Διαγραφη και επαναφορα Αντικειμενων απο το Active Directory (Μερος 1)

?a p???µata e??a? p??? ap?? t?? pe??ss?te?e? f????. ???ta pat?? t? p???t?? p?? ß??s?eta? ?????a t??a ??t? ap? t? “Insert” ?a? ?pe?ta ep????e?? “Yes” µe t? a??ste?? p???t?? t? p??t?????. S?????a µp??e? ?a s?µße? µe p?????? d?af??et????? t??p??? a??? t? ap?t??esµa se pe??pt?s? p?? ? d?a?as?a d?a??af?? ????e ap? ????? e??a? p??ta t? ?d??.

?atast??f?

??? ???p?? a?t?st??f??µe t?? ?at?stas? st?? p?? “delete” ep???; G?a ?a apa?t??e? ? e??t?s? ?a?? e??a? ?a ?ata???s??µe p??ta t? d?ad??as?a t?? d?a??af??.

?? a???ß?? s?µßa??e? ?ta? d?a???f??µe ??p??? a?t??e?µe?? ap? t? Active Directory;

?? ?p???s??µe p?? ????µe t?? pa?a??t? ???st? st? AD µe username user01.

? ???st?? µa? e??a? µ???? ?a? se ??p??? a???µ? groups ta ?p??a ???f??ta? st? attribute “memberOf” t?? a?t??e?µ???? t??. G?a ?a d??µe ??a a?t? se µ??f? ldap ???s?µ?p????µe t? Windows LDAP Client (ldp.exe, windows 2003 support tools) a????????ta? ta ß?µata:

Start-> Run –> ldp

Connection –> Connect, d????µe t? ???µa e??? DC ?a? af?? s??de???µe ep?t????

Connection –> Bind, d????µe credentials ? af????µe ?e?? ?ste ?a s??de???µe µe a?t? p?? ???s?µ?p????µe ?d?.

?f?? ?????µe bind ep?t???? p??a????µe st? View –> Tree ?p?? eµfa???eta? ??sta µe ta partitions. ?p??????µe a?t?? p?? ??e? t? ???µa t? domain µa? ?a? a? t?? a??????µe ?a d??µe t? d?µ? t?? domain.

?????µaste sta pe??e??µe?a t?? domain ?a? ß??s???µe t? ???st? µa?. ?a?a??t? fa????ta? ta Distinguished Name, Groups, SID, Username (samAccountName).

??a???f??ta? t? ???st? s?µßa????? ta e???:

• ?a pe??ss?te?a ap? ta attributes t?? ???st? µ?de?????ta?,
• ?? attribute isDeleted ???eta? true ?a?,
• ?? ???µa t?? a?t??e?µ???? “distinguishedName” a????e? ?a? p??st??eta? t? 0?DEL:<random ID>
• ?eta???e?ta? st? ???f? container cn=deleted objects p?? ?p???e? se ???e partition (Naming Context)

? p?? ap??? t??p?? ??a ?a d??µe ta pe??e??µe?a t?? Deleted Objects ?a ???s?µ?p???s??µe p??? t? ldp.exe ?a? s??e?????ta? ap? e?e? p?? e??aµe µe??e? p??? pa?at????µe p?? a????? de? eµfa???eta? ??p??? container “deleted objects” ?p?te ??a ?a eµfa??ste? ?????µe t? e???:

Options –> Controls ap? t? drop-down “Load Predefined” ep??????µe “Return Deleted Objects”.

???a a? ?????µe refresh ?a eµfa??ste? ?a? t? “deleted objects” st?? p??????µe?? ??sta.

??sa sta d?a??aµµ??a a?t??e?µe?a ?p???e? ?a? ? ???st?? µa? a??? d?st???? de? ?p???e? e?e? ??a de??-???? restore ? ??t? pa??µ??? ?a? ?a te?e?????µe. ??a ??s? st? p??ß??µa ?a ?ta? ?a ft?????µe ??a ???st? µe ta ?d?a st???e?a ?p?? p??? ?a? t????.

?a?? s???? a??? ?p?????? 2 s?µa?t??? ??µata ed?, 1?? ? ???? ???st?? de? ?a ??e? t? ?d?? SID (Security Identifier) ?a? 2?? de? epa?af????µe ?ts? ta groups p?? ????e. ?a?at???ste ?t? st?? p??????µe?? ????? de? fa????ta? ta groups p?? ????e ??at? t? attribute memberOf ??e? µ?de??ste?.

G?at? e??a? s?µa?t??? t? SID; ???a? µ??ad??? ??a t? ???e a?t??e?µe?? se ??? t? AD Forest ?a? a?t? ???s?µ?p??e?ta? st?? Access Control Lists (ACLs) p?? ????µe d?se? d??a??µata p.?. Sharing, NTFS Permissions, Mailboxes, Delegations ?p?? ?a? st? ?d?? t? user profile (Destktop, documents) st?? ? st??? ?/? p?? s?????? d???e?e?.

?a?ap??? fa??eta? ? ACL ap? f??e?? (c:\temp) ?p?? ? ???st?? e??e d??a??µata ?a? t??a p???? de? µp??e? ?a ß?e?e? ?? ?ts? t? µ??? p?? fa??eta? e??a? t? SID.

?ts? a??µa ?a? st?? pe??pt?s? p?? d?µ???????saµe ?d?? ???st? (??? SID) ?a ?p?epe ?a ?a?ad?s??µe ta ?d?a d??a??µata ?p?? ep?s?? ?a? ?a t?p??et??e? sta ?d?a groups.

?? e??t?µa p?? p????pte? ep?s?? e??a? ??at? ?t? d?a???f??µe µeta???e?ta? sta Deleted Objects ?a? de? d?a???feta? ape??e?a?. ? ap??t?s? e??a? p?? pa?aµ????? st? cn=Deleted Objects ??a ????? ?s? e??a? t? Tombstone Lifetime (s?????? 60 ? 180 µ??e?). ?ts? d?asfa???eta? µ?a pe???d?? p?? ???? ?? DCs ?a ?????? replicate t? d?a??af?. ???e 12 ??e? ta deleted objects e??????ta? ?a? ?p??a ß??s???ta? e?e? ??a >Tombstone Lifetime t?te d?a???f??ta? ???st???.

S????e?a st? 2? µ???? ??a t??p??? epa?af???? a?t??e?µ????.