Chat now with support
Chat with Support

Recovery Manager for AD Forest Edition 10.1.1 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Using Management Shell Creating virtual test environments Using Recovery Manager for Active Directory web portal Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory Descriptions of PowerShell commands
Add-RMADBackup Add-RMADCollectionItem Add-RMADFEComputer Add-RMADReplicationConsole Add-RMADStorageServer Backup-RMADCollection Close-RMADFEProject Compare-RMADObject Convert-RMADBackup ConvertTo-RMADRecycledObject Create-RMADStorageManagementAgentSetup Expand-RMADBackup Export-RMADBackup Export-RMADFERecoveryCertificate Export-RMADFEResult Get-RMADBackup Get-RMADBackupAgent Get-RMADBackupInfo Get-RMADBackupObject Get-RMADBackupSecurityStatus Get-RMADCollection Get-RMADCollectionItem Get-RMADDeletedObject Get-RMADFEComputer Get-RMADFEConsole Get-RMADFEDnsCache Get-RMADFEDomain Get-RMADFEEvent Get-RMADFEGlobalOptions Get-RMADFEOperation Get-RMADFEPersistenceConnection Get-RMADFEProject Get-RMADFERecoveryAgent Get-RMADFESchedule Get-RMADGlobalOptions Get-RMADLicenseInfo Get-RMADObject Get-RMADReplicationConsole Get-RMADReplicationSchedule Get-RMADReplicationSession Get-RMADReplicationSessionItem Get-RMADReportObject Get-RMADReportObjectAttributes Get-RMADReportObjectChildren Get-RMADReportSession Get-RMADSession Get-RMADSessionItem Get-RMADSessionItemEvent Get-RMADStorageServers Import-RMADBackup Import-RMADFERecoveryCertificate Install-RMADBackupAgent Install-RMADFERecoveryAgent New-RMADCollection New-RMADFEProject New-RMADFERecoveryMedia New-RMADSchedule Open-RMADFEProject Publish-RMADBackupSecurityStatus Remove-RMADBackup Remove-RMADBackupAgent Remove-RMADCollection Remove-RMADCollectionItem Remove-RMADFEComputer Remove-RMADFERecoveryAgent Remove-RMADFESchedule Remove-RMADReplicationConsole Remove-RMADReplicationSchedule Remove-RMADReplicationSession Remove-RMADStorageServer Remove-RMADUnpackedComponent Rename-RMADCollection Restore-RMADDeletedObject Restore-RMADDomainController Restore-RMADObject Resume-RMADFERecovery Save-RMADFEProject Set-RMADCollection Set-RMADFEComputer Set-RMADFEDnsCache Set-RMADFEDomain Set-RMADFEGlobalOptions Set-RMADFEPersistenceConnection Set-RMADFERecoveryMode Set-RMADFESchedule Set-RMADGlobalOptions Set-RMADReplicationConsole Set-RMADReplicationSchedule Start-RMADFERecovery Start-RMADFEVerification Start-RMADReplication Start-RMADReportViewer Stop-RMADFEWorkflow Update-RMADBackupAgent Update-RMADFEProject Update-RMADLicense

Restore-RMADObject


external help file: QuestSoftware.RecoveryManager.AD.PowerShell.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShell
online version:

schema: 2.0.0

SYNOPSIS

Restores Active Directory objects from a backup.
This cmdlet requires Windows PowerShell to be started using a multi-threaded apartment (MTA).

