How to Perform Authoritative DC Restore for Windows Server 2008

When a domain contains more than one domain controller, Active Directory replicates directory objects, such as users, groups, organizational units, and computers, to all the domain controllers in that domain. Authoritative restore is a method to recover objects and containers that have been deleted for AD DS. An authoritative restore marks specific data as current and prevents the replication from overwriting that data. The authoritative data is then replicated throughout the domain.

The process for performing an authoritative restore of AD is the same as a Non-authoritative restore except for one step. After the restore of AD is complete in DSRM and then, before restarting, you manually run Ntdsutil, and the mark the object that you want to restore as Authoritative.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.