The contoso.com domain contains 2 domain controllers running Server 2012, AD recycle bin is enabled for the domain. DC1 is configured to take AD snapshots
daily, DC2 is set to take snapshots weekly. Someone deletes a group containing 100 users, you need to recover this group. What should you do?
A.
Authoritative Restore
B.
Non Authoritative Restore
C.
Tombstone Reanimation
D.
Modify attribute isdeleted=true
C. Tombstone Reanimation
https://technet.microsoft.com/en-us/library/2007.09.tombstones.aspx
1
0
why would you do a reanimation vs an authoritative restore?
1
0
A…
0
0
Tombstone reanimation sounds right. If you did authoritative restore, the DC would have to be taken offline first. With Tombstone reanimation, you can restore deleted objects without taking the DC offline.
As for these questions similarities… other questions state something like “100 users were removed from an OU”. In that case, nothing was “deleted”, and thus you could not perform a tombstone reanimation. In that case, then an authoritative restore should be performed as long as there are back ups or snapshots on the domain controllers.
Anyone is welcome to correct me if I’m wrong, this is just how I understand the difference between AD Recycling Bin/Tombstone Reanimation vs Authoritative Restore
4
0