SYNTAX

Default (Default)

Restore-RMADObject [-Attribute <String[]>] [-NoReport] [-SkipReplication] [-KeepBackupUnpacked]
 [-Id] <String[]> -Backup <Guid> [-BackupPassword <SecureString>] [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ReportUnchangedAttributes] [-ReportUnchangedObjects]
 [-SQLCredential <PSCredential>] [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor]
 [-Server <String>] [-Credential <PSCredential>] [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

Bkf

Restore-RMADObject [-Attribute <String[]>] [-NoReport] [-SkipReplication] [-KeepBackupUnpacked]
 [-Id] <String[]> -Backup <Guid> [-BackupPassword <SecureString>] [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ReportUnchangedAttributes] [-ReportUnchangedObjects]
 [-SQLCredential <PSCredential>] [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor]
 [-Server <String>] [-Credential <PSCredential>] [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

ADLds

Restore-RMADObject [-Attribute <String[]>] [-NoReport] [-SkipReplication] [-KeepBackupUnpacked]
 [-Id] <String[]> -Backup <Guid> [-BackupPassword <SecureString>] [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ReportUnchangedAttributes] [-ReportUnchangedObjects]
 [-SQLCredential <PSCredential>] [-AdLds] -AdLdsInstance <String> [-ChangeAuditorDbName <String>]
 [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>] [-Partition <String>]
 [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>] [-InformationVariable <String>]
 [<CommonParameters>]

Firewall

Restore-RMADObject [-Attribute <String[]>] [-NoReport] [-SkipReplication] [-KeepBackupUnpacked]
 [-Id] <String[]> -Backup <Guid> [-BackupPassword <SecureString>] [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ReportUnchangedAttributes] [-ReportUnchangedObjects]
 [-SQLCredential <PSCredential>] [-AdLds] [-ChangeAuditorDbName <String>] [-ConfigureFirewall]
 [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>] [-Partition <String>]
 [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>] [-InformationVariable <String>]
 [<CommonParameters>]

Agentless

Restore-RMADObject [-Attribute <String[]>] [-NoReport] [-SkipReplication] [-KeepBackupUnpacked]
 [-Id] <String[]> -Backup <Guid> [-BackupPassword <SecureString>] [-UseAgentlessMethod] [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ReportUnchangedAttributes] [-ReportUnchangedObjects]
 [-SQLCredential <PSCredential>] [-AdLds] [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor]
 [-Server <String>] [-Credential <PSCredential>] [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

Restores the Active Directory objects that have specified parameters from a backup.
You can only use this cmdlet when Windows PowerShell is started using MTA.
To start Windows PowerShell using MTA, run this command:
PowerShell -mta

EXAMPLES

Example 1

PS C:\> $backups = Get-RMADBackup | Sort-Object -Property date -Descending

C:\PS>$object = Get-RMADObject -Id "johndoe"

C:\PS>Restore-RMADObject -Id $o.ObjectInfo.Guid -Backup $b[0] -UseAgentlessMethod -NoReport

In the first line of this example, the Get-RMADBackup cmdlet gets all registered backups and sorts them by date in the descending order.
Then, the backup objects are stored in the $backups variable.

Example 2

PS C:\> $b = Get-RMADBackup -Id 1

C:\PS>Restore-RMADObject -Id "johndoe" -Backup $b -Attribute samAccountName,description -ReportUnchangedAttributes

Start-RMADReportViewer

In the first line of this example, the Get-RMADBackup cmdlet gets the registered backup whose ID is 1.
Then, the backup object is stored in the $b variable.

PARAMETERS

-Attribute

Specifies the display names of the attributes to restore.
When specifying multiple display names, use a comma as a separator.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-NoReport

When present, specifies to not create any report about the restore operation.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SkipReplication

When present, specifies to skip replication during the restore operation.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-KeepBackupUnpacked

Determines whether to save the unpacked backup after the search operation.
If this parameter is not set, the unpacked backup will be deleted after the search operation is completed.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Id

Specifies the objects to restore.
To specify an object, you can use object GUID, distinguished name (DN), sAMAccountName, or user principal name (UPN).

Type: String[]
Parameter Sets: (All)
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Backup

Specifies the backup that contains the AD objects to be restored.

Type: Guid
Parameter Sets: (All)
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-BackupPassword

Specifies the password to access a password-protected backup.
This is the same password that is set in the computer collection properties in the Recovery Manager console.

