-
Titre
How does Recovery Manager for AD use an objects tombstone or the deleted object when performing a restore? -
Description
When restoring an object how is the tombstone/deleted object used? -
Résolution
The Online Restore wizard can:
- Recover deleted objects with all their attributes and links by using the functionality provided by Microsoft’s Active Directory Recycle Bin feature
- Convert the tombstones into regular objects before applying the attribute values held in the backup
Active Directory retains the object’s tombstone for a specified configurable period of time (tombstone lifetime) in order to enable Active Directory replication to propagate the deletion. An object can only be undeleted or restored if its tombstone (deleted object) exists.
When Microsoft’s Active Directory Recycle Bin feature is enabled in the Active Directory forest, Recovery Manager for Active Directory can use the functionality provided by Microsoft’s Active Directory Recycle Bin feature to undelete the object with all its attributes and links to the state the object was in immediately before deletion. No backups are required in this recovery scenario
When the Recycle Bin is not enabled or not supported, RMAD first restores all the attributes preserved in the object’s tombstone. The remaining attributes are then restored from backup. If the backed-up value of an attribute differs from the value restored from the tombstone, then the backed-up value is restored. As a result, after the recovery operation completes, the restored object has the same attribute values, group memberships, and security descriptor as it had when the backup was created.
After applying the backed-up attribute values, the online restore process adjusts replication-related properties of the restored objects, so that Active Directory replication propagates the restored data to all domain controllers. Optionally, online restore can force replication of the restored data to decrease propagation delay.