When an entry is removed from an Active Directory server, the server does not actually delete the entry, but instead moves it to a container for temporary storage, thus allowing for its eventual recovery if removed by accident.
With LDAP Administrator, you can view the Deleted Objects container contents and restore any objects it contains either to their original or to a new, user-specified location.
To view and restore the deleted objects:
Connect to an Active Directory server whose Deleted Objects container(-s) you are interested in.
Click
Restore Deleted Objects on the
Server toolbar to launch the Active Directory Tombstone
Manager.
With the Active Directory Tombstone Manager, you can:
View Deleted Objects Entries and Their Attributes
To restore objects from the Deleted Objects, container the user you authenticate with or a group the user belongs to should possess the Reanimate Tombstone control access right. |