Type: SecureString
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ProcessChildren

When present, specifies to process children of the objects specified in the Id attribute.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ChildObjectClass

Allows you to restore only those child objects that belong to the classes you specify in this parameter.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ReportUnchangedAttributes

Includes the object attributes that have not changed since the time of the specified backup into the operation report.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ReportUnchangedObjects

Includes the objects that have not changed since the time of the specified backup into the operation report.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SQLCredential

Specifies the user name and password of the user account with which you want to connect to SQL Server to generate a report about the performed operation.
The user name and password must be in the form of a PSCredential object.
When this parameter is omitted, the cmdlet uses the credentials of the account under which Management Shell is running.
Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ChangeAuditorDbName

Specifies the location of the ChangeAuditor SQL database.
If this parameter is omitted, the 'ModifyBy' cell in AD reports will be empty.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RestoreUsingChangeAuditor

Specifies if Change Auditor is used to restore the latest changes to the object.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Server

Specifies the domain controller or ADAM instance host on which objects are to be restored.
The domain controller can be specified by its computer name, IP address, or domain name.
If you specify a domain name, deleted objects are restored to any available domain controller in the specified domain.
The ADAM instance host can be specified by its computer name or IP address.
If this parameter is omitted, objects are restored to any available domain controller in the current domain.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Credential

The user name and password of the user account with which you want to connect, in the form of a PSCredential object.
Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
If this parameter is omitted, the credentials of current user account are used.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Partition

Specifies the AD LDS (ADAM) partition where you want to restore objects.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Port

Specifies the port on which to access the AD LDS (ADAM) instance where you want to restore objects.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AdLds

Specifies that the AD LDS instance is used as a data storage.

Type: SwitchParameter
Parameter Sets: ADLds
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Type: SwitchParameter
Parameter Sets: Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AdLdsInstance

If you restore the backed up AD LDS (ADAM) objects, you should specify the AD LDS instance whose backup you want to use.

Type: String
Parameter Sets: ADLds
Aliases: AdamInstance

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ConfigureFirewall

Specifies whether Recovery Manager automatically configures Windows Firewall on target Windows Server 2008-based or Windows Server 2012-based DCs to allow compare and restore operations.

Type: SwitchParameter
Parameter Sets: Firewall
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-UseAgentlessMethod

Specifies to use the agentless method to access the target domain controller.
If this parameter is omitted, the target domain controller is accessed via Restore Agent.

Type: SwitchParameter
Parameter Sets: Agentless
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Resume-RMADFERecovery


external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Resumes recovery process.

SYNTAX

Resume (Default)

Resume-RMADFERecovery [-ProjectPassword] <SecureString> [-IgnoreDialogueTimeout] [-GroupPasswords <Hashtable>]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

Drop

Resume-RMADFERecovery [-DropStoredSession] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

If some workstations have begun the restore process and failed, this cmdlet can resume the recovery process.

SQL Persistence must be properly configured on both processes.
Both processes must be registered as restoring workstations.

If you chose to reset the password for domain users in privileged groups when you started a forest recovery, you need to provide passwords again using -GroupPasswords parameter because the product does not store user passwords.

EXAMPLES

Example 1

PS C:\> {{ Add example code here }}

{{ Add example description here }}

PARAMETERS

-ProjectPassword

The password that was configured for restore project.

Type: SecureString
Parameter Sets: Resume
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreDialogueTimeout

Allows you to proceed if another console does not answer.

Type: SwitchParameter
Parameter Sets: Resume
Aliases:

Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-GroupPasswords

Resets the password for domain users in the specified privileged groups.

Type: Hashtable
Parameter Sets: Resume
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-DropStoredSession

Lead to a session drop in the persistence DB.

Type: SwitchParameter
Parameter Sets: Drop
Aliases:

Required: True
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Save-RMADFEProject


external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Saves the RMADFE project.

