Disaster Recovery, AD RMS：灾难恢复，AD RMS.docx

Information Protection Using Active DirectoryRights Management ServicesPrepared byPrasada MeegadaTechnical Lead, Information Security Team, Bangalore, Microsoft IndiaAbstractThis white paper provides RIL with helpful information and describe best practices on disaster recovery of Microsoft Active Directory Rights Management Services (AD RMS) for Microsoft Windows Server? 2008 deployment. This discussion is most appropriate for RIL as per there requirements of disaster recovery scenarios. This paper analyses the potential breakdown points in an RMS system and the possible impacts on the infrastructure and sensitive data should a loss of service occur. In addition, the paper includes suggestions as to how to mitigate the risks of failure and how to restore an AD RMS services.Revision and Signoff SheetChange RecordDateAuthorVersionChange reference1.0Initial draft for review/discussion1.1Inclusion of section 2.7 Backups required in a worst case DR scenario to rebuild AD RMS clusterReviewersNameVersion approvedPositionDateTable of Contents1Introduction32Disaster Recovery42.1Recovering from a cluster node failure42.2Recovering from a full cluster failure62.3Recovering from a database failure62.3.1Restoring AD RMS services when contingency database is not available72.3.2Restoring AD RMS services when contingency database is available72.4Recovering from a catastrophic cluster and database failure82.5Recovering AD RMS protected content112.6Decommissioning an AD RMS cluster142.6.1 Enable the decommissioning service142.6.2 Modify permissions on the decommissioning pipeline142.6.3 Configure AD RMS enabled applications to use decommissioning pipeline162.7Backups required in a worst case DR scenario to rebuild AD RMS cluster16Appendix A: Exporting AD RMS databases17Export Trusted Publishing Domain17Stop IIS, Ensure MSMQ is empty18Create AD RMS database backup19Appendix B: Preparing a new AD RMS database server22Add DisableStrictNameChecking registry key22Enable SQL firew