Enviroment: Windows server 2012 standard
Recently one of my co-workers accidentally deleted a bunch of active directory users while attempting to just remove the exchange mailbox(s) associated with those users.
Unfortunately we did not have the active directory recycling bin enabled (I highly recommend all readers enable this as it is not enabled by default)
We recovered the tombstoned users SID using the 'Quest Object Restore for Active Directory Tool' and it looked like all was well.
However we quickly discovered that the users which were deleted lost their group membership. So... no problem just add them back into the appropriate security group right? Well, we did that andthe strange problem is that by adding users back into the security groups they’re still not getting permissions.
Help please
Tim