DRAG DROP
Your company has an Active Directory forest that contains multiple domain controllers. The
domain controllers run Windows Server 2008.
You need to perform an authoritative restore of a deleted organizational unit and its child
objects.
Which four actions should you perform in sequence?
(To answer, move the appropriate four actions from the list of actions to the answer area,
and arrange them in the correct order.)
Answer: 
Explanation:
Performing Authoritative Restore of Active Directory Objects
http://technet.microsoft.com/en-us/library/cc816878.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
http://technet.microsoft.com/en-us/library/cc816897.aspx
Restore AD DS from Backup (Nonauthoritative Restore)http://technet.microsoft.com/en-us/library/cc794755.aspx
Mark an Object or Objects as Authoritative
http://technet.microsoft.com/en-us/library/cc816813.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
If you have physical access to a domain controller, you can restart the domain controller in
Directory Services Restore Mode (DSRM) locally. Restarting in DSRM takes the domain
controller offline. In this mode, the server is functioning as a member server, not as a domain
controller.
During installation of Active Directory Domain Services (AD DS), you set the Administrator
password for logging on to the server in DSRM. When you start Windows Server 2008 in
DSRM, you must log on by using this DSRM password for the local Administrator account.
Restore AD DS from Backup (Nonauthoritative Restore)
Nonauthoritative restore from backup restores Active Directory Domain Services (AD DS)
from its current state to the previous state of a backup. Use this procedure before you
perform an authoritative restore procedure to recover objects that were deleted after the time
of the backup. To restore AD DS from backup, use a system state or critical-volumes
backup.
Mark an Object or Objects as Authoritative
In this procedure, you use the ntdsutil command to select objects that are to be marked
authoritative when they replicate to other domain controllers.
Restart the domain controller
[Don’t restart the domain controller in Safe Mode, you would have a ‘crippled’ server without
AD DS.]