authoritative restore

[Darren D]

OK, I am a bit confused.. I read that you need to perform a nonauthoritative
restore before you can perform a authoritative restore. Lets assume the
following.. I mistakely deleted an OU , which has been replicated to all
DC's. Now I need to recover this OU.. Can I simply do a authorative
restore.. My DC's are up why would I need to perform a nonauth then auth
restore..
Is this by design.. just curious !

PS.. IS there a Win2003 A/D newsgroup I can subscribe to.

Thanks
Darren

 

[Matjaz Ladava [MVP]]

nonauthoritative restore is, where you restore from the tape. You must do
this in all occasions when you restore your AD. To do authoritative restore,
you need to go into ntdsutil (after you restored your AD from the tape) and
use Authoritative Restore function of ntdsutils to mark a part of your
directory as authoritative. So yes, auth restore is technically nonauth
restore + auth restore. Auth restore just does not involve any tapes )

There are two AD newsgroups, and the both deal with 2000/2003 AD stuff one
is this one, the other one is
microsoft.public.windows.server.active_directory

--
Regards

Matjaz Ladava
MVP Windows Server - Directory Services
(e-mail address removed), (e-mail address removed)

 

[Darren D]

Thank you, Matjaz.. I am totally caught up now.. great explanation..
-Darren