Restartable Active Directory Domain Services (RADDS) is one of those new features in Windows Server 2008 that seems to be relatively unimportant at first glance. However, in certain environments it might be a killer feature. It enables you to stop or restart Active Directory Domain Services (AS DS) on a Domain Controller for maintenance tasks.
- Poll: How reliable are ChatGPT and Bing Chat? - Tue, May 23 2023
- Pip install Boto3 - Thu, Mar 24 2022
- Install Boto3 (AWS SDK for Python) in Visual Studio Code (VS Code) on Windows - Wed, Feb 23 2022
For instance, you could do an offline defragmentation or restart the AD DS after a security update. In Windows Server 2003 you had to reboot the whole server or even boot the server into Directory Services Restore Mode. This is still possible with Windows Server 2008, but shutting down the Active Directory Domain Services is certainly much more convenient and reduces downtime. Another important advantage is that other applications running on the DC are not affected.
This manual states that you can use the Component Services snap-in to restart AD DS, but I didn't even find the "Services node" in Windows Server 2008 Beta 3. You can stop or restart the AD DS with the Services snap-in. However, the Domain Controller service mentioned in the manual doesn't exist either. In Beta 3 the name simply is "Active Directory Domain Services". When I stopped the AD DS, the Services snap-in also shut down Kerberos Key Distribution Center, Intersite Messaging, DNS Server, and DFS replication.
The manual asserts that you can logon locally with disabled AD DS, like it is possible in Directory Services Restore Mode, but this didn't work in my test. However, I was able to logon as long as there was another DC online. A DC with disabled AD DS acts like a normal member server. When I started AD DS again, the services snap-in didn't start the other services that were shutdown before automatically. So, one has to do that manually.
Subscribe to 4sysops newsletter!
I think this feature is especially interesting for smaller organizations with only one DC. If your DC also hosts other applications, you will certainly appreciate the fact that you don't have to reboot the whole server for AD maintenance work. In general, however, I wouldn't recommend using a DC for other purposes.
To stop and restart AD DS, you must be a member of the built-in Administrators group on the domain controller.
To stop and restart AD DS
Click Start, click Administrative Tools, and then click Computer Management.
Double-click Services and Applications, and then click Services.
To stop AD DS, in the details pane, right-click Active Directory Domain Services, and then click Stop.
In Stop Other Services, review the list of dependent services that will also stop when you stop AD DS, and then click Yes.
If you right-click Active Directory Domain Services, and then click Properties, you see a list of the other services that depend on AD DS to function and another list of services that AD DS depends on to function. All dependent services stop before AD DS stops.
Right-click Active Directory Domain Services again, and then click Start.
Dependent services start before AD DS starts.
Use the following procedure to query whether AD DS is running or stopped on a domain controller.