| Author | Messages | |
rkaramchand
Posts:8
 | | 03/21/2008 10:44 AM |
| Hi all
How does one rollback schema change after
setup/prepareschema.
rkc
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| ZJORZ
Posts:68
| | 03/21/2008 10:49 AM |
| ehhh, you don't.
Schema changes cannot be undone/removed. You can only defunct/deactivate
REMARK: E-mail address change: "@logicacmg.com" is now "@logica.com".
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
Logica Nederland B.V. (BU ISA Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : Jorge.de.Almeida.Pinto@logica.com
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Rajeev Karamchand
Sent: Fri 2008-03-21 15:42
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Exchange 2007 schema rollback
Hi all
How does one rollback schema change after
setup/prepareschema.
rkc
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
| | | |
| ramstryke
Posts:20
| | 03/21/2008 11:04 AM |
| Ooh.. We've just done ours and largely still view it
as an all or nothing step.
Our take was to test the update in a separate and
close to identical environment and understand the
changes being made. Backup the production, notify the
business the impact of what can happen if something
blows, and pull the trigger.
I've seen websites that say disconnect the network
cable on the schema master OR tweak replication links
to control the update, etc.. They seem to provide
prevention mechanisms only which I think really wont
help you when your environment reaches a certain size.
I wish it was easier to recover from a schema update
other that a complete forest restore, but maybe I'm
just naive.
-
RMS
ReadyMade Systems
--- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| ZJORZ
Posts:68
| | 03/21/2008 11:09 AM |
| forgot to mention:
if it already has replicated to all DCs in the forest, the only way back to fully undoing it is a forest recovery
REMARK: E-mail address change: "@logicacmg.com" is now "@logica.com".
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
Logica Nederland B.V. (BU ISA Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : Jorge.de.Almeida.Pinto@logica.com
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Rajeev Karamchand
Sent: Fri 2008-03-21 15:42
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Exchange 2007 schema rollback
Hi all
How does one rollback schema change after
setup/prepareschema.
rkc
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
| | | |
| rkaramchand
Posts:8
| | 03/21/2008 11:24 AM |
| Sorry
I should have phrased it properly.
Instead of disabling replication and performing
restore. Is there a better way to rollback schema
changes
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> ehhh, you don't.
>
> Schema changes cannot be undone/removed. You can
> only defunct/deactivate
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 15:42
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Exchange 2007 schema rollback
>
>
>
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| listmail
Posts:178
| | 03/21/2008 11:24 AM |
| One doesn't.
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rajeev Karamchand
Sent: Friday, March 21, 2008 10:42 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Exchange 2007 schema rollback
Hi all
How does one rollback schema change after
setup/prepareschema.
rkc
____________________________________________________________________________
________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now.
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| ZJORZ
Posts:68
| | 03/21/2008 11:29 AM |
| can you explain what has been done and what the situation is. Was this done in a test environment or production environment? How many DCs are affected?
REMARK: E-mail address change: "@logicacmg.com" is now "@logica.com".
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
Logica Nederland B.V. (BU ISA Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : Jorge.de.Almeida.Pinto@logica.com
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Rajeev Karamchand
Sent: Fri 2008-03-21 16:21
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange 2007 schema rollback
Sorry
I should have phrased it properly.
Instead of disabling replication and performing
restore. Is there a better way to rollback schema
changes
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> ehhh, you don't.
>
> Schema changes cannot be undone/removed. You can
> only defunct/deactivate
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 15:42
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Exchange 2007 schema rollback
>
>
>
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
| | | |
| rkaramchand
Posts:8
| | 03/21/2008 11:50 AM |
| This is still in planning. It has been tested on test
domain.
But needs to be implemented to production rollback is
required to put a change control.
Here is our envirnoment
root is empty with mutiple domain and atleast 2 DC on
each site.
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> can you explain what has been done and what the
> situation is. Was this done in a test environment or
> production environment? How many DCs are affected?
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 16:21
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Exchange 2007 schema
> rollback
>
>
>
> Sorry
>
> I should have phrased it properly.
> Instead of disabling replication and performing
> restore. Is there a better way to rollback schema
> changes
>
>
> rkc
>
>
> --- "Almeida Pinto, Jorge de"
> <jorge.de.almeida.pinto@logica.com> wrote:
>
> > ehhh, you don't.
> >
> > Schema changes cannot be undone/removed. You can
> > only defunct/deactivate
> >
> > REMARK: E-mail address change: "@logicacmg.com" is
> > now "@logica.com".
> >
> > Met vriendelijke groeten / Kind regards,
> > Ing. Jorge de Almeida Pinto
> > Senior Infrastructure Consultant
> > MVP Windows Server - Directory Services
> >
> > Logica Nederland B.V. (BU ISA Eindhoven)
> > ( Tel : +31-(0)40-29.57.777
> > ( Mobile : +31-(0)6-26.26.62.80
> > * E-mail : Jorge.de.Almeida.Pinto@logica.com
> >
> > ________________________________
> >
> > From: ActiveDir-owner@mail.activedir.org on behalf
> > of Rajeev Karamchand
> > Sent: Fri 2008-03-21 15:42
> > To: ActiveDir@mail.activedir.org
> > Subject: [ActiveDir] Exchange 2007 schema rollback
> >
> >
> >
> > Hi all
> >
> >
> > How does one rollback schema change after
> > setup/prepareschema.
> >
> >
> > rkc
> >
> >
> >
> >
> >
>
____________________________________________________________________________________
> > Be a better friend, newshound, and
> > know-it-all with Yahoo! Mobile. Try it now.
> >
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > List info : http://www.activedir.org/List.aspx
> > List FAQ :
> http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.activedir.org/ma/default.aspx
> >
> >
> >
> >
> >
> > This e-mail and any attachment is for authorised
> use
> > by the intended recipient(s) only. It may contain
> > proprietary material, confidential information
> > and/or be subject to legal privilege. It should
> not
> > be copied, disclosed to, retained or used by, any
> > other party. If you are not an intended recipient
> > then please promptly delete this e-mail and any
> > attachment and all copies and inform the sender.
> > Thank you.
