Have ever encountered the following scenarios?
When an object is deleted from Active Directory, it isn't actually removed butis instead marked as deleted by an internal marker called a tombstone. If you have valid system state backup, you can refer to the following knowledge base article to restore the object:
How to restore deleted user accounts and their group memberships in Active Directoryhttp://support.microsoft.com/?id=840001
In case you don’t have any system state backup, you can use ADRestore to restore tombstoned objects. ADRestore is a command-line utility that lists and lets you restore deleted Windows Server 2003 AD objects. You can use ADRestore to restore tombstoned objects without performing an authoritative backup restore. You can download the utility at:
http://www.microsoft.com/technet/sysinternals/utilities/ADRestore.mspx
After you install ADRestore, you can restore an object by running the command ADRestore –r. ADRestore removes the 'isDeleted' TRUE attribute from tombstoned accounts and changes the RDN back to the previous path, effectively resurrecting it.
The -r tells ADRestore to prompt the user before restoring the AD objectsto their original location. When you run the command, you'll see messages similar to the following:
ADRestore v1.1by Mark RussinovichSysinternals - www.sysinternals.com
Enumerating domain deleted objects:
cn: mytest1DEL:d7076a72-8020-44c8-b562-0c5b9132d7a5distinguishedName: CN=mytest1\0ADEL:d7076a72-8020-44c8-b562-0c5b9132d7a5, CN=Deleted Objects,DC=PYM1,DC=COMlastKnownParent: OU=mytest\0ADEL:657cde20-9d7e-43f2-8700-ad72029d2aec, CN=Deleted Objects,DC=PYM1,DC=COM
Do you want to restore this object (y/n)? y
Restore succeeded.
distinguishedName: OU=mytest\0ADEL:657cde20-9d7e-43f2-8700-ad72029d2aec, CN=Deleted Objects,DC=PYM1,DC=COM lastKnownParent: DC=PYM1,DC=COM
Found 2 items matching search criteria.
Notes:
ADRestore -r comp
ADRESTORE will restore only SID, ObjectGUID, LastKnownParent and SAMAccountName
Reason
========
When the object was deleted, all the attribute values except SID, ObjectGUID, LastKnownParent and SAMAccountName were stripped.
Hello, of course I came to visit your site and thanks for letting me know about it.
I just read this post and wanted to say it is full of number one resources. Some I am familiar with. For those who don’t know these other sites they are in for a treat as there is a lot to learn there.
Mitunter kann es passieren, dass man (versehentlich) eine OU im Active Directory löscht. Häufige Ursache
hi
i have one doubt about this command. can we perform this command in real time secnario
Greetings once again from the support trenches here on the CORE team.   I want to talk a bit about
SYMPTOM ================== You tried to bring Network Name Resources online but could not, following
[Today's post comes to us courtesy of Shawn Sullivan from Commercial Technical Support] If you have ever