These release notes provide information about the Quest® Recovery Manager for Active Directory Forest Edition 10.2.1 release.
Recovery Manager for Active Directory enables fast, online recovery. Comparison reports highlight what objects and attributes have been changed and deleted in Active Directory enabling efficient, focused recovery at the object or attribute level. Accurate backups and a quicker recovery enable you to reduce the time and costs associated with AD outages and reduce the impact on users throughout your organization.
Recovery Manager for Active Directory is based on patented technology.
Recovery Manager for Active Directory 10.2.1 is a release with new features and functionality. See New Features and Enhancements.
This section covers new features and enhancements in Quest® Recovery Manager for Active Directory 10.2.1.
The following new features are only available with a Recovery Manager for Active Directory Disaster Recovery Edition license. To purchase a new license please send an email to sales@quest.com, or contact your local sales office.
Recovery Manager for Active Directory Disaster Recovery Edition provides the ability to set up and use dedicated cloud storage locations for backups. Cloud Storage in combination with Tier 1 storage options ensure that your critical backups are always available in case of disaster.
By using Cloud Storage you can store your AD and BMR backups in the cloud ensuring that your backups are always accessible and protect your backup files with storage account properties such as immutability policies, and redundancy with different types of replication.
Recovery Manager for Active Directory Disaster Recovery Edition 10.2.1 has enhanced the Secure Storage server feature.
New features available:
New Secondary Storage tab on Computer Collection Properties to configure a Secure Storage server and provide required access credentials to read backups to be copied to secondary storage.
New PowerShell cmdlets Set-RMADStorageServerAllowedVolumes and Get-RMADStorageServerAllowedVolumes available in the Management Shell to configure which volumes are allowed to store backups.
The Secure Storage server properties dialog displays used and free space on each volume on the server including a warning indication when space is low.
New validation performed during the installation of a Secure Storage agent to ensure the Secure Storage server is a standalone server and not domain joined.
| IMPORTANT |
An upgrade to the Secure Storage agent is required for new functionality. Refer to Upgrade and installation instructions below and the User Guide supplied with this release of the product. |
| Enhancement | ID (old) | ID (new) |
|---|---|---|
| Recovery Manager for Active Directory 10.2.1 | ||
| Usability improvements to the Computer Collections Properties dialog including removal of Logging tab and introduction of new tab for Secondary Storage | N/A | ADO-283362 |
| Creation of Management Shell Guide which lists all available PowerShell cmdlets, with examples. Appendix removed from User Guide | N\A | ADO-275100 |
| Support Microsoft Edge browser in the Web Portal | RMADFE-1372 | ADO-220837 |
| Add option to skip replication after recovery on RMAD portal UI | RMADFE-815 | ADO-220726 |
| New portal settings and improvements for Web Portal configuration | RMADFE-1182 | ADO-220796 |
| Recovery Manager for Active Directory 10.2 | ||
| Rename system state backups to Active Directory backups | RMADFE-3009 | ADO-218405 |
| Hide the "Components" tab in computer collection settings | RMADFE-3042 | ADO-218415 |
| SCOM 2019 support | N\A | ADO-219783 |
| Pass through Synchronize across time zones from windows task scheduler to RMAD | RMADFE-952 | ADO-220703 |
| Create Logs Daily to be on by default | N\A | ADO-223980 |
| Display operating system version for all backups | N\A | ADO-228741 |
| Enhancement | ID (old) | ID (new) |
|---|---|---|
| Recovery Manager for Active Directory 10.2.1 | ||
| Automatically enable File and Printer Sharing on the clean OS machine when installing FR agent | RMADFE-2778 | ADO-242106 |
| RMAD Console and Forest Recovery Agent cannot read AD configuration with more than 1000 sites | N\A | ADO-274279 |
| Recovery Manager for Active Directory 10.2 | ||
| Forest Recovery simulation mode available | RMADFE-920 | ADO-218277 |
| The 'View Recovery Report' action should be available as one of the post recovery dialog actions | RMADFE-3034 | ADO-218413 |
| Encrypt credentials in Forest Recovery project using AESCryptoServiceProvider instead of TripleDESCryptoServiceProvider | RMADFE-2199 | ADO-220948 |