> >
> >
>
>
>
>
>
____________________________________________________________________________________
> Never miss a thing. Make Yahoo your home page.
> http://www.yahoo.com/r/hs
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| ZJORZ
Posts:68
| | 03/21/2008 12:05 PM |
| like joe said: rollback for schema changes does not exist, it is not possible, not in a past lifetime, not in this lifetime, maybe in the next lifetime.... ;-)
the only way the "undo", is to go back to the moment where the schema change did not yet exist. Basically you have to repromote every DC that has been affected by the schema change using a DC that has NOT been affected by the schema change. This of course depends on the replication topology. If all DCs in the AD forest are affected, the only way is to do a forest recovery. Performing a forest recovery in a production enviroment, especially in (very) large environments, is like...PAINFUL
For more info on forest recovery:
http://blogs.dirteam.com/blogs/jorge/archive/2006/10/20/Active-Directory-Forest-Recovery.aspx
REMARK: E-mail address change: "@logicacmg.com" is now "@logica.com".
Met vriendelijke groeten / Kind regards,
Ing. Jorge de Almeida Pinto
Senior Infrastructure Consultant
MVP Windows Server - Directory Services
Logica Nederland B.V. (BU ISA Eindhoven)
( Tel : +31-(0)40-29.57.777
( Mobile : +31-(0)6-26.26.62.80
* E-mail : Jorge.de.Almeida.Pinto@logica.com
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Rajeev Karamchand
Sent: Fri 2008-03-21 16:41
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange 2007 schema rollback
This is still in planning. It has been tested on test
domain.
But needs to be implemented to production rollback is
required to put a change control.
Here is our envirnoment
root is empty with mutiple domain and atleast 2 DC on
each site.
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> can you explain what has been done and what the
> situation is. Was this done in a test environment or
> production environment? How many DCs are affected?
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 16:21
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Exchange 2007 schema
> rollback
>
>
>
> Sorry
>
> I should have phrased it properly.
> Instead of disabling replication and performing
> restore. Is there a better way to rollback schema
> changes
>
>
> rkc
>
>
> --- "Almeida Pinto, Jorge de"
> <jorge.de.almeida.pinto@logica.com> wrote:
>
> > ehhh, you don't.
> >
> > Schema changes cannot be undone/removed. You can
> > only defunct/deactivate
> >
> > REMARK: E-mail address change: "@logicacmg.com" is
> > now "@logica.com".
> >
> > Met vriendelijke groeten / Kind regards,
> > Ing. Jorge de Almeida Pinto
> > Senior Infrastructure Consultant
> > MVP Windows Server - Directory Services
> >
> > Logica Nederland B.V. (BU ISA Eindhoven)
> > ( Tel : +31-(0)40-29.57.777
> > ( Mobile : +31-(0)6-26.26.62.80
> > * E-mail : Jorge.de.Almeida.Pinto@logica.com
> >
> > ________________________________
> >
> > From: ActiveDir-owner@mail.activedir.org on behalf
> > of Rajeev Karamchand
> > Sent: Fri 2008-03-21 15:42
> > To: ActiveDir@mail.activedir.org
> > Subject: [ActiveDir] Exchange 2007 schema rollback
> >
> >
> >
> > Hi all
> >
> >
> > How does one rollback schema change after
> > setup/prepareschema.
> >
> >
> > rkc
> >
> >
> >
> >
> >
>
____________________________________________________________________________________
> > Be a better friend, newshound, and
> > know-it-all with Yahoo! Mobile. Try it now.
> >
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > List info : http://www.activedir.org/List.aspx
> > List FAQ :
> http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.activedir.org/ma/default.aspx
> >
> >
> >
> >
> >
> > This e-mail and any attachment is for authorised
> use
> > by the intended recipient(s) only. It may contain
> > proprietary material, confidential information
> > and/or be subject to legal privilege. It should
> not
> > be copied, disclosed to, retained or used by, any
> > other party. If you are not an intended recipient
> > then please promptly delete this e-mail and any
> > attachment and all copies and inform the sender.
> > Thank you.
> >
> >
>
>
>
>
>
____________________________________________________________________________________
> Never miss a thing. Make Yahoo your home page.
> http://www.yahoo.com/r/hs
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.
| | | |
| rkaramchand
Posts:8
| | 03/21/2008 12:40 PM |
| Thanks Jorge
I am familiar with IsDefunct attribute and Microsoft
article on Forest recovery.
I do know it a painful recovery. Hence wanted an
opinion on best way to approach.
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> like joe said: rollback for schema changes does not
> exist, it is not possible, not in a past lifetime,
> not in this lifetime, maybe in the next lifetime....
> ;-)
>
> the only way the "undo", is to go back to the moment
> where the schema change did not yet exist. Basically
> you have to repromote every DC that has been
> affected by the schema change using a DC that has
> NOT been affected by the schema change. This of
> course depends on the replication topology. If all
> DCs in the AD forest are affected, the only way is
> to do a forest recovery. Performing a forest
> recovery in a production enviroment, especially in
> (very) large environments, is like...PAINFUL
>
> For more info on forest recovery:
>
http://blogs.dirteam.com/blogs/jorge/archive/2006/10/20/Active-Directory-Forest-Recovery.aspx
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 16:41
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] Exchange 2007 schema
> rollback
>
>
>
> This is still in planning. It has been tested on
> test
> domain.
>
> But needs to be implemented to production rollback
> is
> required to put a change control.
>
> Here is our envirnoment
>
> root is empty with mutiple domain and atleast 2 DC
> on
> each site.
>
>
> rkc
>
>
> --- "Almeida Pinto, Jorge de"
> <jorge.de.almeida.pinto@logica.com> wrote:
>
> > can you explain what has been done and what the
> > situation is. Was this done in a test environment
> or
> > production environment? How many DCs are affected?
> >
> > REMARK: E-mail address change: "@logicacmg.com" is
> > now "@logica.com".
