Problem: users may mistakenly delete user, ou, and other information while maintaining the Active Directory. However, the deleted information does not back up the Active Directory, causing permanent data loss or account reconstruction.
Solution: I will give you a simple and free solution to solve this problem. This uses the concept of ad tombstone time. the tombstone time of Windows Server 2003 is 60 days, starting from Windows Server 2003 SP1, Microsoft adjusted the ad tombstone time to 180 days, which means that any information we accidentally deleted from the ad within 180 days can be easily restored.
Next we will introduce this tool:
Quest object Restore for Active Directory (this is one of the few free applications of Quest, which is much weaker than quest rediscovery manager for Active Directory, but we can still use it)
Software in:
Http://worlddownloads.quest.com.edgesuite.net/Repository/www.quest.com/latest_versions/ObjectRestoreforActiveDirectory_10.zip
For download, the installation is very simple, no longer
Snap1.jpg (27 KB)
The interface is very simple. Click to connect to the domain
Snap2.jpg(47.59 KB)
Connect to the site for data restoration
Test account restoration:
Create an account with the OCS attribute
Snap3.jpg(38.59 KB)
Our account contains the SIP address and deletes the user.
Restore the interface again:
Snap4.jpg(35.19 KB)
See the account we deleted earlier
Restore:
Snap5.jpg(36.36 KB)
The account loses the SIP address. The account is disabled and enabled.
Test to delete ou:
Snap6.jpg(37.84 KB)
The restoration is also OK. Now, the test is over. Comments are welcome.