Recovering from Active Directory Disasters

Recovering from Active Directory Disasters

Active Directory (AD) is typically one of the key network services in an organization. Without it, everything comes to a grinding halt. With this in mind, it’s important to be prepared for the various disasters that might strike a forest.


When it relates to AD, the scope of the disaster can vary quite a bit. It can be as simple as the failure of single domain controller (DC) or the accidental deletion of a single object. An even worse situation is when an entire organizational unit (OU) hierarchy is accidentally deleted. In the worst case scenario, an entire domain or forest might need to be restored.


The good news is that many of the techniques that apply to recovering from simple disasters also apply to recovering from catastrophic disasters. In this article, Brian Desmond discusses how to recover from the two most common calamities: a failed DC and accidentally deleted objects.