> >
> > Met vriendelijke groeten / Kind regards,
> > Ing. Jorge de Almeida Pinto
> > Senior Infrastructure Consultant
> > MVP Windows Server - Directory Services
> >
> > Logica Nederland B.V. (BU ISA Eindhoven)
> > ( Tel : +31-(0)40-29.57.777
> > ( Mobile : +31-(0)6-26.26.62.80
> > * E-mail : Jorge.de.Almeida.Pinto@logica.com
> >
> > ________________________________
> >
> > From: ActiveDir-owner@mail.activedir.org on behalf
> > of Rajeev Karamchand
> > Sent: Fri 2008-03-21 16:21
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] Exchange 2007 schema
> > rollback
> >
> >
> >
> > Sorry
> >
> > I should have phrased it properly.
> > Instead of disabling replication and performing
> > restore. Is there a better way to rollback schema
> > changes
> >
> >
> > rkc
> >
> >
> > --- "Almeida Pinto, Jorge de"
> > <jorge.de.almeida.pinto@logica.com> wrote:
> >
> > > ehhh, you don't.
> > >
> > > Schema changes cannot be undone/removed. You can
> > > only defunct/deactivate
> > >
> > > REMARK: E-mail address change: "@logicacmg.com"
> is
> > > now "@logica.com".
> > >
> > > Met vriendelijke groeten / Kind regards,
> > > Ing. Jorge de Almeida Pinto
> > > Senior Infrastructure Consultant
> > > MVP Windows Server - Directory Services
> > >
> > > Logica Nederland B.V. (BU ISA Eindhoven)
> > > ( Tel : +31-(0)40-29.57.777
> > > ( Mobile : +31-(0)6-26.26.62.80
> > > * E-mail : Jorge.de.Almeida.Pinto@logica.com
> > >
> > > ________________________________
> > >
> > > From: ActiveDir-owner@mail.activedir.org on
> behalf
> > > of Rajeev Karamchand
> > > Sent: Fri 2008-03-21 15:42
> > > To: ActiveDir@mail.activedir.org
> > > Subject: [ActiveDir] Exchange 2007 schema
> rollback
> > >
> > >
> > >
> > > Hi all
> > >
> > >
> > > How does one rollback schema change after
> > > setup/prepareschema.
> > >
> > >
> > > rkc
> > >
> > >
> > >
> > >
> > >
> >
>
____________________________________________________________________________________
> > > Be a better friend, newshound, and
> > > know-it-all with Yahoo! Mobile. Try it now.
> > >
> >
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ :
> > http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> > > http://www.activedir.org/ma/default.aspx
> > >
> > >
> > >
> > >
> > >
> > > This e-mail and any attachment is for authorised
> > use
> > > by the intended recipient(s) only. It may
> contain
> > > proprietary material, confidential information
> > > and/or be subject to legal privilege. It should
> > not
> > > be copied, disclosed to, retained or used by,
> any
> > > other party. If you are not an intended
> recipient
> > > then please promptly delete this e-mail and any
> > > attachment and all copies and inform the sender.
> > > Thank you.
> > >
> > >
> >
> >
> >
> >
> >
>
____________________________________________________________________________________
> > Never miss a thing. Make Yahoo your home page.
> > http://www.yahoo.com/r/hs
> > List info : http://www.activedir.org/List.aspx
> > List FAQ :
> http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.activedir.org/ma/default.aspx
> >
> >
> >
> >
>
=== message truncated ===
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| TG
Posts:45
| | 03/21/2008 12:50 PM |
| Return Receipt
Your RE: [ActiveDir] Exchange 2007 schema rollback
document:
was tony.gordon@hewitt.com
received
by:
at: 03/21/2008 11:46:01 AM
The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| davewade
Posts:19
| | 03/21/2008 2:31 PM |
| Not only is there not a better way, there is not another way full stop. Once a schema change has replicated to a DC it remains replicated to that DC. So for your change, once the change has replicated forest wide, your "backout plan" has to be total forest recovery. You can't do an authurative restore on the schema partition.
So before making a schema change you should check that the OIDs and LDAP strings it is going to add are properly registered as per:-
http://msdn2.microsoft.com/en-us/library/ms676900(VS.85).aspx
(you will have to read a little further in to get all the details)
As others have said you can take DC's off line to stop it replicating to all DCs, but off the top of my head you would need one to off-line DC per domain. if you do then want to use that DC to recover from, you will need to make sure all other DCs are removed from the domain, otherwise the schema change will replicate back.
Dave Wade
0161 474 5456
From: Rajeev Karamchand
Sent: Fri 21/03/2008 15:21
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange 2007 schema rollback
Sorry
I should have phrased it properly.
Instead of disabling replication and performing
restore. Is there a better way to rollback schema
changes
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> ehhh, you don't.
>
> Schema changes cannot be undone/removed. You can
> only defunct/deactivate
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 15:42
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Exchange 2007 schema rollback
>
>
>
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
**********************************************************************
This email, and any files transmitted with it, is confidential and
intended solely for the use of the individual or entity to whom they
are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act.
If you receive this email in error please notify Stockport ICT, Business Services via email.query@stockport.gov.uk and then permanently remove it from your system.
Thank you.
http://www.stockport.gov.uk
**********************************************************************
| | | |
| h2bear@msn.com
Posts:44
| | 03/22/2008 11:51 AM |
| Hi
This assumes you have tested things in a lab of some sort. What
we do and what I have seen people on this forum explain is to perform a
backup of at least one DC in any/all domains involved in the change, then to
isolate the schema master and a few other DCs in your environment (if you
are that big). Then implement the schema update on those few DCs and have
your application group test the functionality of the application. Once they
have test and you feel comfortable that your AD is not broken either than
you open up replication to the rest of the environment. At least this way
you have some believe that things are working. If something does happen,
when you are isolated, then you shutdown the DCs in question, remove network
cables, wipe the drives and then seize the schema master role to a DC that
is not in the replication group. Metadata cleanup of the now dead DCs. Then
rebuild and figure out what went wrong. If you let it replicate to the whole
environment and things go bad, I would hope that you find the problem not to
be in AD, but than you get a very long time at the office rebuilding the
environment and explaining what happened.
Hugh
_____
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dave Wade
Sent: Friday, March 21, 2008 11:30 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange 2007 schema rollback
Not only is there not a better way, there is not another way full stop. Once
a schema change has replicated to a DC it remains replicated to that DC. So
for your change, once the change has replicated forest wide, your "backout
plan" has to be total forest recovery. You can't do an authurative restore
on the schema partition.
