R.B.5

We have an NT 4.0 server running as a PDC on our single domain environment. I bought a new server and installed NT 4.0 Server onto this one aswell. Thought it best not to mix platforms and shares etc would be easier. Added to domain as BDC. Copied shares/data etc across. Added relevant share registry key which i exported from the PDC. When i looked at the shares on the BDC then it came up as

Administrator : full control
Account unknown : full control

I thought the sam database was supposed to be automatically duplicated across to the BDC's on the network! Later found that the sam databse was corrupt and he presto i need to re-administer like 1701 users......nooooooooooo!

Now got Windows 2K server on the new server and am currently inserting the new users into it. Just wondered if there was something i could do to avoid such a pain staking task. Afaik the only way to get round it is to start again. The data i copied from the old server is now on the new server so shares just need setting up.

Thx in advance for any replies

David_Wallis

use robocopy with resource kit to copy folders and permissions..

Drop me a mail if you need more information.

Also how have you set the server up, is it a standalone server and your adding the users as local users???

I would have stuck with it being a bdc... corrupting the sam

Obviously you did a backup first and ran rdisk?

David

[Edited by David_Wallis - 7/30/2002 10:20:57 AM]

darlodge

I also think scopy does the same job as robocopy.

Worth a look

Darren

R.B.5

Thx lads...done the scopy but as i said the sam user accounts database is corrupt and "no" they didnt have a backup. lol, so its back to the drawing board i'm afraid. Up 10 1000 users no out of a possible 1700 . There is no point in doing the Scopy if the users arent there as its crossreferenced with the sam. Anyhow the data is there and time will tell now wether or not this server will work tidy!


thx again

David_Wallis

scopy does do the same to an extent, but robocopy is better for doing deep paths, and creating 'mirror' images prior to migrating users (/purge)

So am I correct in saying that you can access the sam on the pdc either?

David

R.B.5

i can access it but its corrupt. Get errors when i try to alter properties on it etc etc.

David_Wallis

is it still a live server, if not have you tried to see what you can get back with the repair info...???

David

shunty

you tried netdom.exe on the corrupt server, it does fix a lot, can't remember if it will do the sam though?? It's patched loads of servers for me when the sam is out of sync with a pdc, or it can't see the domain properly.
look for articles on lsa on technet you may find these useful.

shunty