kcn
asked on
Domain Computer Account and Domain User Account accidentally deleted
I understand when any object ( like domain computer account or domain user account ) accidentaly deleted from DC , we can use AD Authoritative Restore , or , perform an object restore using ADRESTORE .
Other than above 2 methods , can we direct recreate the same domain computer account ( which was accidentally deleted) on the DC and rejoin the affect Domain Computer to DC ????
For domain user account , I understand that we cannot recreate the same name on the DC because the previous domain user's account security setting and data were lost once we deleted the user account . How about Domain Computer Account , anything missing even we recreate the same domain computer account name for it ???
Other than above 2 methods , can we direct recreate the same domain computer account ( which was accidentally deleted) on the DC and rejoin the affect Domain Computer to DC ????
For domain user account , I understand that we cannot recreate the same name on the DC because the previous domain user's account security setting and data were lost once we deleted the user account . How about Domain Computer Account , anything missing even we recreate the same domain computer account name for it ???
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Chris ,
I thought the Domain User Profile ( not roaming profile ) are stored on Domain Local Computer. My question is if we accidentally delete the domain user account name from DC ( not from the domain computer ) ??
I need to confirm first whether the Domain User Profile is stored on Domain Computer , or, on DC before I ask further question.
I thought the Domain User Profile ( not roaming profile ) are stored on Domain Local Computer. My question is if we accidentally delete the domain user account name from DC ( not from the domain computer ) ??
I need to confirm first whether the Domain User Profile is stored on Domain Computer , or, on DC before I ask further question.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Chris ,
Are you saying that once the Domain User Name is deleted from the Users' container ( Active Directory Users & Computers > Users container > delete specific user account name ) , the associated SID will be gone and the that domain user no longer can log into SAME user profile even we recreate the same domain user account name in DC ??
In the other words , the domain user no longer can access the previous data he created once the domain user account name is deleted from Users' container on the DC ( Active Directory Users & Computers > Users container > delete specific user account ) ????
Sorry , I should try this by myself .. Anyway , I am waiting for your confirmation .
Are you saying that once the Domain User Name is deleted from the Users' container ( Active Directory Users & Computers > Users container > delete specific user account name ) , the associated SID will be gone and the that domain user no longer can log into SAME user profile even we recreate the same domain user account name in DC ??
In the other words , the domain user no longer can access the previous data he created once the domain user account name is deleted from Users' container on the DC ( Active Directory Users & Computers > Users container > delete specific user account ) ????
Sorry , I should try this by myself .. Anyway , I am waiting for your confirmation .
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Please correct my understanding from you
Domain Computer Account : We can recreate the same computer account name and reassign the
previous permission and GPO that granted to this computer and
everything will back on track ???
Domain User Account : Other than permission and GPO apply to User Account , what else are
associated with domain user account and we need to pay attention ???
with