Sunday, April 14, 2013

Windows Server 2008 + Knowing what is in your AD Tool Kit

Work in progress…

AD Recycle bin

AD Tombstoning

Video 1 of 1 (demo on restoring an AD object)

AD LDS backup (Windows Backup or dsdbutil)

AD LDS restore (Windows Backup or dsdbutil)

AD LDS editing

AD AD LDS Snapshots step by step

Video 1 of 4 (explanation of who what and why)
Video 2 of 4 (minute 6 is start of demo of process)'
Video 3 of 4 (this is video is the gold of the demo)
Video 4 of 4 (continued explanation including limitations)

Here are screen shots from my AD Snaphots Lab:

Snapshot Creation (input highlighted):


Snapshot Mount (input highlighted):

clip_image002Note: leave this window open

Snapshot View from Explorer:


Note: You may be able to restore files and folders by browsing the now mounted snapshot using explorer to copy/paste items.

Accessing Snapshot Using dsamain using port 50389 (input highlighted):


Note: You MUST leave this open till you are done working with the DB

Note: Please see unmounting instructions below

Opening mounted snapshot using LDP.exe:

Select Connection:


Enter in server name and port you assigned. In this cas 50389:


After it loads Bind the connection:


Opening mounted snapshot using ADSIedit.msc:

Select Action Connect to as shown below


Select Advanced: (demo is on same system)


Enter in the port and select OK:


You can then view the data additionally as shown below you can mount your current live instance as well and compare:


Google or Bing for “Directory Service Comparison Tools” to find tools to compare and restore from snapshots.

Unmounting Snapshot

When finished go to the dsamain command prompt window that is still open. Press Ctrl+C and close the window.

Next go to your ntdsutil command prompt window and unmount the snapshot as shown below:


Enter ? for a list of possible commands. You will likely want to delete the snapshots.


No comments:

Post a Comment