SYNTAX

Save-RMADFEProject [-Path] <String> [-Password] <SecureString> [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

This cmdlet saves the RMADFE project to the specified location.
You must also supply the password that is used to access the project content.

EXAMPLES

EXAMPLE 1

@{paragraph=PS C:\>}

PS C:\> Save-RMADFEProject -Path C:\RMADFeProjects\SampleProject.frproj -Password (ConvertTo-SecureString "project password" -AsPlainText -Force)

This command saves SampleProject.frproj to the specified location.

PARAMETERS

-Path

Specifies the full path to the RMADFE project file.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Password

Specifies the password that is used to access the RMADFE project content.

Type: SecureString
Parameter Sets: (All)
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Set-RMADCollection


external help file: QuestSoftware.RecoveryManager.AD.PowerShell.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShell
online version:

schema: 2.0.0

SYNOPSIS

Sets properties for a computer collection.

SYNTAX

Name (Default)

Set-RMADCollection [-Name] <String[]> [-BackupComponents <BackupComponents>] [-Properties <Hashtable>]
 [-Schedule <Schedule[]>] [-ScheduleCredential <PSCredential>] [-AgentCredentialEnabled <Boolean>]
 [-AgentCredential <PSCredential>] [-StorageCredentialEnabled <Boolean>] [-StorageCredential <PSCredential>]
 [-RetentionPolicyEnabled <Boolean>] [-RetentionPolicyCount <Int32>] [-PassThru] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

InputObject

Set-RMADCollection [-InputObject] <ComputerCollection[]> [-BackupComponents <BackupComponents>]
 [-Properties <Hashtable>] [-Schedule <Schedule[]>] [-ScheduleCredential <PSCredential>]
 [-AgentCredentialEnabled <Boolean>] [-AgentCredential <PSCredential>] [-StorageCredentialEnabled <Boolean>]
 [-StorageCredential <PSCredential>] [-RetentionPolicyEnabled <Boolean>] [-RetentionPolicyCount <Int32>]
 [-PassThru] [-IgnoreReadOnly] [-InformationAction <ActionPreference>] [-InformationVariable <String>]
 [-WhatIf] [-Confirm] [<CommonParameters>]

Id

Set-RMADCollection [-Id] <Int32[]> [-BackupComponents <BackupComponents>] [-Properties <Hashtable>]
 [-Schedule <Schedule[]>] [-ScheduleCredential <PSCredential>] [-AgentCredentialEnabled <Boolean>]
 [-AgentCredential <PSCredential>] [-StorageCredentialEnabled <Boolean>] [-StorageCredential <PSCredential>]
 [-RetentionPolicyEnabled <Boolean>] [-RetentionPolicyCount <Int32>] [-PassThru] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

DESCRIPTION

Sets properties for the Recovery Manager computer collection you specify.

EXAMPLES

Example 1

PS C:\> Set-RMADCollection -Name Collection1 -BackupComponents ActiveDirectory,Registry,GroupMembership,ForestRecoveryMetadata

This command sets properties for the computer collection named Collection1.

Example 2

PS C:\> Set-RMADCollection * -RetentionPolicyEnabled $false

This command disables all backup retention policies for all existing computer collections.

Example 3

PS C:\> $c = Get-RMADCollection | Where-Object { $_.AgentCredentialEnabled -eq $true }

C:\PS>$cred = Get-Credential

C:\PS>Set-RMADCollection -InputObject $c -AgentCredential $cred

The first command in this example gets objects representing the computer collections whose properties are set to access Backup Agent and backup files with a specific user account.
Then the command saves the computer collection objects in the $c variable.

