We have been using that here as well, and outside of the somewhat less then
intuitive interface it has worked very well for us. It will not solve the
problem today of recovering a deleted group (unless you have an offline DC
that still has it) but it will for future issues.
We have used it to recover GPOs, OUs, computers, users and groups - both in
production and in testing.
Regards;
James R. Day
Active Directory Core Team
Office of the Chief Information Officer
National Park Service
(202) 354-1464 (direct)
(202) 371-1549 (fax)
[EMAIL PROTECTED]
|---------+---------------------------------->
| | "Ryan A. Conrad" |
| | <[EMAIL PROTECTED]> |
| | Sent by: |
| | [EMAIL PROTECTED]|
| | tivedir.org |
| | |
| | |
| | 02/17/2005 12:58 PM GMT|
| | Please respond to |
| | ActiveDir |
|---------+---------------------------------->
>------------------------------------------------------------------------------------------------------------------------------|
|
|
| To: ActiveDir@mail.activedir.org
|
| cc: (bcc: James Day/Contractor/NPS)
|
| Subject: RE: [ActiveDir] HELP!!! Undelete required
|
>------------------------------------------------------------------------------------------------------------------------------|
I agree with Neil. I've seen good results with ERDisk from Aelita, which
is
now called Recovery Manager for AD from Quest.
-Ryan
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ruston, Neil
Sent: Thursday, February 17, 2005 10:17 AM
To: 'ActiveDir@mail.activedir.org'
Subject: RE: [ActiveDir] HELP!!! Undelete required
Have you considered a 3rd party tool which offers object level restores?
There
is no rule that states that MS must provide all the functionality that we
require, after all :)
Have you considered delayed replication sites, which only receive changes
on
an infrequent basis? DCs in these sites can then be used to auth restore
the
deleted object and thus re-animate it back into the environment, before
they
have received the deletion event.
Of course, your most proactive measure is to ensure that only a minimal
number
of admins have the ability to delete objects. The removal of a group or OU
can
be catastrophic and should be mitigated against proactively.
HTH,
neil
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Aramide Adebanjo
Sent: 17 February 2005 08:12
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] HELP!!! Undelete required
Hi guys,
I have resolved the issue..it could have been worse however but the group
deleted was a distribution group. The painful fact was that it wasone that
had
700 member users and I did not know howi could repopulate that fast.
However
I
had done a csvde export just the day beforeand I ran iquery to get all
users
with the required attribute. Simply put, I recreated the distribution group
again. I just pasted all the members into a text file with all usenames
seperated by a semicolon and then pasted them all into the new group. The
names were all resolved.
My fear is this; what if it was a user or a security group that was
mistakenly
deleted. Micorsosft shld have a solution that enables u undelete..like a
Cntrl
Z.mistakes can be made by anyone...a mouse slip etc...no one is perfect.
Thx all...
A restore is one option I don't ever want to take in a production
environment.!!
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of joe
Sent: Wednesday, February 16, 2005 9:32 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] HELP!!! Undelete required
Heh, I actually typoed that response. It should have been
> If you had K3 you would have at
> least 2 options, one painful, one really painful. Here you only have
> the really painful answer.
The really painful answer is obviously recovery from a backup. I have
never
really done this in production and I have no intention of ever doing it.
It
scares me. If something was deleted, I have faith that the person who
deleted something is someone who could be trusted to have made that
decision. If they made a bad decision, the trust was misplaced. This is
yet
another reason to not let people have native rights in the directory
like
that.
The painful answer is to recover the object from the deleted objects
container. Depending on the type of object and the schema mods made you
will
have various levels of frustration with this because not everything
comes
back the way you want. By default, very little comes back. However, I
much
prefer this solution to recovering from backup. This is something I
would
actually do.
joe
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura
E.
Sent: Wednesday, February 16, 2005 2:26 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] HELP!!! Undelete required
Joe,
Out of curiousity, what do you define as the "painful" versus "really
painful" option in 2K3? Now I'm curious. :-)
Laura
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Aramide
> Adebanjo
> Sent: Wednesday, February 16, 2005 1:54 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] HELP!!! Undelete required
>
> Ahhhhh!!!!
>
> I need a miracle.....a technical miracle.....
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of joe
> Sent: Wednesday, February 16, 2005 7:36 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] HELP!!! Undelete required
>
>
> You aren't going to like the answer... If you had K3 you would have at
> least 2 options, one painful, one really painful. Here you only have
> the painful answer.
>
>
> joe
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Aramide
> Adebanjo
> Sent: Wednesday, February 16, 2005 1:27 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] HELP!!! Undelete required
>
> Hi guys,
>
> What is the fastest way of recovering a group object deleted in AD
> 2000?? The changes have been replicated to all other DCs
>
> I want something precise, nothing fanciful, something tested and
> proved working...pls don't let it involve restoring from system state
> backups, that's an option I don't want to follow...
>
> There should be a way......
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
============================================================================
==
This message is for the sole use of the intended recipient. If you received
this message in error please delete it and notify us. If this message was
misdirected, CSFB does not waive any confidentiality or privilege. CSFB
retains and monitors electronic communications sent through its network.
Instructions transmitted over this system are not binding on CSFB until
they
are confirmed by us. Message transmission is not guaranteed to be secure.
============================================================================
==
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
