vceguide.com has an Active Directory forest on a single domain.
The domain operates Windows Server 2008.
A new administrator accidentally deletes the entire organizational unit in the Active Directory database that hosts 6000 objects.
You have backed up the system state data using third-party backup software.
To restore backup, you start the domain controller in the Directory Services Restore Mode (DSRM).
You need to perform an authoritative restore of the organizational unit and restore the domain controller to its original state.
Which three actions should you perform?
Build List and Reorder:
Correct Answer:
Explanation/Reference:
References:
Performing Authoritative Restore of Active Directory Objects
http://technet.microsoft.com/en-us/library/cc816878.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
http://technet.microsoft.com/en-us/library/cc816897.aspx
Restore AD DS from Backup (Nonauthoritative Restore)
http://technet.microsoft.com/en-us/library/cc794755.aspx
Mark an Object or Objects as Authoritative
http://technet.microsoft.com/en-us/library/cc816813.aspx
Restart the Domain Controller in Directory Services Restore Mode Locally
If you have physical access to a domain controller, you can restart the domain controller in Directory Services Restore Mode (DSRM) locally. Restarting in DSRM takes the domain controller offline. In this mode, the server is functioning as a member server, not as a domain controller.
During installation of Active Directory Domain Services (AD DS), you set the Administrator password for logging on to the server in DSRM. When you start Windows Server 2008 in DSRM, you must log on by using this DSRM password for the local Administrator account.
Restore AD DS from Backup (Nonauthoritative Restore)
Nonauthoritative restore from backup restores Active Directory Domain Services (AD DS) from its current state to the previous state of a backup. Use this procedure before you perform an authoritative restore procedure to recover objects that were deleted after the time of the backup. To restore AD DS from backup, use a system state or critical-volumes backup.
Mark an Object or Objects as Authoritative
In this procedure, you use the nt dsut il command to select objects that are to be marked authoritative when they replicate to other domain controllers.
Restart the domain controller
[Don’t restart the domain controller in Safe Mode, you would have a ‘crippled’ server without AD DS.]