Example 4

PS C:\> $a = Get-RMADCollection -Name "Collection1"

C:\PS>Set-RMADCollection -InputObject $a[1] -Properties @{BackupComponents="ActiveDirectory","BootFiles"; UsePreinstalledAgent=$true}

In the first line of this example, the Get-RMADCollection cmdlet gets the Computer Collection whose name is Collection1 and saves it to the $a variable.
In the second line of this example, the Set-RMADCollection cmdlet sets the components to be backed up (that is, Active Directory and boot files) and specifies to use preinstalled Backup Agent for backup operations.
For a complete list of items you can include in the braces, see the description of the Properties parameter.

Example 5

PS C:\> $schedule=(New-RMADSchedule -Daily -StartDate "9/20/2013 10:00" -DaysInterval 1), (New-RMADSchedule -Daily -StartDate "9/20/2013 22:00" -DaysInterval 1)

C:\PS>Set-RMADCollection -InputObject $col -Properties @{EnableEmailLog=$true; EmailLogTo="administrator@mydomain.com"; EmailLogLevel="Everything"}

This example illustrates how to back up a Computer Collection by using two backup schedules.
The first line of this example creates two backup creation schedules and stores them in the $schedule variable.
One schedule invokes the backup operation once in every two days at 10 a.m.
Another schedule invokes the backup operation once in every two days at 10 p.m..
The two backup schedules become effective starting from the 20th September 2013.
The second line of this example enables e-mail notifications for the Computer Collection.
The recipient address for e-mail notifications is administrator@mydomain.com.
The e-mail notifications provide information about all backup events.

Example 6

PS C:\> $cred = Get-Credential

C:\PS>Set-RMADCollection -Name MyCollection -Properties @{AgentSideScriptBeforeBackupEnabled = $true; AgentSideScriptBeforeBackup = 'Set-Disk -Number 5 -IsOffline $false'; AgentSideScriptAfterBackupEnabled = $true; AgentSideScriptAfterBackup = 'Set-Disk -Number 5 -IsOffline $true'; AgentSideScriptCredential = $cred}

This example illustrates how to customize your environment by running PowerShell scripts on the domain controller before and after creating a backup.

PARAMETERS

-Name

Specifies the name of the computer collection whose properties you want to set.

Type: String[]
Parameter Sets: Name
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: True

-BackupComponents

Use this parameter to specify the names of the System State components you want to back up.

Type: BackupComponents
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Properties

Allows you to modify the Computer Collection properties.
To specify the properties you want to modify, use an associative array or hash table.
For more information, see the Windows PowerShell help topic on associative arrays (hash tables).
To open the topic, at the PoweShell command prompt enter the following:
help about_associative_arrayBelow are the properties you can modify by using this parameter.
The properties are grouped by the names of tabs in the "Computer Collection Properties" dialog box, because each property corresponds to an option on these tabs.To assign a new value to a property, use the following format: PropertyName=Value

