RE: [ActiveDir] Partial AD Restore

[England, Christopher M]

Title: Message

Does this affect other DC's? If they bring one DC down to do this, are the other 2 (or how many ever) still running and ok? And when the restore happens, they would just need to synchronize before they restart the DC they used to restore?

 

Thanks again,

Chris

-----Original Message-----
From: Rachui, Scott [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 23, 2002 6:49 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Partial AD Restore

To restore objects that were accidentally deleted, you'll need to do something called an authoritative restore.  It requires that you reboot a domain controller into Directory Services Restore Mode and run an authoritative restore.  You can select the specific OU that you'd like to restore, or you can select the entire directory.

 

With AD, a restore is definitely not 'all or nothing', which is a very good thing!  Make sure you get familiar with the NTDSUTIL tool as this is the tool you'll be using to run this authoritative restore.  Microsoft has some very good white papers on how to do this, including a Disaster Recovery Guide for Active Directory that gives you step-by-step instructions.

 

I hope this helps.

 

Scott

-----Original Message-----
From: England, Christopher M [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 23, 2002 6:43 AM
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] Partial AD Restore

I did a silly thing and deleted some user groups out of an OU. I am not in charge of the domain, but I have asked the domain admins to attempt to restore those groups. Is this even possible with Active Directory? I have heard that an AD restore is all or nothing. Any info would be great!

 

Chris England

Systems Administrator

Indiana University