So before making a schema change you should check that the OIDs and LDAP
strings it is going to add are properly registered as per:-
<http://msdn2.microsoft.com/en-us/library/ms676900(VS.85).aspx>
http://msdn2.microsoft.com/en-us/library/ms676900(VS.85).aspx
(you will have to read a little further in to get all the details)
As others have said you can take DC's off line to stop it replicating to all
DCs, but off the top of my head you would need one to off-line DC per
domain. if you do then want to use that DC to recover from, you will need to
make sure all other DCs are removed from the domain, otherwise the schema
change will replicate back.
Dave Wade
0161 474 5456
_____
From: Rajeev Karamchand
Sent: Fri 21/03/2008 15:21
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Exchange 2007 schema rollback
Sorry
I should have phrased it properly.
Instead of disabling replication and performing
restore. Is there a better way to rollback schema
changes
rkc
--- "Almeida Pinto, Jorge de"
<jorge.de.almeida.pinto@logica.com> wrote:
> ehhh, you don't.
>
> Schema changes cannot be undone/removed. You can
> only defunct/deactivate
>
> REMARK: E-mail address change: "@logicacmg.com" is
> now "@logica.com".
>
> Met vriendelijke groeten / Kind regards,
> Ing. Jorge de Almeida Pinto
> Senior Infrastructure Consultant
> MVP Windows Server - Directory Services
>
> Logica Nederland B.V. (BU ISA Eindhoven)
> ( Tel : +31-(0)40-29.57.777
> ( Mobile : +31-(0)6-26.26.62.80
> * E-mail : Jorge.de.Almeida.Pinto@logica.com
>
> ________________________________
>
> From: ActiveDir-owner@mail.activedir.org on behalf
> of Rajeev Karamchand
> Sent: Fri 2008-03-21 15:42
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] Exchange 2007 schema rollback
>
>
>
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________
________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
>
>
>
>
> This e-mail and any attachment is for authorised use
> by the intended recipient(s) only. It may contain
> proprietary material, confidential information
> and/or be subject to legal privilege. It should not
> be copied, disclosed to, retained or used by, any
> other party. If you are not an intended recipient
> then please promptly delete this e-mail and any
> attachment and all copies and inform the sender.
> Thank you.
>
>
____________________________________________________________________________
________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
**********************************************************************
This email, and any files transmitted with it, is confidential and
intended solely for the use of the individual or entity to whom they
are addressed. As a public body, the Council may be required to disclose
this email, or any response to it, under the Freedom of Information Act
2000, unless the information in it is covered by one of the exemptions in
the Act.
If you receive this email in error please notify Stockport ICT, Business
Services via email.query@stockport.gov.uk and then permanently remove it
from your system.
Thank you.
http://www.stockport.gov.uk
**********************************************************************
| | | |
| kenniths
Posts:22
| | 03/24/2008 10:12 AM |
| So check out this 1hr webcast that Brian Puhl put together a couple of years ago. Somewhere in the middle, he talks about how MSIT no longer considers schema changes "significant changes". He discusses 2 methods that MSIT uses to protect themselves from a schema change gone haywire - the "Offline DC Method" (which is what I typically recommend) and the "Peel-Off Method" (which works, but IMO introduces more complexity).
http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro Webcast" on the right)
//Ken
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
Sent: Friday, March 21, 2008 11:02 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Exchange 2007 schema rollback
Ooh.. We've just done ours and largely still view it
as an all or nothing step.
Our take was to test the update in a separate and
close to identical environment and understand the
changes being made. Backup the production, notify the
business the impact of what can happen if something
blows, and pull the trigger.
I've seen websites that say disconnect the network
cable on the schema master OR tweak replication links
to control the update, etc.. They seem to provide
prevention mechanisms only which I think really wont
help you when your environment reaches a certain size.
I wish it was easier to recover from a schema update
other that a complete forest restore, but maybe I'm
just naive.
-
RMS
ReadyMade Systems
--- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> Hi all
>
>
> How does one rollback schema change after
> setup/prepareschema.
>
>
> rkc
>
>
>
>
>
____________________________________________________________________________________
> Be a better friend, newshound, and
> know-it-all with Yahoo! Mobile. Try it now.
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.activedir.org/ma/default.aspx
>
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| laurahcomputing
Posts:14
| | 03/24/2008 3:40 PM |
| It's actually worth noting that the MSIT guidance in that webcast is a
bit outmoded (unsurprising, with it being 2 years old and all.) At
Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
prevailing wisdom at MSIT on schema mods is as follows:
* Decide what you want to do
* Understand the ramifications of it
* Test it
* Test it again
* Do it. (But do it with the understanding that the recovery from a
bad/unwanted schema mod is, make no mistake, a -full forest
recovery-.)
In terms of taking the Schema Master offline/stopping outbound
repl/other similar gyrations, the curent MSIT thinking seems to be "We
don't do that anymore", as this seemed to be adding much unnecessary
FUD around the prospect of schema mods.
Does this mean that the advice from 2 years ago doesn't work anymore?
I would say not, and if it's a process that your org is comfortable
with then for my part I would further say 'go with God'. I'm just
reporting on the latest takeaway from "How MSIT does...", as it's
different from what was being advocated in the link listed by Ken.
On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> So check out this 1hr webcast that Brian Puhl put together a couple of years ago. Somewhere in the middle, he talks about how MSIT no longer considers schema changes "significant changes". He discusses 2 methods that MSIT uses to protect themselves from a schema change gone haywire - the "Offline DC Method" (which is what I typically recommend) and the "Peel-Off Method" (which works, but IMO introduces more complexity).
>
> http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro Webcast" on the right)
>
> //Ken
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> Sent: Friday, March 21, 2008 11:02 AM
> To: ActiveDir@mail.activedir.org
>
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
> Ooh.. We've just done ours and largely still view it
> as an all or nothing step.
>
> Our take was to test the update in a separate and
> close to identical environment and understand the
> changes being made. Backup the production, notify the
> business the impact of what can happen if something
> blows, and pull the trigger.
