Restoring AD objects including DNS zones


Since the initial times of Windows 2003, things have changed. Restoring AD objects, including DNS Zones become simpler with each release of Windows Server. Therefore let’s see how you can restore users, computers, organizational units and DNS zones nowadays.

Restoring AD objects for standard classes

Since Windows 2008 R2, Get-ADObject has a nice switch called IncludeDeletedObjects which may be of help.

Also, In Windows 2012(r2), the Administrative Center has also an interface to do so.

Restoring AD objects for DNS zones and records

To restore DNS records, there is a difference you should know. Before being moved to the Active Directory deleted objects containers, the zone is first renamed with a ‘..Deleted’ prefix. And there is no GUI as of today.

Therefore to restore such a zone, you must:

  1. Find the ‘..Deleted’ zone object
  2. Restore that object
  3. Restore every deleted record object in that zone
  4. Rename the zone to its previous name

Examples of command are then:

It is interesting to note that as long as the DNS zoned is called ‘..Deleted-XXX’ it doesn’t appear in any DNS management tools.

 

Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.