Question on the proper way to had this particular authoritative restore
using the ntdsutil restore subtree.

In the past with authoritative restores of an OU I haven't had any issues
restoring an OU and all objects within. Recently I had a situation where an
OU was deleted along with sub-OUs. One of the sub-OUs needed to be restored
without restoring the other sub-OUs.

I trying to do an authoritative restore twice without success as I would
expect it.

First attempt, I recreated the parent OU then performed the authoritative
restore of the child OU.
Second attempt, I deleted the parent OU and attempted to restore the child
OU.

In both cases immediate after the restore and reboot I could see the
restored OUs and objects. But once replication occurred they disappeared.
If I did a find on the user objects in the child OU I could find them
through ADUC, but the OU could not be seen through expanding the OU
structure. This is because in both cases the parent OU was still a deleted
object in the deleted objects container (isDeleted=true). However the child
OU was not deleted (isDeleted = NULL).

How would I go about doing an authoritative restore of a child OU and a
parent OU with out bring back all the other child OUs of that parent?

Re: Authoritative Restore by Jorge

Jorge
Tue Aug 19 07:30:17 PDT 2008

restore object for the parent OU (which restores the parent OU only and not
children)
restore subtree for the child OU (which restores child OU and its children)

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Tim Kalligonis" <tkalligonis@comcast.net> wrote in message
news:u5sIyAgAJHA.1940@TK2MSFTNGP05.phx.gbl...
> Question on the proper way to had this particular authoritative restore
> using the ntdsutil restore subtree.
>
> In the past with authoritative restores of an OU I haven't had any issues
> restoring an OU and all objects within. Recently I had a situation where
> an OU was deleted along with sub-OUs. One of the sub-OUs needed to be
> restored without restoring the other sub-OUs.
>
> I trying to do an authoritative restore twice without success as I would
> expect it.
>
> First attempt, I recreated the parent OU then performed the authoritative
> restore of the child OU.
> Second attempt, I deleted the parent OU and attempted to restore the child
> OU.
>
> In both cases immediate after the restore and reboot I could see the
> restored OUs and objects. But once replication occurred they disappeared.
> If I did a find on the user objects in the child OU I could find them
> through ADUC, but the OU could not be seen through expanding the OU
> structure. This is because in both cases the parent OU was still a
> deleted object in the deleted objects container (isDeleted=true). However
> the child OU was not deleted (isDeleted = NULL).
>
> How would I go about doing an authoritative restore of a child OU and a
> parent OU with out bring back all the other child OUs of that parent?
>


Re: Authoritative Restore by Jorge

Jorge
Tue Aug 19 09:44:27 PDT 2008

Hi
Increase the %s verinc %
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Re: Authoritative Restore by Jorge

Jorge
Tue Aug 19 23:04:18 PDT 2008

and for the why...

http://blogs.dirteam.com/blogs/jorge/archive/2007/09/09/is-your-authoritative-restore-being-undone.aspx
--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Jorge Silva" <jorgesilva_pt@hotmail.com> wrote in message
news:%23l$vQrhAJHA.3756@TK2MSFTNGP02.phx.gbl...
> Hi
> Increase the %s verinc %
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MCSE, MVP Directory Services