  • UseAlternateStoragePath.
    Specifies whether to store a copy of each backup in an alternate location.
    Can take one of these values: $true, $false.
  • AlternateStoragePath.
    Specifies a storage path format for the alternate location.
    Surround the path with double quotes.
  • AgentCredentialEnabled.
    Causes the Recovery Manager console to use a specified user account to access the Backup Agent and backup files on target computers.
    Can take one of these values: $true, $false.
  • AgentCredential.
    Specifies the account under which the Recovery Manager console accesses the Backup Agent and backup files, in the form of a PSCredential object.
    Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
  • ConfigureFirewall.
    Specifies whether Recovery Manager automatically configures Windows Firewall on target Windows Server 2008-based or Windows Server 2012-based DCs to allow backup operations.
    Can take one of these values: $true, $false.
  • UsePreinstalledAgent.
    Specifies whether Recovery Manager automatically preinstalls the Backup Agent.
    Can take one of these values: $true, $false.
  • DeployForestRecoveryAgent.
    Specifies whether Recovery Manager verifies that the Forest Recovery Agent is installed on each domain controller in the Computer Collection.
    Can take one of these values: $true, $false.
  • BackupDescription.
    Specifies a description for the backups to be created for the Computer Collection.
    The description may include expressions, such as %COMPUTERNAME% and %DATETIME%.
  • BackupPasswordEnabled.
    Specifies whether to protect the backups with a password.
    Can take one of these values: $true, $false.
  • BackupPassword.
    Specifies a password to protect the backups.
    The value must be a SecureString object.
  • ConsoleSideBackupEnabled.
    Specifies to store backups on the Recovery Manager computer or on a Universal Naming Convention (UNC) share.
    Can take one of these values: $true, $false.
  • ConsoleSideBackupPath.
    Specifies a storage path format for backup files.
    The path format can include expressions, such as %COMPUTERNAME% and %DATETIME%.
    Surround the path format with double quotes.
  • ConsoleSideRetentionPolicyEnabled.
    Specifies whether to apply a retention policy to backups stored at the path provided in the ConsoleSideBackupPath parameter.
    Can take one of these values: $true, $false.
  • ConsoleSideRetentioPolicyCount.
    Specifies the number of the most recent backups to retain.
    Other backups are automatically deleted.
  • AgentSideBackupEnabled.
    Specifies to store backups on the backed-up DC or on a Universal Naming Convention (UNC) share.
    Can take one of these values: $true, $false.
  • AgentSideBackupPath.
    Specifies a storage path format for backup files.
    The path format can include expressions, such as %COMPUTERNAME% and %DATETIME%.
    Surround the path format with double quotes.
  • AgentSideRetentionPolicyEnabled.
    Specifies whether to apply a retention policy to backups stored at the path provided in the ConsoleSideBackupPath parameter.
    Can take one of these values: $true, $false.
  • AgentSideRetentionPolicyCount.
    Specifies the number of the most recent backups to retain.
    Other backups are automatically deleted.
  • StorageCredentialEnabled.
    Causes the Recovery Manager console to use a specified user account to access backup files on target computers.
    Can take one of these values: $true, $false.
  • StorageCredential.
    Specifies the account under which the Recovery Manager Backup Agent accesses the backup files, in the form of a PSCredential object.
    Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
  • EnableEmailLog.
    Specifies whether to send information about backup creation sessions by e-mail.
    Can take one of these values: $true, $false.
  • EnableEmailLogOnlyOnErrors.
    Specifies to send information over e-mail only when an error occurs.
    Can take one of these values: $true, $false.
  • EmailLogLevel.
    Specifies the type of information to send over e-mail.
    Possible values: "Everything", "ErrorsOnly".
  • EmailLogTo.
    Specifies the recipient's e-mail address to send the information about backup creation sessions.
  • EnableApplicationLog.
    Specifies whether to write information about backup creation sessions to the Windows application log on the Recovery Manager computer.
    Can take one of these values: $true, $false.
  • EnableApplicationLogOnlyOnErrors.
    Specifies whether to create an Application log event only upon backup creation session errors or warnings.
    Can take one of these values: $true, $false.
  • ApplicationLogLevel.
    Specifies the type of information to write to the Application log.
    Possible values: "Everything", "ErrorsOnly".
  • EnableLogFile.
    Specifies whether to write information about backup creation sessions to the additional text file you specify.
    Can take one of these values: $true, $false.
  • EnableLogFileOnlyOnErrors.
    Specifies whether to write information to the additional text file only upon backup creation session errors or warnings.
    Can take one of these values: $true, $false.
  • LogFileLevel.
    Specifies the type of information to write to the additional text file.
    Possible values: "Everything", "ErrorsOnly".
  • LogFileName.
    Specifies a path and name for the additional text file.
  • LogFileAppend.
    Specifies whether to append information to the additional text file.
    Can take one of these values: "True", "False".
  • ExtendedLogging.
    Specifies the logging settings for DCs in the collection.
    Can take one of these values:
    Use global (default) - use settings from the root node: Recovery Manager for Active Directory->Settings…>Logging,
    Yes - for all DCs in the current collection: for logs will be used the "Trace" option,
    No - for all DCs in the current collection: in logs will be only Warnings and Error messages.
  • CompressionMethod.
    Specifies a method to compress the backups to be created.
    Can take one of these values: "None", "Fast", "Normal", "Maximum".
  • ParallelBackups.
    Specifies the maximum number of computers serviced in parallel when creating backups.
    Increasing this number can speed the backup creation, however, this may result in network saturation and slow network response.
  • EnableTransferRateLimit.
    Specifies whether to limit the total bandwidth used by the Backup Agent when transferring data over the network.
    Use this property to prevent the Backup Agent from generating excessive network traffic.
    Can take one of these values: $true, $false.
  • TransferRaleLimit.
    Specifies the bandwidth limit in Mbits/sec for the Backup Agent.
  • EnableCpuUsageLimit.
    Specifies whether to limit the CPU processing time used by the Backup Agent on each computer.
    Can take one of these values: $true, $false.
  • CpuUsageLimit.
    Specifies the CPU processing limit in percent.
  • ScheduleEnabled.
    Specifies whether to enable backup creation schedule.
    Can take one of these values: $true, $false.
  • Schedule.
    Sets up a backup creation schedule.
    To set up a schedule, use the New-RMADSchedule cmdlet.
  • ScheduleCredential.
    Specify the user account under which the Task Scheduler performs backup creation tasks, in the form of a PSCredential object.
    Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
  • BackupComponents.
    Specifies the system state components to back up.
    Possible values: "All", "None", "ActiveDirectory", "Adam", "BootFiles", "CertificateServer", "ClusterQuorum", "EnterpriseServices", "ForestRecoveryMetadata", "GroupMembership", "IisMetabase", "PerformanceCounters", "Registry".
    When specifying multiple values, use a comma as a separator.
  • CollectGroupMembership.
    Specifies whether to back up group membership data stored on Global Catalog servers.
    Can take one of these values: $true, $false.
  • CollectForestRecoveryMetadata.
    Specifies whether to create backups that can be used to recover the Active Directory forest.
    Can take one of these values: $true, $false.
  • OverrideDefaultBackupUnpackSettings.
    Specifies whether to override the global settings for unpacking backups for the Computer Collection.
    Can take one of these values: $true, $false.
  • UnpackBackupsUponCreation.
    Specifies whether to unpack each backup upon its creation.
    Can take one of these values: $true, $false.
  • UnpackedBackupsToKeep.
    Specifies the number of the most recent unpacked backups to retain.
    Other unpacked backups are automatically deleted.
  • IsUnpackOnlySelected.
    Specifies whether to keep unpacked backups only for a list of selected domain controllers.
    Can take one of these values: $true, $false.
  • SelectedDCsToUnpack.
    Specifies the names (separated by comma) of domain controllers you want to keep unpacked backups for.
Type: Hashtable
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Properties

