AD Recovery or data extraction tools.

Posted on 2004-10-22
Last Modified: 2010-04-19
I have a situation where some objects in the AD have been changed over the past several months. We are attempting to narrow down the timeframe. My understanding is that the only method would be to recover the AD iteratively using archived exports or Veritas based backups (we perform each of these each night) going back one week at a time for each week that we’ve sent images offsite. Its also my understanding that the “recovery server” used for this purpose must be of the exact same make/model/config as the original AD server. We do not have such a server available. Is there an alternative recovery method? Are there third party tools, freeware or otherwise, that can extract specific content from an AD export file (much like mailbox extraction tools used on Exchange backups).  
Question by:thx9000
    LVL 11

    Accepted Solution

    You have to do a authorative restore of your AD database.
    Its done on a DC in AD-Restore Mode.
    Reboot, got into AD-Restore mode and restore the needed part of Ad as a authorative restore.
    This is done with ntdsutil.
    but take care, you should know what you are doning.

    Author Comment

    I don't think that answers my question. I need to know if I can do my restore on some alternate hardware. Specifically the hardware I'll be using is not the same make/model as the server from which the backup was made. Say for instance the original DC was an HP DL380 and I want to use an HP DL320 in a lab environment to do this recovery. Is that even possible? It's my understanding that this cannot be done. Essentially I am asking if I can do the restore in an offline lab utilizing un-like hardware. Alternatively I would like to find some extraction type tool that I could use cull information out of the export image. Such tools do exist for Exchange. For example I can take an exchange backup, dump it back to disk and using 3rd party tools I can go in and find an individual user's mailbox. All this without actually recovering the Exchange Server. Does what I am asking make sense now?
    LVL 11

    Expert Comment

    its how i sayed.
    you can install on hardware whatever you want.
    you have to install a running server os and dcpromo it. its no must to restore the os!
    then you have to restore the AD.
    its independend of the os installation.
    and you can do this restore for every domain/ou/object you want

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    When bringing a new server on line, you may see an error that says: The Security System detected an authenticaton error for the server ldap/xxxxxxxt. The failure code from the authentication protocal Kerberos was "There are currently no logon se…
    I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    856 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now