Question on the proper way to had this particular authoritative restore
using the ntdsutil restore subtree.
In the past with authoritative restores of an OU I haven't had any issues
restoring an OU and all objects within. Recently I had a situation where an
OU was deleted along with sub-OUs. One of the sub-OUs needed to be restored
without restoring the other sub-OUs.
I trying to do an authoritative restore twice without success as I would
expect it.
First attempt, I recreated the parent OU then performed the authoritative
restore of the child OU.
Second attempt, I deleted the parent OU and attempted to restore the child
OU.
In both cases immediate after the restore and reboot I could see the
restored OUs and objects. But once replication occurred they disappeared.
If I did a find on the user objects in the child OU I could find them
through ADUC, but the OU could not be seen through expanding the OU
structure. This is because in both cases the parent OU was still a deleted
object in the deleted objects container (isDeleted=true). However the child
OU was not deleted (isDeleted = NULL).
How would I go about doing an authoritative restore of a child OU and a
parent OU with out bring back all the other child OUs of that parent?