Re: Restoring deleted security groups in AD

"Higareda, Robert" <[email protected]> Wed, 13 Apr 2005 06:45:15 -0500
Newsgroups gmane.comp.security.ntbugtraq
Message-ID <5D4622F5754BE94485CF9E67DE884F1DC66D@cph-mail.public-health.uiowa.edu>
You may consider looking into a utility from Quest called Object Restore for Active Directory.(http://wm.quest.com/products/objectrestoread/) Although the authoratative restore should work it can be a bit of  pain and sometime you can cause your DC's to get caught in a reboot loop if the auth restore doesnt completely successfully, which I experienced once when restoring quite a few security groups. If this is one security group that doesnt have any members. TheObject Restore for  Activeirectory  utility will pull that item back into its location and takes much less time than the auth restores. That just my tid bit of support for that situation.
 
 
here is also a realted thread about this issue.
 
http://www.talkaboutsoftware.com/group/microsoft.public.windows.server.active_directory/messages/15531.html
 
 
Rob Higareda
Linux/Windows Systems Administrator
College of Public Health
University of Iowa
200 Hawkins Drive
E174GH
Iowa City, IA 52242
Phone: (319) 384-5472
E-Mail: [email protected]
http://www.public-health.uiowa.edu/it
 

--
NTBugtraq Editor's Note:

Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--