Can one authoritatively restore a specific peice of the AD versus the entire thing?

[Spin]

Gurus,

I have been studying Windows Server 2003 and have another question. When
one performs an authoritative restore of AD, can one restore a specific
piece of the AD which may have been maliciously deleted, such as an OU,
versus the entire AD, which was the only option under Windows 2000?

[Mike Brannigan [MSFT]]

"Spin" <Spin@spin.com> wrote in message news:2kqt3rF5ac4mU1@uni-berlin.de...

> Gurus,
>
> I have been studying Windows Server 2003 and have another question. When
> one performs an authoritative restore of AD, can one restore a specific
> piece of the AD which may have been maliciously deleted, such as an OU,
> versus the entire AD, which was the only option under Windows 2000?
>

Yes - you can authoritatively restore a single object such as an OU etc.
This has always been possible on both Windows 2000 Server and Windows Server
2003.
This is done using the ntdsutil command and is well documented in the Help
and Support, the Resource Kits and in numerous white papers and best
practice guides.


--

Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

"Spin" <Spin@spin.com> wrote in message news:2kqt3rF5ac4mU1@uni-berlin.de...

> Gurus,
>
> I have been studying Windows Server 2003 and have another question. When
> one performs an authoritative restore of AD, can one restore a specific
> piece of the AD which may have been maliciously deleted, such as an OU,
> versus the entire AD, which was the only option under Windows 2000?
>
>