Solved

Object DELETED

Posted on 2011-03-24
5
318 Views
Last Modified: 2012-05-11
Suppose I delete an object, neither did I take a backup, how can I bring him back I relies my mistake after 10 days.  
0
Comment
Question by:kunalclk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 35207102
You can use adrestore  http://blogs.technet.com/b/asiasupp/archive/2006/12/14/using-adrestore-tool-to-restore-deleted-objects.aspx

It won't bring back all the attributes though (not as good as an authoritative restore).   Using a tool like adrestore you use something known as "tombstone reanimation"

Thanks

Mike
0
 
LVL 2

Author Comment

by:kunalclk
ID: 35207949
thanks also I think AD restore can not be of use after 30 days. Since every object remains till 30 days. Also I cannot understand:-
# By default, users are disabled and user passwords are empty after the above method is performed. Note that if you try to bulk enable objects and some of them have passwords which do not meet complexity/length requirements, you will not be able to re-enable them. Selecting one of them will show a more verbose error message in 2003. Your option then is to change their password or lower your password policy requirements.
#  ADRestore cannot restore the group membership for a user. Meanwhile, not all attribute data can be restored.


I cannot understand password term, since all will have a password to login. Also what is group membership?

Please also add a comment to http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26908773.html
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 35208028
Objects get permanently deleted at the end of the tombstone lifetime which is usually 60 or 180 days, you can check using Mark's procedures   http://markparris.co.uk/2010/02/01/active-directory-tombstone-lifetime-set-it-to-the-correct-value/

So if you have a password policy that defines complexity and or length then you will have to set a password on the restored accounts.

When you restore using this method (tombstone reanimation) the group memberships are not restored so a user might be a member of several groups.  Those are not updated.

...the lesson here is to try and have a good system state backup.

Thanks

Mike
0
 
LVL 2

Author Comment

by:kunalclk
ID: 35208505
Mark very thanks also please do something to the questions lying open where no attention has been made. I hope LDP utility cannot help neither ntdsutil.
0
 
LVL 2

Author Closing Comment

by:kunalclk
ID: 35336342
thnx
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question