die Wiederholung von Schritt 7,8,9 haben wir nicht mehr durchgeführt. Wird dadurch erst die Zuordnung zu den Gruppen wiederhergestellt? Das haben wir nicht richtig verstanden.
Inzwischen haben wir die Gruppenzugehörigkeit manuell wiederhergestellt. War zwar Fleißarbeit, aber na ja....
Für unseren "Notfallplan" werde ich aber explizit darauf hinweisen, dass diese Schritte 2x gemacht werden müssen.
Auszug aus dem angesprochenen Support-Artikel:
[..]
When you recover deleted security principals and restore their group memberships, the key point to remember is that each security principal must exist in Active Directory before you restore its group membership. (The member may be a user, a computer, or
another security group.) To restate this rule more broadly, an object that contains attributes whose values are back links must exist in Active Directory before the object that contains that forward link can be restored or modified.
[..]
To satisfy the requirement that deleted group members must be restored before security groups to fix up group membership links, you restore both object types two times in this method. The first restoration puts all the user accounts and group accounts in place,
and the second restoration restores deleted groups and repairs the group membership information, including membership information for nested groups.
[..]
Source: http://support.microsoft.com/kb/840001
--
Tobias Redelberger
StarNET Services (HomeOffice)
Frankfurter Allee 193
D-10365 Berlin
Tel: +49 (30) 86 87 02 678
Mobil: +49 (163) 84 74 421
