Search

LAZARUS   Active Directory Deleted Objects Recovery Undelete Objects / Tombstone Reanimation / AD Recycle Bin Access	Download LAZARUS      Version 1.8.11
Lazarus is a free tool for Active Directory environments which allows you to access the hidden system container 'Deleted Objects'. This is where a domain controller (or ADAM/AD LDS server) stores the deleted directory objects for a while, before they get deleted physically from the Active Directory database.

The deleted Active Directory obejcts which are in the Deleted Objects are also called Tombstones. Under Windows 2003 and Windows Server 2008 these tombstones can be restored, but during this Tombstone Reanimation, some important attributes get lost (especially references to other objects like group memberships).

In a environment with Windows Server 2008 R2 domain controllers and an according forest functional level, you can activat an additional feature: The Active Directory Recycle Bin. Deleted objects can be completely undeleted within the Deleted Object LifeTime - with all their properties.



LAZARUS offers all this in a convenient grafical user interface. Additionally, important configuration settings like the Ad Recycle Bin activation can be performed - or you can change the time intervals which determine how long deleted Active Directory objects will remain in the Deleted Objects container:
tombStoneLifeTime und msDS-DeletedObjectLifetime.



If the Active Directory Recycle Bin feature is not activated yet, LAZARUS gives you the according directions:

Some important technical details about LAZARUS:

• LAZARUS runs under Windows XP, Vista, Windows 7, Windows Sever 2003, Windows Server 2008. An explicit installation of binaries or DLLs is not necessary - just copy the LAZARUS executable file to a local drive and start the application.
  
  
• Technical prerequisite: .NET Framework 2.0 Runtime engine.
  
  The .NET Framework runtime engine is pre-installed on every Windows Vista, Windows 7 or Windows 2008, so you can use LAZARUS here without having to install any other runtime environment. Please note that the operating systems has to be updated with all hotfixes to have the correct .NET Framework version installed.
  
  
• If you want to activate the AD Recycle Bin feature in an environment where it is not active yet, you need to have Enterprise Admin permissions.
  
  
• To access the Deleted Objects container, you need to have Domain Admin permissions. If you don't see the Deleted Objects Container when you start LAZARUS, although you are member of the Domain Admins, then try it again as the original built-in standard user 'Administrator'. In some environments the permissions on the Deleted Objects container seems to require to log on as built-in 'Administrator'.