The Online Restore wizard can:
Active Directory retains the object’s tombstone for a specified configurable period of time (tombstone lifetime) in order to enable Active Directory replication to propagate the deletion. An object can only be undeleted or restored if its tombstone (deleted object) exists.
When Microsoft’s Active Directory Recycle Bin feature is enabled in the Active Directory forest, Recovery Manager for Active Directory can use the functionality provided by Microsoft’s Active Directory Recycle Bin feature to undelete the object with all its attributes and links to the state the object was in immediately before deletion. No backups are required in this recovery scenario
When the Recycle Bin is not enabled or not supported, RMAD first restores all the attributes preserved in the object’s tombstone. The remaining attributes are then restored from backup. If the backed-up value of an attribute differs from the value restored from the tombstone, then the backed-up value is restored. As a result, after the recovery operation completes, the restored object has the same attribute values, group memberships, and security descriptor as it had when the backup was created.