PowerProtect Data Manager 19.10 File System User Guide

Perform an authoritative Microsoft restore

In an authoritative Microsoft restore, the data from the recovered domain controller replicates to other domain controllers.

1. Open a command-prompt window and run ntdsutil to mark objects for the authoritative restore.
   The objects replicate to other domain controllers during the authoritative restore. In addition, replication partners do not overwrite the replicated objects.

   You can mark a single user object, an entire user subtree, containers, or the entire database. You can use Microsoft ADSIEdit to display Distinguished Names for AD objects.

   For example, the following series of commands marks a user with an OU of CN=Test User,CN=Users,DC=svr1,DC=mydomain,DC=com for an authoritative restore:

   ntdsutil
           activate instance NTDS
             authoritative restore
             restore object
             “CN=Test User,CN=Users,DC=svr1,DC=mydomain,DC=com”
             quit
            quit

   The Microsoft documentation provides details on using the ntdsutil utility for an authoritative restore.

2. If you used Windows System Configuration to configure the system to boot into DSRM, use Windows System Configuration again and deselect Safe boot to enable the system to boot normally.
3. Restart the client.