Recovering Deleted User Ad account throught Active Directory powershell

smtpport25.wordpress — Mon, 01 Jun 2009 05:00:00 GMT

http://smtpport25.wordpress.com/2009/04/22/recovering-deleted-user-ad-account-throught-active-directory-powershell/

We can recover any Active Directory deleted object with in the Tombstone period.
Tombstone lifetime can be found in active directory using below steps

• Load the ADSIEdit snap-in by navigating to start menu, programs, Windows 2000 Support Tools, Tools, ADSI Edit, or simply type adsiedit.msc at the run command.
• Navigate down to CN=Directory Service, through Configuration, CN=Configuration,DC=domainName,DC=com, CN=Services, CN=Windows NT, right-click and choose properties.
• scroll down to tombstoneLifetime. This will have Tombstone period

Get-QADUser -Tombstone

Will get the list of user accounts which are Deleted and residing in Tombstone

Get-QADUser -Tombstone <name> |restore-QADDeletedObject

Will restore the user object in to the OU LOSTANDFOUND

Get-QADUser -Tombstone -LastKnownParent ‘<DN of container>’
Restores all user accounts that were deleted from a particular container to OU LOSTANDFOUND.

Get-QADUser –Tombstone –LastChangedOn (get-date -year 2008 -month 9 -day 1)

Restores all user accounts that were deleted on September 1, 2008

Get-QADUser –Tombstone <username> | fl

Gives the complete details of the -Tombstone account which can help in finding detained information of the Tombstoned account

Search results for 'app:forums' matching tags 'Active Directory' and 'Recover'

Recovering Deleted User Ad account throught Active Directory powershell