This recipe will cover how to configure the End-user Recovery (EUR), in your datacenter. There is some important information regarding how you can limit the risk of having end users overwriting or restoring production data by mistake; this is covered in the last section of this recipe.
Note
Before you make any changes to the Active Directory schema, be sure to have a system state backup of all the domain controllers that hold any FSMO roles
End user recovery enables the possibility of end users being able to restore production data under a controlled manner, which means that you, as an administrator, can control what data they should be able to restore.
Note
The EUR feature relies on the NTFS ACL in the operating system; if these are poorly configured, you will end up with a bad implementation of EUR.
There are some important tasks that you must fulfill before you add information to the Active Directory schema, which is part of your rollback...