>
> I've seen websites that say disconnect the network
> cable on the schema master OR tweak replication links
> to control the update, etc.. They seem to provide
> prevention mechanisms only which I think really wont
> help you when your environment reaches a certain size.
> I wish it was easier to recover from a schema update
> other that a complete forest restore, but maybe I'm
> just naive.
>
> -
> RMS
> ReadyMade Systems
>
>
> --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
>
> > Hi all
> >
> >
> > How does one rollback schema change after
> > setup/prepareschema.
> >
> >
> > rkc
> >
> >
> >
> >
> >
> ____________________________________________________________________________________
> > Be a better friend, newshound, and
> > know-it-all with Yahoo! Mobile. Try it now.
> >
> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.activedir.org/ma/default.aspx
> >
>
>
>
> ____________________________________________________________________________________
> Looking for last minute shopping deals?
> Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
>
--
-----------------------
Laura E. Hunter
Microsoft MVP - Windows Server System - Directory Services
https://mvp.support.microsoft.com/profile/laura
Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| kenniths
Posts:22
| | 03/24/2008 7:17 PM |
| Looks like I'm outdated on my schema mod guidance. Apologies to all. Thanks for the clarification, Laura H.
//Ken
-----Original Message-----
From: Laura E. Hunter <laurahcomputing@gmail.com>
Sent: Monday, March 24, 2008 3:39 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: Re: [ActiveDir] Exchange 2007 schema rollback
It's actually worth noting that the MSIT guidance in that webcast is a
bit outmoded (unsurprising, with it being 2 years old and all.) At
Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
prevailing wisdom at MSIT on schema mods is as follows:
* Decide what you want to do
* Understand the ramifications of it
* Test it
* Test it again
* Do it. (But do it with the understanding that the recovery from a
bad/unwanted schema mod is, make no mistake, a -full forest
recovery-.)
In terms of taking the Schema Master offline/stopping outbound
repl/other similar gyrations, the curent MSIT thinking seems to be "We
don't do that anymore", as this seemed to be adding much unnecessary
FUD around the prospect of schema mods.
Does this mean that the advice from 2 years ago doesn't work anymore?
I would say not, and if it's a process that your org is comfortable
with then for my part I would further say 'go with God'. I'm just
reporting on the latest takeaway from "How MSIT does...", as it's
different from what was being advocated in the link listed by Ken.
On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> So check out this 1hr webcast that Brian Puhl put together a couple of years ago. Somewhere in the middle, he talks about how MSIT no longer considers schema changes "significant changes". He discusses 2 methods that MSIT uses to protect themselves from a schema change gone haywire - the "Offline DC Method" (which is what I typically recommend) and the "Peel-Off Method" (which works, but IMO introduces more complexity).
>
> http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro Webcast" on the right)
>
> //Ken
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> Sent: Friday, March 21, 2008 11:02 AM
> To: ActiveDir@mail.activedir.org
>
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
> Ooh.. We've just done ours and largely still view it
> as an all or nothing step.
>
> Our take was to test the update in a separate and
> close to identical environment and understand the
> changes being made. Backup the production, notify the
> business the impact of what can happen if something
> blows, and pull the trigger.
>
> I've seen websites that say disconnect the network
> cable on the schema master OR tweak replication links
> to control the update, etc.. They seem to provide
> prevention mechanisms only which I think really wont
> help you when your environment reaches a certain size.
> I wish it was easier to recover from a schema update
> other that a complete forest restore, but maybe I'm
> just naive.
>
> -
> RMS
> ReadyMade Systems
>
>
> --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
>
> > Hi all
> >
> >
> > How does one rollback schema change after
> > setup/prepareschema.
> >
> >
> > rkc
> >
> >
> >
> >
> >
> ____________________________________________________________________________________
> > Be a better friend, newshound, and
> > know-it-all with Yahoo! Mobile. Try it now.
> >
> http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive:
> > http://www.activedir.org/ma/default.aspx
> >
>
>
>
> ____________________________________________________________________________________
> Looking for last minute shopping deals?
> Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
>
--
-----------------------
Laura E. Hunter
Microsoft MVP - Windows Server System - Directory Services
https://mvp.support.microsoft.com/profile/laura
Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| laurahcomputing
Posts:14
| | 03/24/2008 7:52 PM |
| I wouldn't say it warrants an apology - any number of companies still
adhere to the notion of peeling off the Schema Master and disabling
outbound repl prior to doing a schema mod. It's not as if that course
of action suddenly stopped working because the guys in Redmond changed
their minds about advocating it. :-) As I said (and apologies of my
own if I was unclear), I was just offering the updated guidance being
proferred by MSIT on the matter since they've definitely moved away
from what was being advocated in 2005/2006.
On Mon, Mar 24, 2008 at 7:14 PM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> Looks like I'm outdated on my schema mod guidance. Apologies to all. Thanks for the clarification, Laura H.
>
> //Ken
>
>
> -----Original Message-----
> From: Laura E. Hunter <laurahcomputing@gmail.com>
> Sent: Monday, March 24, 2008 3:39 PM
> To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
>
> It's actually worth noting that the MSIT guidance in that webcast is a
> bit outmoded (unsurprising, with it being 2 years old and all.) At
> Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
> prevailing wisdom at MSIT on schema mods is as follows:
>
> * Decide what you want to do
> * Understand the ramifications of it
> * Test it
> * Test it again
> * Do it. (But do it with the understanding that the recovery from a
> bad/unwanted schema mod is, make no mistake, a -full forest
> recovery-.)
>
> In terms of taking the Schema Master offline/stopping outbound
> repl/other similar gyrations, the curent MSIT thinking seems to be "We
> don't do that anymore", as this seemed to be adding much unnecessary
> FUD around the prospect of schema mods.
>
> Does this mean that the advice from 2 years ago doesn't work anymore?
> I would say not, and if it's a process that your org is comfortable
> with then for my part I would further say 'go with God'. I'm just
> reporting on the latest takeaway from "How MSIT does...", as it's
> different from what was being advocated in the link listed by Ken.
