ntdsutil without a domain

[andrewbb]

I'm not familiar with AD, but read that ntdsutil can "restore object"
to recover a deleted user account (along with his sid).

- Is it possible to use ntdsutil on a regular xp or vista machine?

- If not, is it possible to turn on Active Directory on a stand-alone
machine so that ntdsutil would work going forward?


My goal here is the ability to restore a deleted user account along
with his original sid. Any thoughts?

 

[Herb Martin]

I'm not familiar with AD, but read that ntdsutil can "restore object"
to recover a deleted user account (along with his sid).

- Is it possible to use ntdsutil on a regular xp or vista machine?
No.

- If not, is it possible to turn on Active Directory on a stand-alone
machine so that ntdsutil would work going forward?

No, not as you have stated it. You can create a Domain by doing
a DCPromo and thus install AD.

(There is a standalong AD, ADAM but it is not what you seek.)

My goal here is the ability to restore a deleted user account along
with his original sid. Any thoughts?

How about a System State backup? I have never tried it for this
purpose but this is PART of the NTDSUtil restore method for a
Domain -- in fact the restore of system state is the ACTUAL
restore. (The NTDSUtil part is only needed because with a domain
you may have more than one DC.)