|
|
See correction to this article
Running Ntdsutil
The Microsoft article "Performing Offline Defragmentation of the Active Directory Database," (http://support.microsoft.com/?kbid=232122) explains the offline defragmentation process. I've summarized the process, adding a few steps as a safety measure to ensure that any mistakes you make won't be catastrophic.
- Use NTBackup to create a system state backup of the DC.
- Use the F8 option to boot the DC into Directory Services Restore Mode, which lets you boot the server without starting AD so that you can work with AD files that are open during typical operations.
- If the DC has enough free disk space to hold a complete copy of the current ntds.dit file, copy ntds.dit to a temporary directory as a backup until you're sure that the defragmentation worked properly. Keep in mind that you can't rename the file; the compaction process won't run if you do so.
- At a command prompt, enter the following commands in sequence:
ntdsutil
files
info
Note the path to the active ntds.dit file.
- Type
compact to "c:\new"
to create a new compacted ntds.dit file in C:\new. Ntdsutil automatically creates the directory if it doesn't exist.
- To exit Ntdsutil, enter the following commands in sequence:
quit
quit
- Replace the current ntds.dit file (at the location you noted in Step 4) with the compacted ntds.dit file from C:\new.
- Delete all log (*.log) files in the active AD database location, according to Ntdsutil's instructions, which Figure 2 shows.
- Restart the DC, letting it boot as usual.
After completing an offline defragmentation, immediately back up the DC or at least perform a system state backup. After you've completed this backup and you're sure that AD is working properly, you can delete the temporary backup copy of ntds.dit that you created in Step 3.
Prev. page
1
[2]
3
next page
CORRECTIONS TO THIS ARTICLE:
|
In Mark England's "Using Ntdsutil to Defrag AD" (June 2003, http://www.winnetmag.com, InstantDoc ID 38945), the default tombstone-lifetime setting (the date on which marked Active Directory--AD--objects are deleted) was incorrect. The default setting is 60 days. We regret an inconvenience this error might have caused.
|
|
|
|
|