Results 1 to 5 of 5

Thread: Recover or view tombstone.. is possible?

  1. #1
    Andrea Guest

    Recover or view tombstone.. is possible?

    Hi guys,
    I have read this well done paper on Recovery of AD:
    http://technet.microsoft.com/en-us/m.../cc162459.aspx

    This paper says also how perform auth restore in AD environment. And I
    've keep in mind this:

    "When Active Directory deletes an object, it doesn’t physically delete
    the object from the DIT. Instead, it marks the object as deleted by
    setting its isDeleted attribute to true, which renders the object
    invisible to normal directory operations."

    so i know that these delete (marks) objects are tombstone and windows
    2003 retain these for 180 days.
    Now, this is my question:

    Is possible to recover delete objects without restore SystemState from
    backup?
    And again, how i can view delete objects stored in DIT ?

    Thanks very much
    bye
    Andrea



  2. #2
    Elan Shudnow Guest

    Re: Recover or view tombstone.. is possible?

    You can use ADRestore:
    http://technet.microsoft.com/en-us/s.../bb963906.aspx

    Just keep in mind you won't get all the AD attributes back due to them
    being stripped when it became a tombstone. There are other methods such
    as using 3rd party tools where you can mount a DIT and recover specific
    objects from a backup with all their attributes.

    --
    Elan Shudnow
    http://www.shudnow.net



    "Andrea" <netsecurity@tiscali.it> wrote in message
    news:0510f783-7aa0-4b41-9da1-30c7c356336c@m73g2000hsh.googlegroups.com:

    > Hi guys,
    > I have read this well done paper on Recovery of AD:
    > http://technet.microsoft.com/en-us/m.../cc162459.aspx
    >
    > This paper says also how perform auth restore in AD environment. And I
    > 've keep in mind this:
    >
    > "When Active Directory deletes an object, it doesn't physically delete
    > the object from the DIT. Instead, it marks the object as deleted by
    > setting its isDeleted attribute to true, which renders the object
    > invisible to normal directory operations."
    >
    > so i know that these delete (marks) objects are tombstone and windows
    > 2003 retain these for 180 days.
    > Now, this is my question:
    >
    > Is possible to recover delete objects without restore SystemState from
    > backup?
    > And again, how i can view delete objects stored in DIT ?
    >
    > Thanks very much
    > bye
    > Andrea



  3. #3
    Jorge Silva Guest

    Re: Recover or view tombstone.. is possible?

    Hi
    -Yes you can, but not all attributes will be recovered as Elan said.
    -Additionally check the howand why:
    http://support.microsoft.com/kb/840001

    --
    I hope that the information above helps you.


    Have a Nice day.

    Jorge Silva
    MCSE, MVP Directory Services

  4. #4
    Andrea Guest

    Re: Recover or view tombstone.. is possible?

    On Aug 27, 4:39 pm, "Elan Shudnow"
    <SubstituteThisWithMyFirstN...@shudnow.net> wrote:
    > You can use ADRestore:http://technet.microsoft.com/en-us/s.../bb963906.aspx
    >
    > Just keep in mind you won't get all the AD attributes back due to them
    > being stripped when it became a tombstone. There are other methods such
    > as using 3rd party tools where you can mount a DIT and recover specific
    > objects from a backup with all their attributes.
    >
    > --


    Thanks very much, but which others 3rd party tools can recover object
    from a backup with attributes?


  5. #5
    Elan Shudnow Guest

    Re: Recover or view tombstone.. is possible?

    Recovery Manager for Active Directory by Quest (they also have a
    recovery manager for exchange).
    http://www.quest.com/recovery-manage...ive-directory/

    Also, if you're using Server 2008, you can mount your DIT files within
    ADSIEdit which requires you to take snapshots of your AD and then you
    mount your snapshot.

    --
    Elan Shudnow
    http://www.shudnow.net



    "Andrea" <netsecurity@tiscali.it> wrote in message
    news:d71781be-8f41-4c90-85b2-1e8315c31589@m3g2000hsc.googlegroups.com:

    > On Aug 27, 4:39 pm, "Elan Shudnow"
    > <SubstituteThisWithMyFirstN...@shudnow.net> wrote:
    >
    > > You can use ADRestore:http://technet.microsoft.com/en-us/s.../bb963906.aspx
    > >
    > > Just keep in mind you won't get all the AD attributes back due to them
    > > being stripped when it became a tombstone. There are other methods such
    > > as using 3rd party tools where you can mount a DIT and recover specific
    > > objects from a backup with all their attributes.
    > >
    > > --

    >
    >
    > Thanks very much, but which others 3rd party tools can recover object
    > from a backup with attributes?



Similar Threads

  1. Replies: 6
    Last Post: 24-09-2011, 01:32 AM
  2. Using view and subview ID in JSF Navigation <from-view-id>
    By Dingbang in forum Software Development
    Replies: 6
    Last Post: 23-07-2010, 06:05 AM
  3. How to switch from Form view to Design View?
    By AlienKing in forum Software Development
    Replies: 3
    Last Post: 24-09-2009, 12:29 PM
  4. Forcing replication after tombstone cleanup
    By Dave in forum Active Directory
    Replies: 3
    Last Post: 13-06-2008, 03:50 PM
  5. Tombstone error 8614 and garbage error 8606
    By bjude in forum Active Directory
    Replies: 1
    Last Post: 30-03-2007, 05:22 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •