Solved

Usage of LDP.exe

Posted on 2013-05-13
6
241 Views
Last Modified: 2013-05-24
As far as I know LDP.exe is a GUI tool used to search Active Directory. I was not sure that we can restore deleted object from AD , as shown in this video (unfortunately it a silent video):
http://www.youtube.com/watch?v=ujUUVI5wsNM

I guess I am not aware of other functions that LDP.exe might be capable of. Please let me know of other functions of LDP.exe other than searching AD.

Thanks
0
Comment
Question by:jskfan
  • 3
  • 3
6 Comments
 
LVL 57

Expert Comment

by:Mike Kline
ID: 39162410
Searching is the main use but you can also manipulate objects, more on that here

http://support.microsoft.com/kb/260745

The best book that covers ldp in my opinion is

http://www.amazon.com/Directory-Forestry-Investigating-Managing-Attributes/dp/0954421809/ref=sr_1_1?ie=UTF8&qid=1368467273&sr=8-1&keywords=john+craddock+active+directory

The only affordable way to get it these days is used

Thanks

Mike
0
 

Author Comment

by:jskfan
ID: 39162597
If we delete an object from Active Directory, the only method I know is using NTDSUTIL for an authoritative restore, but will have to restart the DC into Directory Services Restore mode.

So does that mean with LDP.exe, we do not to go through the method I mentioned above ?
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 500 total points
ID: 39162631
For an authoritative LDP won't work.   LDP does what is known as tombstone reanimation

http://technet.microsoft.com/en-us/magazine/2007.09.tombstones.aspx

Once you get to the AD recycle bin it becomes much easier.

Thanks

Mike
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:jskfan
ID: 39162744
you mean before garbage collector is initiated, LDP can help to restore deleted objects  , but not after ?
0
 
LVL 57

Accepted Solution

by:
Mike Kline earned 500 total points
ID: 39162751
yes before but they don't come back with all the attributes, the adrestore tool can do the same thing.

Thanks

Mike
0
 

Author Closing Comment

by:jskfan
ID: 39195728
Thank you
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now