1Identity

1Identity Snapshot Recovery tool is command line interface tool which simplifies process of Active Directory deleted objects reanimation and populating these objects with data from Active Directory snapshot mounted in active instance.

This tool can be also used to populate existing (not deleted) object with data from Active Directory snapshot without performing actual un-delete operation. This functionality makes this tool perfect choice for performing quick AD object recovery to state from given point in time. In opposite to other recovery methods like using CSV or LDIF data export from snapshot this tool allows to complete whole operation in single command for multiple objects.

Snapshot Recovery Tool can be executed on following systems:

• Windows XP (execution only)
• Windows Vista (execution only)
• Windows 2003
• Windows Server 2008 (except Server Core)

Snapshot Recovery Tool supports following Active Directory environments:

• Windows 2003 (un-delete operation only)
• Windows 2008 (un-delete and attribute recovery)

This tool requires .NET Framework 2.0 installed in system on which it is being executed. It will not run without .NET Framework 2.0.

This tool is subject of license and warranty given by 1Identity

(Image from SXC)

You can donate to development of this tool using PayPal link provided on a right panel of this page.

Suggestions, comments and bugs can be reported to support@one-identity.net.

Current Snapshot Recovery Tool usage information:

1Identity Snapshot Recovery Tool ver.1.0.0rel

-help        Basic help information

Usage:
 oirecmgr.exe [-o:objectGUID]

[Target  options]
 -o objectGUID    GUID of object to recover.
		  Multiple GUIDs can be specified separated with spaces.
 -of <file name>  Name of file which contains input data.
 		  Each GUID has to be specified in separated line.

Switches:

[Connection options]
 -h ldapHost[:port]    	LDAP host in host:port format. If port will not be
		       	specified, default 389 port number will be used
 -sh snapshot[:port]   	Snapshot LDAP host in host:port format. If port will not be
		       	specified, default 1389 port number will be used
 -u username    	Username. If not specified current security context
			will be used
 -p pwd      	  	Password. If not specified current security context
			 will be used

[Recovery options]
 -real        	Performs real recovery operation.
		By default this tool runs in preview mode

-ol        	Recover object with recovering attributes from snapshot data.
		Specifing snaphsot connection option (-sh) is required.

-ra [attrs]    	Recover all non-linked attributes for object. Requires -ol to be specified.
		List of attributes to recover can be specified separated with spaces.

-rfl[attrs]    	Recover all forward-link attributes for object. Requires -ol to be specified.
		List of attributes to recover can be specified separated with spaces.

-rbl [attrs]    Recover linked value attributes for all naming contexts.
		LDIF files will be generated for object from other naming cotnext.
		List of attributes to recover can be specified separated with spaces.

-rta         	Recover attributes preserved in tombstone from snapshot data.

-errok        	Ignore single attribute level recovery errors

[Snapshot search options]
 -sb <search base>        LDAP query search base specified as DN
 -ss <base|onelevel|subtree>    LDAP query scope
 -sf <filter>    LDAP query filter

[Misc options]
 -v        Verbose output mode.
 -d [file name]  Enable debug logging to file. If file name will not
		 be specified debug.log will be used

----------
 Example 1:
 oirecmgr.exe -o cdd5250b-3a7f-4d13-a331-a9fae8075eab -real
 Recover single AD object without recovering attributes from snapshot data.

----------
 Example 2:
 oirecmgr.exe -o cdd5250b-3a7f-4d13-a331-a9fae8075eab -sh lhfdc1:1389 -ol -real
 Recover single AD object and recovers all attributes from snapshot using specified snapshot host.

----------
 Example 3:
 oirecmgr.exe -of guids.txt -sh lhfdc1:1389 -ol -real
 Recover AD objects with GUIDs specified in file and recovers all attributes from snapshot using specified snapshot host.
 ----------

This software is distributed as free download. Use it at your own risk.
 1Identity team put a lot of efforts in this software development and testing,
 however 1Identity does not warrant that this software will meet specific
 requirements or will not make any damage to directory service data.

Please send bugs, comments and suggestions using
 e-mail on support@one-identity.net.