| Allow RMAD backup to continue if forest recovery agent cannot be installed | N\A | ADO-221433 |
| Set default global catalog handling option to "Keep GC Intact" | N\A | ADO-223871 |
| Show 'object's tombstone is expired' detailed warning in the Online Restore Wizard | RMADFE-1613 | ADO-223987 |
| Default recovery method to the Repromotion phase should be "Install AD", not "ReinstallAD" | N\A | ADO-234195 |
| Tool to update backup creation date in simulation projects | N\A | ADO-234197 |
| Keep previous recovery methods when changing recovery mode like Forest Recovery --> Repromotion --> Forest Recovery | N\A | ADO-234201 |
| Every DC in simulation project should have a backup created for this domain controller so all recovery methods are available | N\A | ADO-234203 |
| Resolved Issue | ID (old) | ID (new) |
|---|---|---|
| Recovery Manager for Active Directory 10.2.1 | ||
| Allow to unselect Console storage immediately as alternative has been configured | N/A | ADO-220573 |
| Large number of scheduled tasks can cause Console, Replication and PowerShell cmdlets to be extremely slow | RMADFE-1837 | ADO-242166 |
| RMAD Portal does not show proper backups | N/A | ADO-256164 |
| Remove a BOM prefix from the script file | N/A | ADO-257798 |
| Error in the web portal logs 'Cannot init EP configuration section' | N/A | ADO-273469 |
| Unpacking the backup and the retention policy may fail if the DC cannot be accessed via LDAP from the RMAD console machine | N/A | ADO-279431 |
| RPC calls to Backup Agent are not retried on RPC_S_SERVER_TOO_BUSY error | N/A | ADO-314812 |
| Misleading 'Unable to map the network share IPC$ on the computer' error mssage on attempt to map UNC share | N/A | ADO-316902 |
| Installation fails with an invalid error message when using a local windows credential to connect to the remote SQL server | N/A | ADO-317818 |
| 'Insufficient rights' error in the web portal fixed.Addition of a domain is now changed to allow all domain admins by default | RMADFE-2437 | ADO-319010 |
| Online Restore Wizard cannot undelete an object using a non-administrative account. Restoring an object in Online Restore Wizard using a non-administrative account may result in the following error for NT-Security-Descriptor attribute: "Cannot retrieve attribute value(s) from Active Directory. Possible reason: Insufficient access rights." To ignore this error, the NT-Security-Descriptor attribute can be excluded from the list of restored attributes. | N/A | ADO-293311 |
| Recovery Manager for Active Directory 10.2 Hotfix 1 | ||
| Installation of Quest personal certificates to the local certificate store failed. Receive error message to install Quest certificates later. This should not be required. | N/A | ADO-274643 |
| Computer Collection scheduled tasks removed after upgrade to 10.2 if gMSA used as the scheduled task account | N/A | ADO-280854 |
| rmad.db3 file gets overwritten during an uninstall -> install of version 10.2 | N/A | ADO-283069 |
| Cannot retain the uncheck "Global Catalog Servers" option in the Advanced tab of the Computer Collection properties window | N/A | ADO-230397 |
| It will display 'Network access is denied' error in Win2016/2019 if specify account to restore GPO with "domain\username" format | N/A/ | ADO-233623 |
| Cannot see some advanced objects in the object picker in Online Restore Wizard | N/A | ADO-275027 |
| Recovery Manager for Active Directory 10.2 | ||
| Security Vulnerability - Sensitive comments embedded within client-side code sent to an end user machine | RMADFE-3244 | ADO-218142 |
| Security Vulnerability - Runtime hardening (SEP, ASLR and other) | RMADFE-3248 | ADO-218146 |
| Full replication fails when a DC is selected for the option 'Unpack each backup upon its creation' in the master console | RMADFE-1858 | ADO-218500 |
| Storage agent settings are not applied on install | N\A | ADO-219910 |
| No progress/wait indication after clicking 'OK' on the 'Add Console…' dialog | N\A | ADO-224321 |
| Backup fails if the Domain Controllers OU has a AzureADKerberos computer object in it as part of Azure AD FIDO deployment | N\A | ADO-227903 |
| Improve documentation with information on number of scheduled computer collections for optimal performance | N\A | ADO-232614 |
| Access Violation in the ProcessRequest function and crashes service | N\A | ADO-232682 |
| Remove mutual exclusion mechansim between replication process and restore process | RMADFE-1575 | ADO-237972 |
| Display correct backup info and support restore for Collections with containers (not DCs) | N\A | ADO-240580 |
| Retriable VSS error causes undefined behavior in Backup Agent on retry | N\A | ADO-241825 |
