3.13 Backup Access Control Information

3.14 Save the DCDB

The Domain Control Database (DCDB) is located on the domain controller containing information about definitions of network resources that users might access. Included in the DCDB are user's automatic logon assignments, public applications definitions, and the details of resources shared through aliases.

The DCDB consists of files that reside in a directory tree (\IBMLAN\DCDB) and can be backed up during the normal operation of your server. If not already done on a regular base, the next three sections describe methods to do this.

3.14.1 Manual Backup

A simple way to make a copy of the DCDB subtree is by use of the XCOPY command:

XCOPY C:\IBMLAN\DCDB <drive>:\DCDB /S /E /H /R /T /V

This command above copies the entire subtree to the directory \DCDB located on a drive specified by <drive>.

3.14.2 Replication to a Backup Domain Controller (BDC)

If you have set up one or more Backup Domain Controllers (BDC), a copy of the DCDB should already be there. This is done automatically by the DCDBREPL service. Check that all directories under \IBMLAN\DCDB contain OK.RP$, which indicates that replication is functioning properly. An example is shown in Section 6.9.5 Verifying that DCDB Replication Was Successful.

3.14.3 Back up with LSMT

The LAN Server Management Tools, described in Section 3.8.2 LAN Server Management Tools (LSMT) and in Appendix B. LAN Server Management Tools (LSMT), are perfect for extracting DCDB information and storing it in ASCII files, which later can be restored by LSMT if necessary.

3.15 Remove 386 HPFS Access Controls