HELP !! DR on OU in AD

Hello,
        I was wondering if anyone might help shed some light on these
questions. I can not find a specific answer anywhere

Scenario:
        - Using TSM 5.1x
        - also tried using NTBackup on W2K DC
        - 12 DC's - all DC's are fine, AD NOT corrupt, syncing just fine.
        - One OU (nested or otherwise) appears to be corrupt in AD. I need
to restore "just that OU" not the entire AD

Questions:
        1.) Is the only way to restore a bad/corrupt OU, to use NTDSUtil and
run through the command lines to do an"Authoritative  restore of that
particular "SUB-Tree"? (ie.. ntdsutil:> authoritative restore - restore sub
tree [location]- quit.

        Example: The rest of the AD is fine...However, for some reason an
Admin feels that OU is corrupted...  After troubleshoot we decide to restore
just that OU.
                a.) Can I assume at this point, that this corrupt OU has
Sync'ed across the AD?
                b.) If not: what are my options?
                c.) If so: What are my options then? (Do I have to do any
cleanup in the AD anywhere, first?)
                d.) Is there any other way to restore a corrupt OU in the AD
other than using NTDSUtil?


2.) If we have determined that we need to restore just a corrupt OU, "How"
and "Where" do I restore that "OU" from?? (I ask  this because even in
NTBackup, when you do a restore, all you see is the "system state" object
called "AD". Nothing allows  you to drill down to a "specific" OU and select
"just that" OU to restore back to a DC. So how do I "find" the OU I need to
restore into AD from Tape? or from any backup media.....
                a.) Do I have to do an "entire AD  restore
"authoritatively", to get back one OU? [I know that the NTDSUtil allows the
ability to restore just a single OU, but  where am I getting that "good OU
data and/or object" from?]

3.) Assuming I now know where to get the good OU object data from, and
assuming that the corrupt OU has sync'ed across AD,  which DC do I chose to
put into DR mode (F8) and restore the good OU data to? [Given the fact  that
the rest of the AD is fine (I surly "DO NOT" want to fat finger the entire
AD by doing an Authoritative restore in the  wrong place and causing more
issues)].

Any and all help would be great.

Thanks
Tony

********************************************
Anthony F.Consiglio
Senior Systems Analyst II
Network Engineer, LAN Systems
Tel: 645-7340, FAX: 645-3543
E-MAIL: consigli AT buffalo DOT edu