Due to the risk involved, The procedure must be done very carefully. It is good first to do some training on non operational domain .

To restore Active Directory DB from backup:

• Determine exactly the object name that needs to be restored (OU name).
• Reboot domain controller into authoritative restore mode.
• Restore the system state from last backup.
• Open a command window
• Run “ntdsutil”
• Type “authoritative restore”, press Enter
• To restore a subtree, type “restore subtree” and the entire object name of the subtree to be restored. For example, to restore the sub-OU “Test ou2″ located in the upper-level OU “Marketing”, use the following syntax, being careful to capitalize as necessary: Example “restore subtree OU= Test ou2,OU= Marketing,DC= your sub domain name ,DC=your domain name ,DC=com”

• Type “quit” to exit from authoritative restore mode
• Type “quit” to exit from ntdsutil
• Reboot into normal operating mode

Replicating Restored data to other Domain Controllers

So basically what we did , we loaded the appropriate subtree into the replication system.
and no we need to Replicate the AD as follows:

1. Open the AD Sites & Services MMC
2. Open a DC that is not the one that was just used to restore Active Directory Data
3. Open NTDS Settings
4. Right-click each of the other servers and click “Replicate Now”

Good luck

And remember if you have any way to avoid this procedure , please use the other way

Related Blogs

• Related Blogs on Active Directory
• History of Active Directory
• Whitepaper: VMware and VSS: Application Backup and Recovery

You may also like -

Add custom field to ADUC- Employee IDHow to add Employee ID to Active Directory Users and Computers1. Open ADSI Edit2. Expand the CN=Configuration node and go to CN=DisplaySpecifiers, CN=409. Select ... How to delete a protected OU in ADUC Windows 2008In Windows 2008 Active Directory Users and Computers Microsoft activated new feature "Protect Container from accidential deletion"During OU creation you have the ability to ... Disable File And Folder Sharing, via GPOTo disable the Security tab from Windows 2000/XP Professional-based workstations that are members of a Windows 2000/2003 domain: Start Active Directory Users and Computers.Right-click ... Exchange 2007 ADD Powershell CmdLetsAdd- AD Permission - Used to add permissions to an Active Directory directory service object. Add-AvailabilityAddressSpace – Used to define the access method and ...