Avatar of mjm21
mjm21Flag for United States of America

asked on 

How to restore a deleted OU from Active Directory 2003

We need to restore an OU from Active Directory 2003 that has been deleted.  
Active Directory

Avatar of undefined
Last Comment
a_ro_no
Avatar of Phiwi Moyo
Phiwi Moyo
Flag of Germany image

If you were backingup your System State you might be able to see the following.

http://www.petri.co.il/recovering-deleted-items-active-directory.htm
Avatar of a_ro_no
a_ro_no
Flag of Greece image

I agree with the above, another option is if you have a lag site, to mark the replica of the remote DC that hasn't recieved the latest deletion as authoritative, and replicate back.
ASKER CERTIFIED SOLUTION
Avatar of Amit
Amit
Flag of India image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of yo_bee
yo_bee
Flag of United States of America image

There are a few ways you can recover a Deleted Object.
http://support.microsoft.com/kb/840001


once recovered you probably should set the Object to not be deleted by setting Protec Obejct from accidental deletion
Avatar of yo_bee
yo_bee
Flag of United States of America image

LDP.exe can be used and this is in the link I posted under manual restore.
This will require no down time.
Avatar of a_ro_no
a_ro_no
Flag of Greece image

Does ADRestore.net restore the group memberships of the deleted user objects? I dont think so...
When an object is deleted then only few importand attributes remain untouched. Meaning that a lot of information gets lost. This information can you recover only with a restore.
Avatar of Sajid Shaik M
Sajid Shaik M
Flag of Saudi Arabia image

the microsoft way is authoritative restoration
which need previous bakup of system state data of active directory domain....

http://technet.microsoft.com/en-us/library/cc779573(WS.10).aspx

and the other way is as daniel petri link above adrestore.net tool

http://www.petri.co.il/recovering-deleted-items-active-directory.htm 


all the best
Avatar of yo_bee
yo_bee
Flag of United States of America image

I would look into using LDP.exe to manually change the attributte.

Avatar of a_ro_no
a_ro_no
Flag of Greece image

Again it depends what kind of and how many objects you used to have in the OU that has been accidentaly deleted. In case you need to restore ALL the information (for example the group memberships of the users), there are only three ways to achieve this

1) Restore from a system state backup
2) Mark a GC that hasnt got the deletion yet as authoritative using ntdsutil.
3) Upgrade to 2008 and make use of the recycle bin feature.
Active Directory
Active Directory

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

86K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo