run , type mmc , and then click OK .
4. On the File menu, click Add/Remove Snap-in .
5. Under Available snap-ins , click Active Directory Schema , click Add , and then click OK .
6. To save this console, on the File menu, click Save .
7. In the Save As dialog box, do one of the following:
   • To place the snap-in in the Administrative Tools folder, in File name , type a name for the snap-in, and then click Save .
     
   • To save the snap-in to a location other than the Administrative Tools folder, in Save in , navigate to a location for the snap-in. In File name , type a name for the snap-in, and then click Save .

To use Ldp to search the domain for deleted objects (tombstones)

To use Ldp to search the domain for deleted objects (tombstones)

1. On the power shell , and then type ldp .
2. Connect and bind to a domain controller in the domain whose tombstones you want to retrieve.
• To connect, on the Connection menu, click Connect , and then type a server name and a port number.(連其它伺服器)
• To bind, on the Connection menu, click Bind , and then type an account name, password, and domain if you want to connect to a domain other than the domain to which you are currently logged on.(本機)
3. On the Browse menu, click Search .
4. In the Search dialog box, for Base DN , type the distinguished name of the domain whose tombstones you want to retrieve.
5. In the Filter box, use the filter (isDeleted=*) .
6. Under Scope , click Subtree .
7. Click Options .
8. In the Search Options dialog box, under Search Call Type , click Extended .
9. Click Controls . Then in the Object Identifier box, type the following: 1.2.840.113556.1.4.417
10. Under Control Type , click Server .
11. To add the control to the Active Controls list, click Check in . Then click OK .
12. In the Search Options dialog box, click OK .
13. In the Search dialog box, click Run .

0926-第二台DC建置

Server Backup - Schedule Backup

Server Backup - Recover

如果有進行排程，請在此選還原點

這是要還原檔案或資料夾，

(如果要選原整個磁區，選Volumes)

電腦還原點

 系統發現有一個資料夾有變更

1.還原到原來的地方
2.如果有相同的檔案，選擇保留二個版本(當然也可以選覆寫，只是後來變更的檔案就會被還原)

 按Recover 確認還原

 還原成功，關閉還原精靈即可。

Server Backup - Backup Once

因為示範，故使用自訂

 Add items

 選擇其它伺服器，做異地備份

0924- server設定

還原VMA和VMB

在GPO中加入以下規定

DC加入可登入選項

• Domain Users
• Administrators

整個網域中，加入可關機選項

• Domain Users
• Account Operators
• Administrators
• Backup Operators
• ENTERPRISE DOMAIN CONTROLLERS
• Print Operators
• Server Operators

新增OU和User

更改群組原則順序設定，並更新

在power shell下面執行gpupdate指令即可。