Re: backup and recover of AD objects

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks guys for all the helpfull suggestions. I downloaded the DSCT tool http://lindstrom.nullsession.com/?cat=7 and i was able to restore a deleted object but i wasnt able to restore any of the attributes of the deleted object, the object that was deleted was a user account that had a mailbox on an exchange 2003 server, so not sure if this tool can restore msexchange attributes?

I want to install Windows server backup on all my 2008 DC, so i can take system state backups. All the DC have a raid 1 and a raid 5 array, the raid 5 has no data on it and the raid 1 is where the OS lives. I want to use the raid 5 E:\ as the target for the system state backups. My question is what type of backup must i do so i can do a system state restore or a bare metal restore? and if i boot the DC into DSRM in order to do an authorative restore of an object, can i point WBADMIN to the backup file ( is it a ..vhd?) that is stored on the E:\ and then do the restore of the deleted object?

Many thanks
"Marcin" <marcin@xxxxxxxxxxxxxxxx> wrote in message news:uTfOqIpgJHA.1288@xxxxxxxxxxxxxxxxxxxxxxx
Most often snapshots are used to determine which backup could be used to authoritatively restore a deleted object (keep in mind that they are not a substitute for backups, which, incidentally, you can also mount using the same dsamain utility) - eliminating this way the need to actually perform a restore to make such determination.
As far as your question is concerned, you can actually undelete AD objects (assuming that you perform this operation before the tombstone lifetime interval passes) without resorting to restore (as described in painfully detailed fashion in http://support.microsoft.com/kb/840001), however, such objects retain only a handful of attributes (by default, only the mandatory ones). So, potentially, you can recover deleted objects by combining undeletion with populating missing attributes based on the info extracted from a snapshot. This does not require third party utilities (LDIFDE will do just fine - although you can also use any of AD admin utilities that allow you to target specific port). The process is not straightforward (since it essentially involves export/import) - so you might want to take advantage of 3rd party tools (e.g. Snapshot Recover Tool from http://www.one-identity.net/tools/snapshot/, Directory Service Comparison Tool from http://lindstrom.nullsession.com/?page_id=11, or Active Directory Explorer from Sysinternals at http://technet.microsoft.com/en-us/sysinternals/bb963907.aspx)...

hth
Marcin

"skip" <shofmann@xxxxxxx> wrote in message news:880F4446-37DD-43C7-BC9D-65DAAE85D3FA@xxxxxxxxxxxxxxxx
Hello all

I am running in a 2003 native mode AD forest. I have two DC that are running windows 2008 and three that are running Windows 2003. I know i can take a snap shot using ntdsutil of the AD database running on windows 2008 and mount the database. I can also connect to the snap shot with ADUC after running dsamain -dbpath -ldapport # Once I connect to the snapshot i can see any delted users that were deleted after the snapshot was taken. Now how in the heck can i restore this object? Am assuming i need a 3rd paryt tool for this?



.

Relevant Pages

  • Re: RAIDING different size drives
    ... You dont need to restore specific parts on a hard drive failure with the OS not mirrored. ... it being too easy to delete your good mirror by making it part of a new raid, ... But people *do* use it by mistake, thinking they are doing a proper backup. ... with a Win live CD to get a look at the state of the hard drives when deciding what has died etc. ...
    (comp.sys.ibm.pc.hardware.storage)
  • Re: [opensuse] 10.2 no RAID to 11.0 RAID 1
    ... I cannot simply just restore the backup as other email would ... have been added to the live mail server that would be lost if it was ... This is a situation for which RAID is better, ...
    (SuSE)
  • Re: Stoopid but pressing backup question
    ... I wouldn't call them useless. ... It is better than nothing even if you have to do a base system install to get the replacement system to a point where you can restore. ... `vgdisplay -v' with each backup, ... Does clonezilla remember Logical Volume or Software Raid ...
    (Fedora)
  • Re: backup and recover of AD objects
    ... Your process works for doing a bare metal restore of the DC, but can i also use this procedure to perform an authorative or non authorative restore of AD? ... I want to install Windows server backup on all my 2008 DC, so i can take system state backups. ... All the DC have a raid 1 and a raid 5 array, the raid 5 has no data on it and the raid 1 is where the OS lives. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ANOUNCEMENT: zsplit, unzsplit: free linux tools to make a full drive image backup!
    ... > Disk images provide a powerful backup-restore solution and are exact ... > have an entire copy of your system that you can restore. ... BTW it would be neat if you could also handle software RAID. ... backup the RAIDs themselves and create a new RAID before restoring, ...
    (comp.os.linux.development.apps)