When try to restore a users account that was accidently deleted it is missing most of its attributes and restore fails.
When trying to restore a deleted object it gets restored, but without attributes. All attributes are missing. We ran the restore task, selected the user we want to restore and did a compare to view differences only and saw that the attributes exist in the backup. So, when trying to restore the missing attributes by selecting a few of them it works and restores some attributes, but attributes related to msexchange fail with an "unspecified error", or "Object reference not set to an instance of an object". Also the "memberof" and "showinaddressbook" attribute fails to get restored.
Currently when restoring Active Administrator takes all of the attributes to restore, adds them to a temporary restore object, and the attempts to write the entire restored object at once. As this is an entire object any unwritable attributes cause the entire restore to fail as AD does not accept the object as a whole.
Currently there is no way to create a list of attributes which are not to be restored when restoring an object. As this is a good idea and we have created an enhancement to allow user to create such a list based on object restore failures so that once non-writable properties have been identified they can be excluded by default from future restorations, with an option for an administrator to override if they know they have made those properties writable for one restore operation.
The enhancement ID to be considered for inclusion in a future version of Active Administrator is 593057.
Currently the only workaround is to identify the attributes that could and could not be restored after a restore failure, and restore the object again selecting only the writable attributes.
