Solved

Restore deleted Group Policy objects, Windows Server 2003 R2

Posted on 2012-03-12
14
1,897 Views
Last Modified: 2012-06-27
Somebody has deleted several AD Group Policies from the GP snap-in, but they are still in the SYSVOL folder on the DC.  Is there anyway I can undlete them as we still have the policy in the SYSVOL?

The server is Server 2003 R2, thanks in advance.
0
Comment
Question by:icuadmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
  • +3
14 Comments
 
LVL 8

Expert Comment

by:Elmar-H
ID: 37708895
You can restore this file with a systemstate.

Resource: http://support.microsoft.com/kb/842252
0
 
LVL 1

Author Comment

by:icuadmin
ID: 37708907
Yeah I'd seen that, it's for a 2000 server but I'm sure it's the same for 2003.  I'm really looking for some kind of super dooper tool to 'undelete' these GPO's if there's one out there....???
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 37708914
http://support.microsoft.com/kb/842252

there is a specific Ms guide that will get you started

assuming you haven't set up specific GPO backups
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 1

Author Comment

by:icuadmin
ID: 37708916
Thanks, but that's the same link as above.
0
 
LVL 8

Expert Comment

by:Elmar-H
ID: 37708919
No, i think there is no tool. Sorry
0
 
LVL 11

Expert Comment

by:Venugopal N
ID: 37708975
Do you use GPMC, if Yes you can restore the GPO from the GPMC.
http://technet.microsoft.com/en-us/library/bb964305.aspx

Once the GPO is restored it wont apply to the OU's which it had applied earlier.To do this

http://support.microsoft.com/?id=231288
0
 
LVL 1

Author Comment

by:icuadmin
ID: 37708981
Isn't the AD recycle bin a 2008 server only feature?
0
 
LVL 8

Expert Comment

by:Elmar-H
ID: 37708988
yes, only 2008 :-(
0
 
LVL 4

Expert Comment

by:Praveenraj04
ID: 37709064
Hi Friend,

Please try the below link read the full article that will help you restore your Deleted Group policy snap-ins.  

http://technet.microsoft.com/en-us/library/cc783147%28v=ws.10%29.aspx

http://dani3lr.wordpress.com/2009/06/22/restore-deleted-objects-in-active-directory-database-using-tombstone-reanimation-ldp-exe/

Please let me known if you have any issues and queries.

Thanks,
P. Praveen Raj
0
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 37709124
sorry, were no posts when i typed that out.

bit late for your current issue but when you have them back there is a guide for backing them up

http://msdn.microsoft.com/en-us/library/windows/desktop/aa814151%28v=vs.85%29.aspx
0
 
LVL 7

Expert Comment

by:hirenvmajithiya
ID: 37713576
try quest's "Recovery Manager"
0
 
LVL 1

Author Comment

by:icuadmin
ID: 37713589
Will this work in my situation, i.e. I didn't have it installed, I install it and it can 'undelete' things, or does it have to have been installed in the first place (before the GPO's were deleted) to do any good?
0
 
LVL 7

Accepted Solution

by:
hirenvmajithiya earned 500 total points
ID: 37713594
It should work even if you install it right now

Hiren
0
 
LVL 1

Author Closing Comment

by:icuadmin
ID: 37741384
This is GREAT software, thanks.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Pop-up allow list 6 42
powershell script to get all AD user without displayname 4 44
Windows 2012 R2 DeDup vs SAN DeDup 6 33
Duplicate SPN entries 1 24
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question