RE: [ActiveDir] Possible to Restore a Deleted Distribution List?

Wed, 15 Feb 2006 10:00:05 -0800

Title: Possible to Restore a Deleted Distribution List?
that would be useing tombstone (online) recovery if you've not previously backed up the attributes (such as the group's membership) via some other tools.
 
however, if you have a "normal" systemstate backup of at least one of your DCs (which should be an absolute MUST anyways), then it's actually not much of a problem to undelete the group - even the memberships come back just fine (independent if Win2k or Win2k3).
 
Just boot your DC to Directory Services Restore Mode, restore the system state - after you're done, do NOT reboot the DC, instead follow these steps to perform an authoritative restore of your DL (you'd want to use the restore object command):
 

1.      DC must still be in Directory Services Restore Mode

2.      Open the Command Prompt

3.      Type ntdsutil <enter>

4.      Type authoritative restore <enter>

5.      Type restore subtree part_to_restore <enter>, where as part_to_restore is the Distinguished Name of the AD object that needs to be restored.

For example, if the "Accounts" OU in the mydom.com domain is to be restored, the command is: restore subtree "OU=Accounts,DC=MyDom,DC=com

Note: It is also possible to restore single objects by using the restore object command in the same manner. Furthermore, the entire AD database can be restored authoritatively by using the restore database command, but this is not recommended and should only be used as a last resort.

6.      Acknowledge the authoritative restore to increase the version numbers of the  respective objects and their attributes.

7.      Exit ntdsutil by typing quit <enter> twice

8.      Reboot the DC to normal AD mode

 
After reboot, your recoverd DL will replicate out to your other DCs just fine, incl. its memberships.
 
For more infos, check out this WP: http://www.netpro.com/forum/files/Active_Directory_Disaster_Recovery-Part-I.pdf
 
/Guido

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond
Sent: Mittwoch, 15. Februar 2006 17:22
To: [email protected]
Subject: RE: [ActiveDir] Possible to Restore a Deleted Distribution List?

You can restore the group object in 2k3, but, the membership you cannot. I believe Joe's admod tool (www.joeware.net) has an undelete function.
 
Thanks,
Brian Desmond
[EMAIL PROTECTED]
 
c - 312.731.3132
 
 
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Packett
Sent: Wednesday, February 15, 2006 11:04 AM
To: [email protected]
Subject: [ActiveDir] Possible to Restore a Deleted Distribution List?

One of my coworkers accidentally deleted a distribution list in AD.  I've been searching all over, but is it possible to restore a deleted distribution list (group)?  We're on Exchange 2003 if that helps.

Thanks in advance.

IRS Circular 230  Disclosure:  To ensure compliance with requirements imposed by the IRS, we inform you that any U.S. federal tax advice in this communication (including attachments) is not intended or written by Fenwick & West LLP to be used, and cannot be used, for the purpose of (i) avoiding penalties under the Internal Revenue Code or (ii) promoting, marketing, or recommending to another party any transaction or matter addressed herein.
ATTENTION:
The information contained in this message may be legally privileged and confidential.  It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited.
If you have received this message in error, please immediately notify the sender and/or Fenwick & West LLP by telephone at (650) 988-8500 and delete or destroy any copy of this message.

Reply via email to