Re: Restoring deleted security groups in AD
"Higareda, Robert" <[email protected]> Wed, 13 Apr 2005 06:45:15 -0500
| Newsgroups | gmane.comp.security.ntbugtraq |
|---|---|
| Message-ID | <5D4622F5754BE94485CF9E67DE884F1DC66D@cph-mail.public-health.uiowa.edu> |
You may consider looking into a utility from Quest called Object Restore for Active Directory.(http://wm.quest.com/products/objectrestoread/) Although the authoratative restore should work it can be a bit of pain and sometime you can cause your DC's to get caught in a reboot loop if the auth restore doesnt completely successfully, which I experienced once when restoring quite a few security groups. If this is one security group that doesnt have any members. TheObject Restore for Activeirectory utility will pull that item back into its location and takes much less time than the auth restores. That just my tid bit of support for that situation. here is also a realted thread about this issue. http://www.talkaboutsoftware.com/group/microsoft.public.windows.server.active_directory/messages/15531.html Rob Higareda Linux/Windows Systems Administrator College of Public Health University of Iowa 200 Hawkins Drive E174GH Iowa City, IA 52242 Phone: (319) 384-5472 E-Mail: [email protected] http://www.public-health.uiowa.edu/it -- NTBugtraq Editor's Note: Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered. --