Διαγραφη και επαναφορα Αντικειμενων απο το Active Directory (Μερος 1)
?a p???µata e??a? p??? ap?? t?? pe??ss?te?e? f????. ???ta pat?? t? p???t?? p?? ß??s?eta? ?????a t??a ??t? ap? t? “Insert” ?a? ?pe?ta ep????e?? “Yes” µe t? a??ste?? p???t?? t? p??t?????. S?????a µp??e? ?a s?µße? µe p?????? d?af??et????? t??p??? a??? t? ap?t??esµa se pe??pt?s? p?? ? d?a?as?a d?a??af?? ????e ap? ????? e??a? p??ta t? ?d??.
?atast??f?
??? ???p?? a?t?st??f??µe t?? ?at?stas? st?? p?? “delete” ep???; G?a ?a apa?t??e? ? e??t?s? ?a?? e??a? ?a ?ata???s??µe p??ta t? d?ad??as?a t?? d?a??af??.
?? a???ß?? s?µßa??e? ?ta? d?a???f??µe ??p??? a?t??e?µe?? ap? t? Active Directory;
?? ?p???s??µe p?? ????µe t?? pa?a??t? ???st? st? AD µe username user01.
? ???st?? µa? e??a? µ???? ?a? se ??p??? a???µ? groups ta ?p??a ???f??ta? st? attribute “memberOf” t?? a?t??e?µ???? t??. G?a ?a d??µe ??a a?t? se µ??f? ldap ???s?µ?p????µe t? Windows LDAP Client (ldp.exe, windows 2003 support tools) a????????ta? ta ß?µata:
Start-> Run –> ldp
Connection –> Connect, d????µe t? ???µa e??? DC ?a? af?? s??de???µe ep?t????
Connection –> Bind, d????µe credentials ? af????µe ?e?? ?ste ?a s??de???µe µe a?t? p?? ???s?µ?p????µe ?d?.
?f?? ?????µe bind ep?t???? p??a????µe st? View –> Tree ?p?? eµfa???eta? ??sta µe ta partitions. ?p??????µe a?t?? p?? ??e? t? ???µa t? domain µa? ?a? a? t?? a??????µe ?a d??µe t? d?µ? t?? domain.
?????µaste sta pe??e??µe?a t?? domain ?a? ß??s???µe t? ???st? µa?. ?a?a??t? fa????ta? ta Distinguished Name, Groups, SID, Username (samAccountName).
??a???f??ta? t? ???st? s?µßa????? ta e???:
- ?a pe??ss?te?a ap? ta attributes t?? ???st? µ?de?????ta?,
- ?? attribute isDeleted ???eta? true ?a?,
- ?? ???µa t?? a?t??e?µ???? “distinguishedName” a????e? ?a? p??st??eta? t? 0?DEL:<random ID>
- ?eta???e?ta? st? ???f? container cn=deleted objects p?? ?p???e? se ???e partition (Naming Context)
? p?? ap??? t??p?? ??a ?a d??µe ta pe??e??µe?a t?? Deleted Objects ?a ???s?µ?p???s??µe p??? t? ldp.exe ?a? s??e?????ta? ap? e?e? p?? e??aµe µe??e? p??? pa?at????µe p?? a????? de? eµfa???eta? ??p??? container “deleted objects” ?p?te ??a ?a eµfa??ste? ?????µe t? e???:
Options –> Controls ap? t? drop-down “Load Predefined” ep??????µe “Return Deleted Objects”.
???a a? ?????µe refresh ?a eµfa??ste? ?a? t? “deleted objects” st?? p??????µe?? ??sta.
??a??a?t??? t?? pa?ap??? d?ad??as?a? µp??e? ?a ???s?µ?p????e? t? command ldifde µe t? switch –x ldifde –d “cn=Deleted objects,dc=contoso,dc=com” –r “(objectclass=user)” –x –f deleted.ldf |
??sa sta d?a??aµµ??a a?t??e?µe?a ?p???e? ?a? ? ???st?? µa? a??? d?st???? de? ?p???e? e?e? ??a de??-???? restore ? ??t? pa??µ??? ?a? ?a te?e?????µe. ??a ??s? st? p??ß??µa ?a ?ta? ?a ft?????µe ??a ???st? µe ta ?d?a st???e?a ?p?? p??? ?a? t????.
?a?? s???? a??? ?p?????? 2 s?µa?t??? ??µata ed?, 1?? ? ???? ???st?? de? ?a ??e? t? ?d?? SID (Security Identifier) ?a? 2?? de? epa?af????µe ?ts? ta groups p?? ????e. ?a?at???ste ?t? st?? p??????µe?? ????? de? fa????ta? ta groups p?? ????e ??at? t? attribute memberOf ??e? µ?de??ste?.
G?at? e??a? s?µa?t??? t? SID; ???a? µ??ad??? ??a t? ???e a?t??e?µe?? se ??? t? AD Forest ?a? a?t? ???s?µ?p??e?ta? st?? Access Control Lists (ACLs) p?? ????µe d?se? d??a??µata p.?. Sharing, NTFS Permissions, Mailboxes, Delegations ?p?? ?a? st? ?d?? t? user profile (Destktop, documents) st?? ? st??? ?/? p?? s?????? d???e?e?.
?a?ap??? fa??eta? ? ACL ap? f??e?? (c:\temp) ?p?? ? ???st?? e??e d??a??µata ?a? t??a p???? de? µp??e? ?a ß?e?e? ?? ?ts? t? µ??? p?? fa??eta? e??a? t? SID.
?ts? a??µa ?a? st?? pe??pt?s? p?? d?µ???????saµe ?d?? ???st? (??? SID) ?a ?p?epe ?a ?a?ad?s??µe ta ?d?a d??a??µata ?p?? ep?s?? ?a? ?a t?p??et??e? sta ?d?a groups.
?? e??t?µa p?? p????pte? ep?s?? e??a? ??at? ?t? d?a???f??µe µeta???e?ta? sta Deleted Objects ?a? de? d?a???feta? ape??e?a?. ? ap??t?s? e??a? p?? pa?aµ????? st? cn=Deleted Objects ??a ????? ?s? e??a? t? Tombstone Lifetime (s?????? 60 ? 180 µ??e?). ?ts? d?asfa???eta? µ?a pe???d?? p?? ???? ?? DCs ?a ?????? replicate t? d?a??af?. ???e 12 ??e? ta deleted objects e??????ta? ?a? ?p??a ß??s???ta? e?e? ??a >Tombstone Lifetime t?te d?a???f??ta? ???st???.
S????e?a st? 2? µ???? ??a t??p??? epa?af???? a?t??e?µ????.
Comments
- Anonymous
December 05, 2010
Που ειναι το δεύτερο μέρος ΟΕΟ ;;;