Your network contains an Active Directory domain named contoso.com. The Active Directory
Recycle bin is enabled for contoso.com.
A support technician accidentally deletes a user account named User1. You need to restore
the User1 account.
Which tool should you use?
A.
Ldp
B.
Esentutl
C.
Active Directory Administrative Center
D.
Ntdsutil
I’ve tested:
Active Directory Administrative Center works.
You can see the “deleted objects” folder and you can restore.
However it’s also true that is possible to restore using LDP.
http://technet.microsoft.com/en-us/library/dd379509(v=WS.10).aspx#BKMK_2
Tested this both ways.
LDP will be the answer MS is looking for.
HIGHLY doubtful seeing how you can do it through ADAC very simply. Where there are multiple options, always opt for the easiest one.
yep. jonnyboy is right. LDP is messier, so I guess they meant ADAC to be the answer. It’s a lousy question, though.
I am too confused. They did not mention which server. either server 2008 or 2012. because in 2008 there is GUI tool to restore. we have to make it using CLI. if server 2012 then answer is ADAC.
sorry there is no GUI tool in server 2008 to restore.
ADAC is the NEW Tool LDP is older AND more complex. All memberships have to be restore manualy if using LDP.
Since the question doesn’t state which forest/domain functional level we are on, the answer must satisfy both situations (2008 R2 or 2012),and LDP does.
The domain functional level has nothing to do with it (just windows 2008 r2 needed). And since Active Directory Recycle bin has been enabled it has the required functional level.
However the question doesn’t state the OS of the DC’s. If windows 2008r2 only you need to use LDP, if you have at least 1 windows 2012 DC you can use ADAC or LDP.
My guess is this question is incomplete and the actual exam will mention this.
C you can use ADAC to recover the user
I think the answer is ADAC (C). Both A & C answers are correct. But most suited answer is ADAC because this exam is about Server 2012.
Confused.. Answer will be “A”
Use Ldp.exe to restore a single, deleted Active Directory object
This feature takes advantage of the fact that Active Directory keeps deleted objects in the
database for a period of time before physically removing them.
use Ldp.exe to restore a single, deleted Active Directory object
The LPD.exe tool, included with Windows Server 2012, allows users to perform operations
against any LDAP-compatible directory, including Active Directory. LDP is used to view
objects stored in Active Directory along with their metadata, such as security descriptors and
replication metadata.
http: //www. petri. co. il/manually-undeleting-objects-windows-active-directory-ad. htm
http: //www. petri. co. il/manually-undeleting-objects-windows-active-directory-ad. htm
http: //technet. microsoft. com/en-us/magazine/2007. 09. tombstones. aspx
http: //technet. microsoft. com/nl-nl/library/dd379509(v=ws. 10). aspx#BKMK_2
http: //technet. microsoft. com/en-us/library/hh875546. aspx
http: //technet. microsoft. com/en-us/library/dd560651(v=ws. 10). aspx
yup it is true that you can restore single deleted obj using LDP as AD keeps deleted objects in the database for a period of time before physically removing them . but why ADAC is not the best answer?