Performing Authoritative Restore of Active Directory Objects

Hi Dear visitors

Last night I thought to myself about what kind of article I should make for you, and today I want to show you very important article about Authoritative Restore,

For people who forgot what is “Authoritative Restore”, the Authoritative Restore is a Microsoft feature which allows us to restore any kind OU, objects such as OU, Group, User, group, etc….

Authoritative Restore option required us to enter to MSRM mode (Directory Services Restore Mode) and perform some NTDSUTIL & WBADMIN commands.

Just to clarify what “Authoritative Restore” and Non-Authoritative Restore” are:

Authoritative Restore allows us to restore any object without push updates from other DC (no replicate)

NonAuthoritative Restore replicate push updates ((Replication) from other DC’s

I have created a user which called “Zubi Dubi ” in Active Directory and then I deleted the object, but before I delete it, I performed a system state backup using Windows Server Backup to DC:

Authoritative Restore Active Directory

So I want to start with the process , I’m opening a new  CMD and type “Msconfig ” , in Msconfig windows I will set the next boot of DC will boot with “Active Directory Repair”

Authoritative Restore Active Directory

Restart “

Authoritative Restore Active Directory

The booted up and I opened Command Line Windows, in Command Line windows we have type “Wbamin get version ” which provide us lasted backup information, I have selected “2014\24\10” backup

Authoritative Restore

In order to start with the Recovery process, we have use of this command:

“Wbadmin Start Systemstaterecovery -version:”Version identifier”

Authoritative Restore Active Directory

Confirmed with “YES”

Authoritative Restore Active Directory

Confirmed with “YES”

post-479-0-03397200-1414159518.jpg

Recover process :

poAuthoritative Restore Active Directory

Now we have to do restart

Authoritative Restore Active Directory

After the restart we have to open another CMD and type “Ntdsutil” and type:

activate instnace ntds
authoritative restore 

Authoritative Restore Active Directory

Restore Object command allow us to restore objects,

We have to specify the LDAP path of the object and click on Yes

Authoritative Restore Active Directory

Here you can see that the process is running and finished

Authoritative Restore Active Directory

We have to quit not so type twice “1st Quit, 2nd Quit ” and then please cancel the MSRM mode from MSCONFIG

post-479-0-31757400-1414159526.jpg

And the user  (Zubi Dubi) restored successfully.

Authoritative Restore Active Directory

 

Leave a Comment

Your email address will not be published.

In the news
Load More