After the restore process, the user account was disabled, so I had to re-enable the account, reset the password, and restore group membership. I loaded both AD Explorer and Active Directory Users and Computers, and verified user object 5-9 was restored to it’s original location, the students OU. The user object 5-9 was found by ADRestore, and since I specified the -r switch I was asked if I wanted to restore the object, rather than the utility automatically restoring all tombstoned objects that matched the search filter. I saved ADRestore to my Windows 2003 server’s hard drive, then searched for tombstoned objects containing the character ‘5’ (as in user object 5-9) The documentation is very limited, what I found was KB840001 and this blog entry.
Next, I downloaded Sysinternals’ ADRestore program, which is a command line based utility that can restore AD tombstoned objects. I also browsed the tree within Active Directory Users and Computers and verified the object really was gone.
Next, I deleted user 5-9, and used AD Explorer’s search function to verify the user is gone from the tree. Using AD Explorer, I saved a current snapshot of my tree.Īfter the snapshot completed I verified user 5-9 exists at this time.
0 kommentar(er)