>
>
> On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> > So check out this 1hr webcast that Brian Puhl put together a couple of years ago. Somewhere in the middle, he talks about how MSIT no longer considers schema changes "significant changes". He discusses 2 methods that MSIT uses to protect themselves from a schema change gone haywire - the "Offline DC Method" (which is what I typically recommend) and the "Peel-Off Method" (which works, but IMO introduces more complexity).
> >
> > http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro Webcast" on the right)
> >
> > //Ken
> >
> > -----Original Message-----
> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> > Sent: Friday, March 21, 2008 11:02 AM
> > To: ActiveDir@mail.activedir.org
> >
> > Subject: Re: [ActiveDir] Exchange 2007 schema rollback
> >
> > Ooh.. We've just done ours and largely still view it
> > as an all or nothing step.
> >
> > Our take was to test the update in a separate and
> > close to identical environment and understand the
> > changes being made. Backup the production, notify the
> > business the impact of what can happen if something
> > blows, and pull the trigger.
> >
> > I've seen websites that say disconnect the network
> > cable on the schema master OR tweak replication links
> > to control the update, etc.. They seem to provide
> > prevention mechanisms only which I think really wont
> > help you when your environment reaches a certain size.
> > I wish it was easier to recover from a schema update
> > other that a complete forest restore, but maybe I'm
> > just naive.
> >
> > -
> > RMS
> > ReadyMade Systems
> >
> >
> > --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> >
> > > Hi all
> > >
> > >
> > > How does one rollback schema change after
> > > setup/prepareschema.
> > >
> > >
> > > rkc
> > >
> > >
> > >
> > >
> > >
> > ____________________________________________________________________________________
> > > Be a better friend, newshound, and
> > > know-it-all with Yahoo! Mobile. Try it now.
> > >
> > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> > > http://www.activedir.org/ma/default.aspx
> > >
> >
> >
> >
> > ____________________________________________________________________________________
> > Looking for last minute shopping deals?
> > Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
>
>
>
> --
> -----------------------
> Laura E. Hunter
> Microsoft MVP - Windows Server System - Directory Services
> https://mvp.support.microsoft.com/profile/laura
> Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
> Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
>
--
-----------------------
Laura E. Hunter
Microsoft MVP - Windows Server System - Directory Services
https://mvp.support.microsoft.com/profile/laura
Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| kenniths
Posts:22
| | 03/24/2008 8:07 PM |
|  Let me rephrase my apology - sorry for misleading everyone into believing that MSIT still uses this methodology for schema mods.
So you wouldn't believe how relevant your response was. I'm sitting in the airport finalizing my presentation on "How MSIT Does Active Directory" for a pretty important customer meeting tomorrow. I've been working with Brian over the past week in developing this presentation and I've double-checked *most* of the content with him to make sure it's up to date... Included in the information that I did *not* double check is the change management process for schema mods - go figure. Maybe I'll just send him the whole deck for review...
The one year that I skip DEC.... 
//Ken
-----Original Message-----
From: Laura E. Hunter <laurahcomputing@gmail.com>
Sent: Monday, March 24, 2008 6:47 PM
To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
Subject: Re: [ActiveDir] Exchange 2007 schema rollback
I wouldn't say it warrants an apology - any number of companies still
adhere to the notion of peeling off the Schema Master and disabling
outbound repl prior to doing a schema mod. It's not as if that course
of action suddenly stopped working because the guys in Redmond changed
their minds about advocating it. :-) As I said (and apologies of my
own if I was unclear), I was just offering the updated guidance being
proferred by MSIT on the matter since they've definitely moved away
from what was being advocated in 2005/2006.
On Mon, Mar 24, 2008 at 7:14 PM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> Looks like I'm outdated on my schema mod guidance. Apologies to all. Thanks for the clarification, Laura H.
>
> //Ken
>
>
> -----Original Message-----
> From: Laura E. Hunter <laurahcomputing@gmail.com>
> Sent: Monday, March 24, 2008 3:39 PM
> To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
>
> It's actually worth noting that the MSIT guidance in that webcast is a
> bit outmoded (unsurprising, with it being 2 years old and all.) At
> Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
> prevailing wisdom at MSIT on schema mods is as follows:
>
> * Decide what you want to do
> * Understand the ramifications of it
> * Test it
> * Test it again
> * Do it. (But do it with the understanding that the recovery from a
> bad/unwanted schema mod is, make no mistake, a -full forest
> recovery-.)
>
> In terms of taking the Schema Master offline/stopping outbound
> repl/other similar gyrations, the curent MSIT thinking seems to be "We
> don't do that anymore", as this seemed to be adding much unnecessary
> FUD around the prospect of schema mods.
>
> Does this mean that the advice from 2 years ago doesn't work anymore?
> I would say not, and if it's a process that your org is comfortable
> with then for my part I would further say 'go with God'. I'm just
> reporting on the latest takeaway from "How MSIT does...", as it's
> different from what was being advocated in the link listed by Ken.
>
>
> On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com> wrote:
> > So check out this 1hr webcast that Brian Puhl put together a couple of years ago. Somewhere in the middle, he talks about how MSIT no longer considers schema changes "significant changes". He discusses 2 methods that MSIT uses to protect themselves from a schema change gone haywire - the "Offline DC Method" (which is what I typically recommend) and the "Peel-Off Method" (which works, but IMO introduces more complexity).
> >
> > http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro Webcast" on the right)
> >
> > //Ken
> >
> > -----Original Message-----
> > From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> > Sent: Friday, March 21, 2008 11:02 AM
> > To: ActiveDir@mail.activedir.org
> >
> > Subject: Re: [ActiveDir] Exchange 2007 schema rollback
> >
> > Ooh.. We've just done ours and largely still view it
> > as an all or nothing step.
> >
> > Our take was to test the update in a separate and
> > close to identical environment and understand the
> > changes being made. Backup the production, notify the
> > business the impact of what can happen if something
> > blows, and pull the trigger.
> >
> > I've seen websites that say disconnect the network
> > cable on the schema master OR tweak replication links
> > to control the update, etc.. They seem to provide
> > prevention mechanisms only which I think really wont
> > help you when your environment reaches a certain size.
> > I wish it was easier to recover from a schema update
> > other that a complete forest restore, but maybe I'm
> > just naive.