  • ConsoleSideScriptBeforeBackupEnabled.
    Determines whether to run the PowerShell script specified in ConsoleSideScriptBeforeBackup parameter on the Recovery Manager console computer before the backup creation process is started. Can take one of these values: $true, $false.
  • ConsoleSideScriptBeforeBackup.
    Specifies the PowerShell script that is executed on the Recovery Manager console machine before the backup creation process is started.
  • ConsoleSideScriptStopBackup.
    Determines whether to stop the backup process if the script specified in ConsoleSideScriptBeforeBackup parameter cannot be run without errors. Can take one of these values: $true, $false.
  • ConsoleSideScriptAfterBackupEnabled.
    Determines whether to run the PowerShell script specified in ConsoleSideScriptAfterBackup parameter on the Recovery Manager console computer after backup is created. Can take one of these values: $true, $false.
  • ConsoleSideScriptAfterBackup.
    Specifies the PowerShell script that is executed on the Recovery Manager console computer after backup is created.
  • ConsoleSideScriptFailBackup.
    If the script specified in ConsoleSideScriptAfterBackup parameter fails, the backup process will be shown as failed with error in the Recovery Manager console. Can take one of these values: $true, $false.
  • ConsoleSideScriptCredential.
    Specify an account under which the scripts will be running on the Recovery Manager console computer. By default, the account under which the Recovery Manager Management Shell is launched will be used. Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
  • AgentSideScriptBeforeBackupEnabled.
    Determines whether to run the PowerShell script specified in AgentSideScriptBeforeBackup parameter on the domain controller before the backup creation process is started. Can take one of these values: $true, $false.
  • AgentSideScriptBeforeBackup.
    Specifies the PowerShell script that is executed on the domain controller before the backup creation process is started.
  • AgentSideScriptStopBackup.
    Determines whether to stop the backup process if the script specified in AgentSideScriptBeforeBackup parameter cannot be run without errors. Can take one of these values: $true, $false.
  • AgentSideScriptAfterBackupEnabled.
    Determines whether to run the PowerShell script specified in AgentSideScriptAfterBackup parameter on the domain controller after backup is created. Can take one of these values: $true, $false.
  • AgentSideScriptAfterBackup.
    Specifies the PowerShell script that is executed on the domain controller after backup is created.
  • AgentSideScriptFailBackup.
    If the script specified in AgentSideScriptAfterBackup parameter fails, the backup process will be shown as failed with error in the Recovery Manager console. Can take one of these values: $true, $false.
  • AgentSideScriptCredential.
    Specify an account under which the scripts will be running on domain controller. This parameter is mandatory if at least one of the agent side scripts is specified using AgentSideScriptBeforeBackup and AgentSideScriptAfterBackup parameters. Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.
Type: Hashtable
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Schedule

