• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1820
  • Last Modified:

Adrestore.Net Vs NTDSUtil

I am sure there is an expert out there who used both Adrestore.Net as well as (AD authoritative Restore+NTDSutil). Can you please tell me the difference?

it seems like the Adrestore.net is more simpler than restoring the AD system state from Backup then restarting the DC to AD restore mode then use NTDSUtil to authoritatively restore the objects.

Since Adrestore.net is simpler and free, why would administrators use the lengthy procedure of AD Authoritative restore, I have described.

Thanks
0
jskfan
Asked:
jskfan
  • 5
  • 3
2 Solutions
 
Mike KlineCommented:
adrestore.net and the command line adrestore do a process known as "tombstone reanimation" when you use those tools it does bring the object back but all the objects that are stripped out when an object is deleted are not brought back.  With an authoritative restore they are brought back.

Gil has a great article that goes into more details   http://technet.microsoft.com/en-us/magazine/2007.09.tombstones.aspx

See the section "recovering object attributes"

This also all improves once you get the recycle bin feature in a 2008 R2 forest because then the objects are restored with all attributes intact (no more marking as authoritative or getting back a "tombstoned" object.

Thanks

Mike
0
 
jskfanAuthor Commented:
According to the article in the above link:

Adrestore is easier to use than LDP.exe.
Adrestore doesn't restore Group membership


OK,  for now I guess the best way to go is Authoritative Restore.
it says that you take a DC offline, but I believe if you have 3,4,5 DCs replicating, taking one offline will not do any harm.

Let me see if I am correct in implementing an Authoritative restore.
1-While the DC is still online, I should do System State restore from the backup tape.
2-When the restore of system state to the online DC is completed successfuly, I will reboot the DC to AD Restore Mode, by pressing F8 at the reboot.
3-Run NTDSutil and implement the authoritative restore.
4-Restart the DC to normal mode.
I believe this is how it should be done.
I prefer the authoritative restore since I don't have to worry if there is any object or attribute missing.

 
0
 
jskfanAuthor Commented:
sorry, I guess step 1 should be:
1-Take the DC offline, then do System State restore from the backup tape.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
jskfanAuthor Commented:
I believe I am still confused on step 1:
1-Restart the DC into AD restore mode, then restore the system state.
Stay in the AD Restore Mode and use NTDsutil to authoritatively restore the deleted object.
0
 
Mike KlineCommented:
Yes you stay in DSRM and mark the object as authoritative.
0
 
jskfanAuthor Commented:
<<Yes you stay in DSRM and mark the object as authoritative.>>

The confusion is when Restoring the System state of the yesterday backup:

-Should I leave the DC as it is, online and replicating with other DCs, and restore the system state?
-Should I disconnect it from the network, for instance unplug the network cable, and restore the system state?
-Should I restart in DSRM and restore the system state?
0
 
jskfanAuthor Commented:
http://technet.microsoft.com/en-us/library/bb727048.aspx

I guess I have to log into DRSM mode and do system state restore from backup tape then staying at the DRSM mode I will use ntdsutil to do the authoritative restore.
0
 
Mike KlineCommented:
Yup you have it right, I was going to take some screen shots but didn't have time today.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now