> >
> > -
> > RMS
> > ReadyMade Systems
> >
> >
> > --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> >
> > > Hi all
> > >
> > >
> > > How does one rollback schema change after
> > > setup/prepareschema.
> > >
> > >
> > > rkc
> > >
> > >
> > >
> > >
> > >
> > ____________________________________________________________________________________
> > > Be a better friend, newshound, and
> > > know-it-all with Yahoo! Mobile. Try it now.
> > >
> > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> > > http://www.activedir.org/ma/default.aspx
> > >
> >
> >
> >
> > ____________________________________________________________________________________
> > Looking for last minute shopping deals?
> > Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
>
>
>
> --
> -----------------------
> Laura E. Hunter
> Microsoft MVP - Windows Server System - Directory Services
> https://mvp.support.microsoft.com/profile/laura
> Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
> Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
>
--
-----------------------
Laura E. Hunter
Microsoft MVP - Windows Server System - Directory Services
https://mvp.support.microsoft.com/profile/laura
Author: _Active Directory Consultant's Field Guide_ (http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_ (http://tinyurl.com/z7svl)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| laurarobinson
Posts:96
| | 03/24/2008 8:37 PM |
| And a not insignificant part of the new guidance is intended to reduce the
unwarranted terror of schema changes for known software, not to indicate any
changes to the technology. :-)
The Other Laura
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura E. Hunter
Sent: Monday, March 24, 2008 7:48 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Exchange 2007 schema rollback
I wouldn't say it warrants an apology - any number of companies still
adhere to the notion of peeling off the Schema Master and disabling
outbound repl prior to doing a schema mod. It's not as if that course
of action suddenly stopped working because the guys in Redmond changed
their minds about advocating it. :-) As I said (and apologies of my
own if I was unclear), I was just offering the updated guidance being
proferred by MSIT on the matter since they've definitely moved away
from what was being advocated in 2005/2006.
On Mon, Mar 24, 2008 at 7:14 PM, Ken St. Cyr <Ken.StCyr@microsoft.com>
wrote:
> Looks like I'm outdated on my schema mod guidance. Apologies to all.
Thanks for the clarification, Laura H.
>
> //Ken
>
>
> -----Original Message-----
> From: Laura E. Hunter <laurahcomputing@gmail.com>
> Sent: Monday, March 24, 2008 3:39 PM
> To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
>
> It's actually worth noting that the MSIT guidance in that webcast is a
> bit outmoded (unsurprising, with it being 2 years old and all.) At
> Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
> prevailing wisdom at MSIT on schema mods is as follows:
>
> * Decide what you want to do
> * Understand the ramifications of it
> * Test it
> * Test it again
> * Do it. (But do it with the understanding that the recovery from a
> bad/unwanted schema mod is, make no mistake, a -full forest
> recovery-.)
>
> In terms of taking the Schema Master offline/stopping outbound
> repl/other similar gyrations, the curent MSIT thinking seems to be "We
> don't do that anymore", as this seemed to be adding much unnecessary
> FUD around the prospect of schema mods.
>
> Does this mean that the advice from 2 years ago doesn't work anymore?
> I would say not, and if it's a process that your org is comfortable
> with then for my part I would further say 'go with God'. I'm just
> reporting on the latest takeaway from "How MSIT does...", as it's
> different from what was being advocated in the link listed by Ken.
>
>
> On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com>
wrote:
> > So check out this 1hr webcast that Brian Puhl put together a couple of
years ago. Somewhere in the middle, he talks about how MSIT no longer
considers schema changes "significant changes". He discusses 2 methods that
MSIT uses to protect themselves from a schema change gone haywire - the
"Offline DC Method" (which is what I typically recommend) and the "Peel-Off
Method" (which works, but IMO introduces more complexity).
> >
> > http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT Pro
Webcast" on the right)
> >
> > //Ken
> >
> > -----Original Message-----
> > From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> > Sent: Friday, March 21, 2008 11:02 AM
> > To: ActiveDir@mail.activedir.org
> >
> > Subject: Re: [ActiveDir] Exchange 2007 schema rollback
> >
> > Ooh.. We've just done ours and largely still view it
> > as an all or nothing step.
> >
> > Our take was to test the update in a separate and
> > close to identical environment and understand the
> > changes being made. Backup the production, notify the
> > business the impact of what can happen if something
> > blows, and pull the trigger.
> >
> > I've seen websites that say disconnect the network
> > cable on the schema master OR tweak replication links
> > to control the update, etc.. They seem to provide
> > prevention mechanisms only which I think really wont
> > help you when your environment reaches a certain size.
> > I wish it was easier to recover from a schema update
> > other that a complete forest restore, but maybe I'm
> > just naive.
> >
> > -
> > RMS
> > ReadyMade Systems
> >
> >
> > --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> >
> > > Hi all
> > >
> > >
> > > How does one rollback schema change after
> > > setup/prepareschema.
> > >
> > >
> > > rkc
> > >
> > >
> > >
> > >
> > >
> >
____________________________________________________________________________
________
> > > Be a better friend, newshound, and
> > > know-it-all with Yahoo! Mobile. Try it now.
> > >
> > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > > List info : http://www.activedir.org/List.aspx
> > > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > > List archive:
> > > http://www.activedir.org/ma/default.aspx
> > >
> >
> >
> >
> >
____________________________________________________________________________
________
> > Looking for last minute shopping deals?
> > Find them fast with Yahoo! Search.
http://tools.search.yahoo.com/newsearch/category.php?category=shopping
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> > List info : http://www.activedir.org/List.aspx
> > List FAQ : http://www.activedir.org/ListFAQ.aspx
> > List archive: http://www.activedir.org/ma/default.aspx
> >
>
>
>
> --
> -----------------------
> Laura E. Hunter
> Microsoft MVP - Windows Server System - Directory Services
> https://mvp.support.microsoft.com/profile/laura
> Author: _Active Directory Consultant's Field Guide_
(http://tinyurl.com/7f8ll)
> Author: _Active Directory Cookbook, Second Edition_
(http://tinyurl.com/z7svl)
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
>
--
-----------------------
Laura E. Hunter
Microsoft MVP - Windows Server System - Directory Services
https://mvp.support.microsoft.com/profile/laura
Author: _Active Directory Consultant's Field Guide_
(http://tinyurl.com/7f8ll)
Author: _Active Directory Cookbook, Second Edition_
(http://tinyurl.com/z7svl)
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
No virus found in this incoming message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.21.8/1340 - Release Date: 3/23/2008
6:50 PM
No virus found in this outgoing message.