Causes the computer collection you specify to use the backup creation schedule you set by using the New-RMADSchedule cmdlet.

Type: Schedule[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ScheduleCredential

Specifies the user account under which the scheduled backup creation task will be run.
This account must have sufficient permissions to back up the computer collection you specify.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AgentCredentialEnabled

Specifies to use a particular account to access Backup Agent installed on the DCs in the computer collection and locations where backup files for the computer collection will be saved.
To specify the credentials for the account, use the AgentCredential parameter.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AgentCredential

Specifies the credentials for the account you want to use to access Backup Agent installed on the DCs in the computer collection and locations where backup files for the computer collection will be saved.
TO enable using the account whose credentials you supply in this parameter, use the AgentCredentialEnabled parameter.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-StorageCredentialEnabled

Specifies to use a particular account to access locations where backup files for the computer collection will be saved.
To specify the credentials for the account, use the StorageCredential parameter.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-StorageCredential

Specifies the credentials for the account you want to use to access locations where backup files for the computer collection will be saved.
To enable using the account whose credentials you supply in this parameter, use the StorageCredentialEnabled parameter.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RetentionPolicyEnabled

Specifies to delete obsolete backups for particular computer collection.
To set the number of latest backups you want to keep for each DC in the computer collection, use the RetentionPolicyCount parameter.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RetentionPolicyCount

Specifies the number of latest backups you want to keep for each DC in the computer collection.
To enable the deletion of obsolete backups, use the RetentionPolicyEnabled parameter.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-PassThru

Passes the computer collection whose properties you have set along the pipeline.
If this parameter is omitted, the computer collection is not passed along the pipeline.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Describes what would happen if you executed the command without actually executing the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Prompts for a confirmation before executing the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InputObject

Renames the computer collection represented by the specified collection objects.
Specify the name of the variable that contains the objects or type a command or expression that gets the objects.

Type: ComputerCollection[]
Parameter Sets: InputObject
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-Id

Specifies the identifier of the computer collection whose properties you want to set.

Type: Int32[]
Parameter Sets: Id
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating