• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 333
  • Last Modified:

Object DELETED

Suppose I delete an object, neither did I take a backup, how can I bring him back I relies my mistake after 10 days.  
0
kunalclk
Asked:
kunalclk
  • 3
  • 2
1 Solution
 
Mike KlineCommented:
You can use adrestore  http://blogs.technet.com/b/asiasupp/archive/2006/12/14/using-adrestore-tool-to-restore-deleted-objects.aspx

It won't bring back all the attributes though (not as good as an authoritative restore).   Using a tool like adrestore you use something known as "tombstone reanimation"

Thanks

Mike
0
 
kunalclkAuthor Commented:
thanks also I think AD restore can not be of use after 30 days. Since every object remains till 30 days. Also I cannot understand:-
# By default, users are disabled and user passwords are empty after the above method is performed. Note that if you try to bulk enable objects and some of them have passwords which do not meet complexity/length requirements, you will not be able to re-enable them. Selecting one of them will show a more verbose error message in 2003. Your option then is to change their password or lower your password policy requirements.
#  ADRestore cannot restore the group membership for a user. Meanwhile, not all attribute data can be restored.


I cannot understand password term, since all will have a password to login. Also what is group membership?

Please also add a comment to http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26908773.html
0
 
Mike KlineCommented:
Objects get permanently deleted at the end of the tombstone lifetime which is usually 60 or 180 days, you can check using Mark's procedures   http://markparris.co.uk/2010/02/01/active-directory-tombstone-lifetime-set-it-to-the-correct-value/

So if you have a password policy that defines complexity and or length then you will have to set a password on the restored accounts.

When you restore using this method (tombstone reanimation) the group memberships are not restored so a user might be a member of several groups.  Those are not updated.

...the lesson here is to try and have a good system state backup.

Thanks

Mike
0
 
kunalclkAuthor Commented:
Mark very thanks also please do something to the questions lying open where no attention has been made. I hope LDP utility cannot help neither ntdsutil.
0
 
kunalclkAuthor Commented:
thnx
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now