Checked by AVG.
Version: 7.5.519 / Virus Database: 269.21.8/1340 - Release Date: 3/23/2008
6:50 PM
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| amulnick
Posts:79
| | 03/25/2008 8:13 PM |
| Unwarranted terror? Hmm... I've never had unwarranted feelings of terror
around schema mods. I've had fear and trepidation at being told by a vendor
to implement their "innocous" schema mod, especially when they do not
understand it themselves. 'Cause that usually leads ot multiple changes in
rapid succession. And then I get told that "well, we ditched that vendor
because they suck and are too expensive." Meanwhile, I'd be left with a
"low-impact" change that will be around long after I'm gone.
I know the last part is my fault for being such a babe in the woods in this
business.
The added complexity has a place, it's just not technical is what I'm
hearing you say
On Mon, Mar 24, 2008 at 8:34 PM, Laura A. Robinson <
laurarobinson@verizon.net> wrote:
> And a not insignificant part of the new guidance is intended to reduce the
> unwarranted terror of schema changes for known software, not to indicate
> any
> changes to the technology. :-)
>
> The Other Laura
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Laura E. Hunter
> Sent: Monday, March 24, 2008 7:48 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] Exchange 2007 schema rollback
>
> I wouldn't say it warrants an apology - any number of companies still
> adhere to the notion of peeling off the Schema Master and disabling
> outbound repl prior to doing a schema mod. It's not as if that course
> of action suddenly stopped working because the guys in Redmond changed
> their minds about advocating it. :-) As I said (and apologies of my
> own if I was unclear), I was just offering the updated guidance being
> proferred by MSIT on the matter since they've definitely moved away
> from what was being advocated in 2005/2006.
>
> On Mon, Mar 24, 2008 at 7:14 PM, Ken St. Cyr <Ken.StCyr@microsoft.com>
> wrote:
> > Looks like I'm outdated on my schema mod guidance. Apologies to all.
> Thanks for the clarification, Laura H.
> >
> > //Ken
> >
> >
> > -----Original Message-----
> > From: Laura E. Hunter <laurahcomputing@gmail.com>
> > Sent: Monday, March 24, 2008 3:39 PM
> > To: ActiveDir@mail.activedir.org <ActiveDir@mail.activedir.org>
> > Subject: Re: [ActiveDir] Exchange 2007 schema rollback
> >
> >
> > It's actually worth noting that the MSIT guidance in that webcast is a
> > bit outmoded (unsurprising, with it being 2 years old and all.) At
> > Brian's "How MSIT does..." chat at DEC a few weeks ago, the current
> > prevailing wisdom at MSIT on schema mods is as follows:
> >
> > * Decide what you want to do
> > * Understand the ramifications of it
> > * Test it
> > * Test it again
> > * Do it. (But do it with the understanding that the recovery from a
> > bad/unwanted schema mod is, make no mistake, a -full forest
> > recovery-.)
> >
> > In terms of taking the Schema Master offline/stopping outbound
> > repl/other similar gyrations, the curent MSIT thinking seems to be "We
> > don't do that anymore", as this seemed to be adding much unnecessary
> > FUD around the prospect of schema mods.
> >
> > Does this mean that the advice from 2 years ago doesn't work anymore?
> > I would say not, and if it's a process that your org is comfortable
> > with then for my part I would further say 'go with God'. I'm just
> > reporting on the latest takeaway from "How MSIT does...", as it's
> > different from what was being advocated in the link listed by Ken.
> >
> >
> > On Mon, Mar 24, 2008 at 10:11 AM, Ken St. Cyr <Ken.StCyr@microsoft.com>
> wrote:
> > > So check out this 1hr webcast that Brian Puhl put together a couple of
> years ago. Somewhere in the middle, he talks about how MSIT no longer
> considers schema changes "significant changes". He discusses 2 methods
> that
> MSIT uses to protect themselves from a schema change gone haywire - the
> "Offline DC Method" (which is what I typically recommend) and the
> "Peel-Off
> Method" (which works, but IMO introduces more complexity).
> > >
> > > http://technet.microsoft.com/en-us/library/bb735188.aspx (click "IT
> Pro
> Webcast" on the right)
> > >
> > > //Ken
> > >
> > > -----Original Message-----
> > > From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of RMS
> > > Sent: Friday, March 21, 2008 11:02 AM
> > > To: ActiveDir@mail.activedir.org
> > >
> > > Subject: Re: [ActiveDir] Exchange 2007 schema rollback
> > >
> > > Ooh.. We've just done ours and largely still view it
> > > as an all or nothing step.
> > >
> > > Our take was to test the update in a separate and
> > > close to identical environment and understand the
> > > changes being made. Backup the production, notify the
> > > business the impact of what can happen if something
> > > blows, and pull the trigger.
> > >
> > > I've seen websites that say disconnect the network
> > > cable on the schema master OR tweak replication links
> > > to control the update, etc.. They seem to provide
> > > prevention mechanisms only which I think really wont
> > > help you when your environment reaches a certain size.
> > > I wish it was easier to recover from a schema update
> > > other that a complete forest restore, but maybe I'm
> > > just naive.
> > >
> > > -
> > > RMS
> > > ReadyMade Systems
> > >
> > >
> > > --- Rajeev Karamchand <rkaramchand@yahoo.com> wrote:
> > >
> > > > Hi all
> > > >
> > > >
> > > > How does one rollback schema change after
> > > > setup/prepareschema.
> > > >
> > > >
> > > > rkc
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
>
> ____________________________________________________________________________
> ________
> > > > Be a better friend, newshound, and
> > > > know-it-all with Yahoo! Mobile. Try it now.
> > > >
> > > http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > > > List info : http://www. |
|
|