Solved

Object DELETED

Posted on 2011-03-24
5
304 Views
Last Modified: 2012-05-11
Suppose I delete an object, neither did I take a backup, how can I bring him back I relies my mistake after 10 days.  
0
Comment
Question by:kunalclk
  • 3
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 35207102
You can use adrestore  http://blogs.technet.com/b/asiasupp/archive/2006/12/14/using-adrestore-tool-to-restore-deleted-objects.aspx

It won't bring back all the attributes though (not as good as an authoritative restore).   Using a tool like adrestore you use something known as "tombstone reanimation"

Thanks

Mike
0
 
LVL 2

Author Comment

by:kunalclk
ID: 35207949
thanks also I think AD restore can not be of use after 30 days. Since every object remains till 30 days. Also I cannot understand:-
# By default, users are disabled and user passwords are empty after the above method is performed. Note that if you try to bulk enable objects and some of them have passwords which do not meet complexity/length requirements, you will not be able to re-enable them. Selecting one of them will show a more verbose error message in 2003. Your option then is to change their password or lower your password policy requirements.
#  ADRestore cannot restore the group membership for a user. Meanwhile, not all attribute data can be restored.


I cannot understand password term, since all will have a password to login. Also what is group membership?

Please also add a comment to http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26908773.html
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35208028
Objects get permanently deleted at the end of the tombstone lifetime which is usually 60 or 180 days, you can check using Mark's procedures   http://markparris.co.uk/2010/02/01/active-directory-tombstone-lifetime-set-it-to-the-correct-value/

So if you have a password policy that defines complexity and or length then you will have to set a password on the restored accounts.

When you restore using this method (tombstone reanimation) the group memberships are not restored so a user might be a member of several groups.  Those are not updated.

...the lesson here is to try and have a good system state backup.

Thanks

Mike
0
 
LVL 2

Author Comment

by:kunalclk
ID: 35208505
Mark very thanks also please do something to the questions lying open where no attention has been made. I hope LDP utility cannot help neither ntdsutil.
0
 
LVL 2

Author Closing Comment

by:kunalclk
ID: 35336342
thnx
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question