If Administrator And Default Group Objects Are Accidentally Deleted - Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR WINDOWS Manual

19.1.1 If Administrator and Default Group Objects are
Accidentally Deleted
In Open Enterprise Server, DSfW provisions the administrator to delete the default groups. If the
administrator and default groups are accidentally deleted, they can be re-created; however, ensure
that objects are created with appropriate SIDs.
You can use the following LDIF files to search the deleted objects:
/var/opt/novell/xad/ds/domain/domain.ldif
/var/opt/novell/xad/ds/domain/domain-bl.ldif
/var/opt/novell/xad/ds/domain/nds-domain.ldif
The above LDIF files host the information for the following objects:
cn=Domain Admins,cn=users,<domain>
cn=Domain Controllers,cn=users,<domain>
cn=Domain Computers,cn=users,<domain>
cn=Domain Users,cn=users,<domain>
cn=Domain Guests,cn=users,<domain>
cn=Domain Group Policy Creator Owners,cn=users,<domain>
You can use the following LDIF files to search for the Enterprise Admins group object to restore.
/var/opt/novell/xad/ds/domain/forest.ldif
/var/opt/novell/xad/ds/domain/forest-bl.ldif
/var/opt/novell/xad/ds/domain/nds-admin-acls.ldif
The above LDIF files host the information for the following objects:
cn=Enterprise Admins,cn=users,<domain>
The LDIF files generated from this information should be used with command.
ldapmodify
Example command:
/usr/bin/ldapmodify -H "ldapi://%2fvar%2fopt%2fnovell%2 fxad%2frun%2fldapi" -x
-D "cn=Administrator,cn=users, dc=example,dc=com" -f /restore.ldif
206 OES 2 SP2: Domain Services for Windows Administration Guide