Freigeben über

Διαγραφη και επαναφορα Αντικειμενων απο το Active Directory (Μερος 1)

  • Artikel

?a p???µata e??a? p??? ap?? t?? pe??ss?te?e? f????. ???ta pat?? t? p???t?? p?? ß??s?eta? ?????a t??a ??t? ap? t? “Insert” ?a? ?pe?ta ep????e?? “Yes” µe t? a??ste?? p???t?? t? p??t?????. S?????a µp??e? ?a s?µße? µe p?????? d?af??et????? t??p??? a??? t? ap?t??esµa se pe??pt?s? p?? ? d?a?as?a d?a??af?? ????e ap? ????? e??a? p??ta t? ?d??.

?atast??f?

??? ???p?? a?t?st??f??µe t?? ?at?stas? st?? p?? “delete” ep???; G?a ?a apa?t??e? ? e??t?s? ?a?? e??a? ?a ?ata???s??µe p??ta t? d?ad??as?a t?? d?a??af??.

?? a???ß?? s?µßa??e? ?ta? d?a???f??µe ??p??? a?t??e?µe?? ap? t? Active Directory;

?? ?p???s??µe p?? ????µe t?? pa?a??t? ???st? st? AD µe username user01.

image

? ???st?? µa? e??a? µ???? ?a? se ??p??? a???µ? groups ta ?p??a ???f??ta? st? attribute “memberOf” t?? a?t??e?µ???? t??. G?a ?a d??µe ??a a?t? se µ??f? ldap ???s?µ?p????µe t? Windows LDAP Client (ldp.exe, windows 2003 support tools) a????????ta? ta ß?µata:

Start-> Run –> ldp

Connection –> Connect, d????µe t? ???µa e??? DC ?a? af?? s??de???µe ep?t????

Connection –> Bind, d????µe credentials ? af????µe ?e?? ?ste ?a s??de???µe µe a?t? p?? ???s?µ?p????µe ?d?.

?f?? ?????µe bind ep?t???? p??a????µe st? View –> Tree ?p?? eµfa???eta? ??sta µe ta partitions. ?p??????µe a?t?? p?? ??e? t? ???µa t? domain µa? ?a? a? t?? a??????µe ?a d??µe t? d?µ? t?? domain.

ScreenHunter_04 May. 25 16.08

?????µaste sta pe??e??µe?a t?? domain ?a? ß??s???µe t? ???st? µa?. ?a?a??t? fa????ta? ta Distinguished Name, Groups, SID, Username (samAccountName).

ldap

??a???f??ta? t? ???st? s?µßa????? ta e???:

  • ?a pe??ss?te?a ap? ta attributes t?? ???st? µ?de?????ta?,
  • ?? attribute isDeleted ???eta? true ?a?,
  • ?? ???µa t?? a?t??e?µ???? “distinguishedName” a????e? ?a? p??st??eta? t? 0?DEL:<random ID>
  • ?eta???e?ta? st? ???f? container cn=deleted objects p?? ?p???e? se ???e partition (Naming Context)

? p?? ap??? t??p?? ??a ?a d??µe ta pe??e??µe?a t?? Deleted Objects ?a ???s?µ?p???s??µe p??? t? ldp.exe ?a? s??e?????ta? ap? e?e? p?? e??aµe µe??e? p??? pa?at????µe p?? a????? de? eµfa???eta? ??p??? container “deleted objects” ?p?te ??a ?a eµfa??ste? ?????µe t? e???:

Options –> Controls ap? t? drop-down “Load Predefined” ep??????µe “Return Deleted Objects”.

return deleted2

???a a? ?????µe refresh ?a eµfa??ste? ?a? t? “deleted objects” st?? p??????µe?? ??sta.

??a??a?t??? t?? pa?ap??? d?ad??as?a? µp??e? ?a ???s?µ?p????e? t? command ldifde µe t? switch –x

ldifde –d “cn=Deleted objects,dc=contoso,dc=com” –r “(objectclass=user)” –x –f deleted.ldf

??sa sta d?a??aµµ??a a?t??e?µe?a ?p???e? ?a? ? ???st?? µa? a??? d?st???? de? ?p???e? e?e? ??a de??-???? restore ? ??t? pa??µ??? ?a? ?a te?e?????µe. ??a ??s? st? p??ß??µa ?a ?ta? ?a ft?????µe ??a ???st? µe ta ?d?a st???e?a ?p?? p??? ?a? t????.

deleted user

?a?? s???? a??? ?p?????? 2 s?µa?t??? ??µata ed?, 1?? ? ???? ???st?? de? ?a ??e? t? ?d?? SID (Security Identifier) ?a? 2?? de? epa?af????µe ?ts? ta groups p?? ????e. ?a?at???ste ?t? st?? p??????µe?? ????? de? fa????ta? ta groups p?? ????e ??at? t? attribute memberOf ??e? µ?de??ste?.

G?at? e??a? s?µa?t??? t? SID; ???a? µ??ad??? ??a t? ???e a?t??e?µe?? se ??? t? AD Forest ?a? a?t? ???s?µ?p??e?ta? st?? Access Control Lists (ACLs) p?? ????µe d?se? d??a??µata p.?. Sharing, NTFS Permissions, Mailboxes, Delegations ?p?? ?a? st? ?d?? t? user profile (Destktop, documents) st?? ? st??? ?/? p?? s?????? d???e?e?.

folder_sid

?a?ap??? fa??eta? ? ACL ap? f??e?? (c:\temp) ?p?? ? ???st?? e??e d??a??µata ?a? t??a p???? de? µp??e? ?a ß?e?e? ?? ?ts? t? µ??? p?? fa??eta? e??a? t? SID.

?ts? a??µa ?a? st?? pe??pt?s? p?? d?µ???????saµe ?d?? ???st? (??? SID) ?a ?p?epe ?a ?a?ad?s??µe ta ?d?a d??a??µata ?p?? ep?s?? ?a? ?a t?p??et??e? sta ?d?a groups.

?? e??t?µa p?? p????pte? ep?s?? e??a? ??at? ?t? d?a???f??µe µeta???e?ta? sta Deleted Objects ?a? de? d?a???feta? ape??e?a?. ? ap??t?s? e??a? p?? pa?aµ????? st? cn=Deleted Objects ??a ????? ?s? e??a? t? Tombstone Lifetime (s?????? 60 ? 180 µ??e?). ?ts? d?asfa???eta? µ?a pe???d?? p?? ???? ?? DCs ?a ?????? replicate t? d?a??af?. ???e 12 ??e? ta deleted objects e??????ta? ?a? ?p??a ß??s???ta? e?e? ??a >Tombstone Lifetime t?te d?a???f??ta? ???st???.

S????e?a st? 2? µ???? ??a t??p??? epa?af???? a?t??e?µ????.

Comments

  • Anonymous
    December 05, 2010
    Που ειναι το δεύτερο μέρος ΟΕΟ ;;;