Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

It seems like a large number of security groups have been deleted from the organization's AD. i was able to find the tombstones but i see there 1400 objects from the last 180 days and i know for certain that the important groups which have been deleted, have been deleted somewhere between yesterday's night and now. Is there a way, maybe by using power shell to extract the names of all objects which have been deleted through out the night? Thanks in advance

Itai

share|improve this question
1  
what domain levels are you on? –  tony roth Mar 29 '12 at 13:21
    
2003 domain level –  Itai Ganot Mar 29 '12 at 13:54
add comment

2 Answers

For your 2003 domain, use a tool such as Softerra's LDAP Administrator to view and recover deleted items from Active Directory.

You would need a Windows Server 2008 domain controller on the domain in order to use PowerShell for that query. Raising the domain functional level actually adds a new Active Directory Recycle Bin feature as well.

share|improve this answer
add comment

read the following links.

http://technet.microsoft.com/en-us/library/cc978013.aspx

http://www.petri.co.il/manually-undeleting-objects-windows-active-directory-ad.htm

and yes this all could be done with powershell, unfortuantely I'm not at work so I can't test any powershell commands that I would use.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.