You need to view the contents of an Active Directory snapshot from two days ago

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that runs Windows Server 2012 R2.
You create an Active Directory snapshot of DC1 each day.
You need to view the contents of an Active Directory snapshot from two days ago.
What should you do first?

Your network contains an Active Directory domain named contoso.com. The domain
contains a domain controller named DC1 that runs Windows Server 2012 R2.
You create an Active Directory snapshot of DC1 each day.
You need to view the contents of an Active Directory snapshot from two days ago.
What should you do first?

A.
Start the Volume Shadow Copy Service (VSS).

B.
Run the dsamain.exe command.

C.
Run the ntdsutil.exe command.

D.
Stop the Active Directory Domain Services (AD DS) service.

Explanation:
Mounting an Active Directory snapshot
Before connecting to the snapshot we need to mount it. By looking at the results of the List
All command in step #8 above, identify the snapshot that you wish to mount, and note the
number next to it.
In order to mount an Active Directory snapshot follow these steps:
Log on as a member of the Domain Admins group to one of your Windows Server 2008
Domain Controllers.
Open a Command Prompt window by clicking on the CMD shortcut in the Start menu, or by
typing CMD and pressing Enter in the Run or Quick Search parts of the Start menu.
Note: You must run NTDSUTIL from an elevated command prompt. To open an elevated
command prompt, click Start, right-click Command Prompt, and then click Run as
administrator.
In the CMD window, type the following command:
ntdsutil
In the CMD window, type the following command:
snapshot
To view all available snapshots, in the CMD window, type the following command:
list all The result should look like this:
snapshot: List All
1: 2008/10/25:03:14 {ec53ad62-8312-426f-8ad4-d47768351c9a}
2: C: {15c6f880-cc5c-483b-86cf-8dc2d3449348}
In this example we only have one snapshot available, one from 2008/10/25 at 03:14AM (yes,
I write articles at this time…). We’ll mount this one.
In the CMD window, type the following command:

mount 2
The result should look like this:
snapshot: mount 2
Snapshot {15c6f880-cc5c-483b-86cf-8dc2d3449348} mounted as
C:’$SNAP_200810250314_VOLUMEC$’
Next, you can leave the NTDSUTIL running, or you can quit by typing quit 2 times.
Note: Like the above command, the mounting process can also be run in one line. However,
note that
NTDSUTIL requires that the “list all” command be run in the same session that you mount
the snapshot. So in order to mount the snapshot with a one-liner, you will need to run “list
all” first.
ntdsutil snapshot “list all” “mount 2” quit quit
Note: You do not need to quit from the NTDSUTIL command, you can keep it open
assuming that you’ll probably want to unmount the snapshot right after working with it.



Leave a Reply 14

Your email address will not be published. Required fields are marked *


fred

fred

Sould be C. First you need to mount the snapshot with ntdsutil. Than it can be viewed with dsadmin.

noname

noname

Answer is C

ntdsutil is used to mount snapshots

Tomas

Tomas

Correct answer is dsamain.exe – dsamain /dbpath /ldapport

lucasdrums

lucasdrums

From https://technet.microsoft.com/en-us/library/cc772168.aspx we read: ” the file path to the database file must point to the database file, which might be on read-only media, such as a mounted snapshot; in a backup; or on another server, such as a domain controller or an AD LDS server”. In order to mount the snapshot we must first run NTDSUTIL, so answer is correct here, answer C

MalotJean

MalotJean

fred is right. shapshot need to be mounted with ntdsutil first. then it can be exposed with dsamain.

Dude

Dude

C, mount it first with ntdsutil then B use dsamain to view and bind it to a port for ADAC to view etc

olti

olti

Dsamain.exe exposes Active Directory data that is stored in a snapshot or backup as a Lightweight Directory Access Protocol (LDAP) server.

Marshal Bullymore

Marshal Bullymore

C first (B would be the second step)

You can use either Ntdsutil.exe to mount the snapshot or use Windows Server Backup to restore the backup to an alternative location or to another computer. Then, you can use a tool such as Ldp.exe to view the data.
You can use the following process to use the Active Directory database mounting tool:
Although it is not a requirement, you can schedule a task that regularly runs Ntdsutil.exe to take snapshots of the volume that contains the AD DS or AD LDS database.

Run Ntdsutil.exe to list the snapshots that are available and then mount the snapshot that you want to view.

Run Dsamain.exe to expose the snapshot volume as an LDAP server.

momi

momi

Ans is Ntdsutil.
ntdsutil.exe: To create and view the list of available snapshots
dsamain.exe: To mount and view the contents of the snapshot

if you don’t know which one is the snapshot from 2days ago then how and what you going to mount.