Home All Groups Group Topic Archive Search About
Author
8 Mar 2006 9:40 PM
thbowen
If a group is accidentally deleted, can you restore it from the deleted
objects container?  Does it retain its original SID?  do the members get
restored?

Author
8 Mar 2006 10:10 PM
Jorge de Almeida Pinto [MVP]
> If a group is accidentally deleted, can you restore it from the deleted
> objects container?

YES

> Does it retain its original SID?

YES

>do the members get restored?

NO

do an authoritative restore of the group to restore everything of the group.

* boot into DSRM
* restore the system state
* don't boot the DC right away after the restore
* open a command prompt
* ntdsutil
* auth rest
* restore object "distinguished name of the group" (some like: restore
object "cn=yourgroup,ou=yourou,dc=yourdomain,dc=yourtld"
* answer yes
* q
* q
* reboot the server again into normal mode

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
Show quoteHide quote
"thbowen" <thbo***@discussions.microsoft.com> wrote in message
news:D6832FA2-5BD7-4FB2-90A1-074C49622907@microsoft.com...
> If a group is accidentally deleted, can you restore it from the deleted
> objects container?  Does it retain its original SID?  do the members get
> restored?
Author
9 Mar 2006 1:55 PM
thbowen
Just to make sure I am clear,  If I restore the group from deleted objects
the members do not get restored, but if I do a authoratative restore the
members do get restored?    Does this have to be 2003 SP1?

Show quoteHide quote
"Jorge de Almeida Pinto [MVP]" wrote:

> > If a group is accidentally deleted, can you restore it from the deleted
> > objects container?
>
> YES
>
> > Does it retain its original SID?
>
> YES
>
> >do the members get restored?
>
> NO
>
> do an authoritative restore of the group to restore everything of the group.
>
> * boot into DSRM
> * restore the system state
> * don't boot the DC right away after the restore
> * open a command prompt
> * ntdsutil
> * auth rest
> * restore object "distinguished name of the group" (some like: restore
> object "cn=yourgroup,ou=yourou,dc=yourdomain,dc=yourtld"
> * answer yes
> * q
> * q
> * reboot the server again into normal mode
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>
> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
>
> BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
> -----------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test before implementing!
> -----------------------------------------------------------------------------
>
>
> -----------------------------------------------------------------------------
> "thbowen" <thbo***@discussions.microsoft.com> wrote in message
> news:D6832FA2-5BD7-4FB2-90A1-074C49622907@microsoft.com...
> > If a group is accidentally deleted, can you restore it from the deleted
> > objects container?  Does it retain its original SID?  do the members get
> > restored?
>
>
>
Author
9 Mar 2006 9:29 PM
Jorge de Almeida Pinto [MVP]
> Just to make sure I am clear,  If I restore the group from deleted objects
> the members do not get restored, but if I do a authoratative restore the
> members do get restored?
yes, just like I said

> Does this have to be 2003 SP1?
it depends.... was that group a member of other groups?
if it is w2k3 sp1 it will help a lot otherwise some additional work is
needed

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
-----------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
-----------------------------------------------------------------------------


-----------------------------------------------------------------------------
Show quoteHide quote
"thbowen" <thbo***@discussions.microsoft.com> wrote in message
news:DA583FCE-CB35-49E4-A0ED-5A278791FB02@microsoft.com...
> Just to make sure I am clear,  If I restore the group from deleted objects
> the members do not get restored, but if I do a authoratative restore the
> members do get restored?    Does this have to be 2003 SP1?
>
> "Jorge de Almeida Pinto [MVP]" wrote:
>
>> > If a group is accidentally deleted, can you restore it from the deleted
>> > objects container?
>>
>> YES
>>
>> > Does it retain its original SID?
>>
>> YES
>>
>> >do the members get restored?
>>
>> NO
>>
>> do an authoritative restore of the group to restore everything of the
>> group.
>>
>> * boot into DSRM
>> * restore the system state
>> * don't boot the DC right away after the restore
>> * open a command prompt
>> * ntdsutil
>> * auth rest
>> * restore object "distinguished name of the group" (some like: restore
>> object "cn=yourgroup,ou=yourou,dc=yourdomain,dc=yourtld"
>> * answer yes
>> * q
>> * q
>> * reboot the server again into normal mode
>>
>> --
>>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Windows Server - Directory Services
>>
>> BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
>> -----------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test before implementing!
>> -----------------------------------------------------------------------------
>>
>>
>> -----------------------------------------------------------------------------
>> "thbowen" <thbo***@discussions.microsoft.com> wrote in message
>> news:D6832FA2-5BD7-4FB2-90A1-074C49622907@microsoft.com...
>> > If a group is accidentally deleted, can you restore it from the deleted
>> > objects container?  Does it retain its original SID?  do the members
>> > get
>> > restored?
>>
>>
>>