Windows server 2003 – How to perform authoritative restore on deleted OU
Posted by aidas | Posted in Active directory, Command line, Windows 2003 | Posted on 03-05-2009
0
I got situation when administrator deleted OU named “Secred” by mistake. Location of this OU was OU=Secret,OU=PrivUsers,DC=mydomain,DC=com.
To restore it first of all we need to perform non-authoritative restore. To perform it boot your Windows server 2003 into Directory Services Restore Mode (F8 when booting server) and restore latest system state backup with OU secret in place.
Note, if you dont know DSRM password, check this article how to reset it.
After system state restore dont reboot server.
It is time to start authoritative restore. To do that open command line and type:
ntdsutil and press Enter
authoritative restore and press Enter
restore subtree “OU=Secret,OU=PrivUsers,DC=mydomain,DC=com” and press Enter
Confirm that authoritative restore should increase version numbers when prompted and exit ntdsutil by typing quit two times. After that reboot server into normal mode.
Follow us on Twitter !
