Adrestore.Net Vs NTDSUtil

I am sure there is an expert out there who used both Adrestore.Net as well as (AD authoritative Restore+NTDSutil). Can you please tell me the difference?

it seems like the Adrestore.net is more simpler than restoring the AD system state from Backup then restarting the DC to AD restore mode then use NTDSUtil to authoritatively restore the objects.

Since Adrestore.net is simpler and free, why would administrators use the lengthy procedure of AD Authoritative restore, I have described.

Thanks
jskfanAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Mike KlineConnect With a Mentor Commented:
adrestore.net and the command line adrestore do a process known as "tombstone reanimation" when you use those tools it does bring the object back but all the objects that are stripped out when an object is deleted are not brought back.  With an authoritative restore they are brought back.

Gil has a great article that goes into more details   http://technet.microsoft.com/en-us/magazine/2007.09.tombstones.aspx

See the section "recovering object attributes"

This also all improves once you get the recycle bin feature in a 2008 R2 forest because then the objects are restored with all attributes intact (no more marking as authoritative or getting back a "tombstoned" object.

Thanks

Mike
0
 
jskfanAuthor Commented:
According to the article in the above link:

Adrestore is easier to use than LDP.exe.
Adrestore doesn't restore Group membership


OK,  for now I guess the best way to go is Authoritative Restore.
it says that you take a DC offline, but I believe if you have 3,4,5 DCs replicating, taking one offline will not do any harm.

Let me see if I am correct in implementing an Authoritative restore.
1-While the DC is still online, I should do System State restore from the backup tape.
2-When the restore of system state to the online DC is completed successfuly, I will reboot the DC to AD Restore Mode, by pressing F8 at the reboot.
3-Run NTDSutil and implement the authoritative restore.
4-Restart the DC to normal mode.
I believe this is how it should be done.
I prefer the authoritative restore since I don't have to worry if there is any object or attribute missing.

 
0
 
jskfanAuthor Commented:
sorry, I guess step 1 should be:
1-Take the DC offline, then do System State restore from the backup tape.
0
Get 10% Off Your First Squarespace Website

Ready to showcase your work, publish content or promote your business online? With Squarespace’s award-winning templates and 24/7 customer service, getting started is simple. Head to Squarespace.com and use offer code ‘EXPERTS’ to get 10% off your first purchase.

 
jskfanAuthor Commented:
I believe I am still confused on step 1:
1-Restart the DC into AD restore mode, then restore the system state.
Stay in the AD Restore Mode and use NTDsutil to authoritatively restore the deleted object.
0
 
Mike KlineCommented:
Yes you stay in DSRM and mark the object as authoritative.
0
 
jskfanAuthor Commented:
<<Yes you stay in DSRM and mark the object as authoritative.>>

The confusion is when Restoring the System state of the yesterday backup:

-Should I leave the DC as it is, online and replicating with other DCs, and restore the system state?
-Should I disconnect it from the network, for instance unplug the network cable, and restore the system state?
-Should I restart in DSRM and restore the system state?
0
 
jskfanAuthor Commented:
http://technet.microsoft.com/en-us/library/bb727048.aspx

I guess I have to log into DRSM mode and do system state restore from backup tape then staying at the DRSM mode I will use ntdsutil to do the authoritative restore.
0
 
Mike KlineConnect With a Mentor Commented:
Yup you have it right, I was going to take some screen shots but didn't have time today.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.