NetWrix Active Directory Object Restore Wizard is a free tool to assist with recovery of accidentally deleted AD users, OUs, groups, and any other objects. The tool can also rollback modified AD attributes to their previous values.

Features: Restoring deleted objects in the Active Directory, incorrect modifications made to the objects, unauthorized changes to group memberships, and other information in Active Directory can be a difficult job. It is particularly error prone and can be even impossible to do in some cases. Recovery of accidentally deleted Active Directory objects and rolling back unauthorized changes to users, groups, and other information in Active Directory is a routine need for organizations. Should somebody accidentally drop a user or an entire OU, you`ve got a lot or work to do to do a proper restore. You will, of course, have to learn the AD architecture, including object types, tombstone, and attributes, and you still may not obtain 100% recovery of certain attributes e.g., group membership, home directory, enabled/disabled status etc. Native and third-party backup and recovery tools in most cases require non-authoritative restore and DC downtime, and they don`t always have object-level restore capabilities.

This application allows you to quickly restore deleted and modified objects in Windows 2003 or 2008 Active Directory without rebooting a domain controller. The product uses AD tombstone and also it`s own backup storage for additional fine-grained recovery of modified AD attributes and recovery of attributes lost in tombstone e.g. account options, group memberships, home directory, and many other attributes. This tool is a part of the AD Change Reporter, so you will have a convenient change management solution for free, and you won`t have to do manual tracking of unauthorized changes or perform routine manual recovery. You just receive a daily report of all changes and launch the wizard if recovery is required. Summary reports show what objects and attributes have been changed, deleted, or added in Active Directory to ease recovery tasks and to help you perform object- or even attribute-level recoveries.

Overall: The application provides a very useful functionality that`s needed on a daily basis.