| Modify the configuration to remove collision problems with SHA1, moved to SHA256 | N\A | ADO-253913 |
| Retention policy ignores collection and consider backups of all collections | N\A | ADO-259645 |
| Recovery Manager for Active Directory 10.1.1 HF1 | ||
| RMAD console crashes while building comparison report. | N\A | ADO-240300 |
| Recovery Manager for Active Directory 10.1.1 | ||
| Agent-based online restore can result in lsass process crash. | RMADFE-3233 | ADO-218222 |
| Unable to restore AD object when user provides smart card PIN and username hint. | RMADFE-3132 | ADO-218574 |
| Configuring a backup schedule is disabled when creating a backup from Recover Manager for Active Directory > Create Backup. | RMADFE-3260 | ADO-219136 |
| SCOM pack Get Collections call results in Access denied errors. | RMADFE-3025 | ADO-220574 |
| Increasing number of scheduled tasks makes Console, Replication, and Cmdlets extremely slow. | RMADFE-1837 | ADO-223040 |
| RMAD console crashed due to missing DLL Microsoft.Xaml.Behaviors.dll. | N/A | ADO-226682 |
| After restore a User Object Member Of is different than in Active Directory | N/A | ADO-230090 |
| Resolved Issue | ID (old) | ID (new) |
|---|---|---|
| Recovery Manager for Active Directory 10.2.1 | ||
| Check Forest Health can get stuck on the second step | RMADFE-3041 | ADO-218559 |
| New recovery project, selecting a Backup display the adding time in the Backup Age colum instead of backup age | N/A | ADO-237971 |
| 'There is no PREFERRED_DNS value' error occurs, if no DNS server is found on installing Active Directory | RMADFE-2437 | ADO-242191 |
| Feature loss in Forest Edition: Cannot skip a backup for non-authoritative DCs in Sysvol recovery mode | N/A | ADO-245551 |
| 'There is no PREFERRED_DNS value' error when a 'Select preferred DNS' agent operation did not return a result it causes product to hald and cannot be skipped or aborted | N/A | ADO-253457 |
| Resume Forest Recovery show 'Password is incorrect' | N/A | ADO-254788 |
| Installing Forest Recovery agent hangs if SMB shares are disabled | N/A | ADO-285225 |
| Recovery Manager for Active Directory 10.2 Hotfix 1 | ||
| During upgrade a DBImport error occurs when antimalware status data exists. Caused by debug logging on by default. | N/A | ADO-274622 |
| GPO Comparison Report is not working | N/A | ADO-278211 |
| Recovery Manager for Active Directory 10.2 | ||
| Email notification template contains invalid text and status message | N\A | ADO-252659 |
| Verification email contains incorrect backup data | N\A | ADO-252866 |
| Creating ADVL fails when unable to access VConverter error | N\A | ADO-253382 |
| Wrong replication partner is selected in IFM recovery on second phase. IFM failed | N\A | ADO-253681 |
| IFM script does not automatically reboot DC after installed AD DS tools. IFM failed | N\A | ADO-253778 |
| Install AD moethd on second pahse may fail with "Unable to connect to the replication source" | N\A | ADO-225791 |
| IPSec isolation policy was not removed successfully when previous forst recovery is aborted and left dirt data | N\A | ADO-237004 |
| IPSec isolation policy was not removed successfully during restore | N\A | ADO-237049 |
| The "Reset computer account" operation fails when some other recovery operation failed and retried earlier | RMADFE-2659 | ADO-242197 |
| After upgrade from 10.1 to 10.1.1, the Verify Settings in Forest Recovery console send emails with some kind of strange status messages | N\A | ADO-242679 |
| Recovery Manager for Active Directory 10.1.1 HF1 | ||
| Forest Recovery fails if the only drive encrypted with BitLocker is removed. | N\A | ADO-222308 |
| Recovery Manager for Active Directory 10.1.1 | ||
| IPv6 based UNC Path support. | RMADFE-3232 | ADO-218913 |
| Scanning of all backups does not stop when one of the processes ends urgently. | N/A | ADO-219145 |
| Errors when trying to restore SYSVOL: Need to improve the RPC stability. | N/A | ADO-228250 |
| ADVL converter returns 500 error. | N/A | ADO-230091 |
| Error when booting VM: "Invalid location type. Location accepts only VIDatastore objects." | N/A | ADO-233811 |
Recovery Manager for Active Directory fully supports Transport Layer Security (TLS) 1.2. It is recommended that you upgrade to TLS 1.2 for secure communications.
| Security Resolved Issue | ID (old) | ID (new) |
|---|---|---|
| Recovery Manager for Active Directory 10.2.1 | ||
| Do not use SHA1 for key derivation function to generate hash for creation of AES-256 key for backup encryption | --- | --- |
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 利用規約 プライバシー Cookie Preference Center
