Windows Server

T10 Active Directory Attribute-Level Recovery When the AD Recycle Bin Cannot Help

August 12th, 2014

2:00pm - 3:15pm

Level: Intermediate Advanced

Ashley McGlone

Premier Field Engineer


Have you ever repopulated a batch of attributes for a large set of users due to a configuration or scripting error? (Think Exchange and Lync.) The Active Directory Recycle Bin is great for recovering deleted objects but not corrupted objects. Authoritative restore is the textbook option, but there is a better way. Yes, you can buy expensive third-party products to do this, or you can use the free features in the box to build your own attribute-level recovery solution for Active Directory. Come find out how in this session.

You will learn:

  • How to leverage the Windows Server 2008 feature for Active Directory snapshots
  • How to mount and explore snapshots using NTDSUTIL and PowerShell
  • How to recover attribute data from a snapshot back into production