Recovery Manager for AD 10.2

About Quest Recovery Manager for Active Directory Features and benefits

Comprehensive Active Directory recovery options AD LDS (ADAM) recovery Granular, selective restore Integration with On Demand Recovery Group Policy recovery Centralized remote administration Audit of objects and operations Integration with Change Auditor for Active Directory Fault tolerance Management Shell Scheduling and automation Scalability and performance

Technical overview

Creating backups Backup Agent Recovering Active Directory Recovering Group Policy Comparison reports

Getting started

Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall

Manual method Automatic method

Using Computer Collections

Creating Computer Collections Renaming Computer Collections Modifying Computer Collection properties Deleting Computer Collections Specifying an access account for Backup Agent and backup file storages Adding domain controllers to a Computer Collection Adding containers to a Computer Collection Adding AD LDS (ADAM) hosts and instances Removing items from a Computer Collection

Managing Recovery Manager for Active Directory configuration

Preparing for working with Active Directory or AD LDS (ADAM) backups Settings

General tab E-mail tab Unpacked Backups tab (global settings) Logging tab Ports tab

Default properties for Computer Collections Properties for an existing Computer Collection

Backup tab Schedule tab Alerts tab Logging tab Performance tab Advanced tab Agent Settings tab Local Storage tab Remote Storage tab Unpacked Backups tab

Container and site properties

Properties for a domain or organizational unit Properties for an Active Directory site Properties for an AD LDS (ADAM) site

Sessions node properties Forest properties Domain properties Domain controller properties AD LDS (ADAM) partition properties AD LDS (ADAM) instance properties Showing or hiding AD LDS (ADAM) partitions Showing or hiding domains Showing or hiding sites

Licensing

Installing license key file Updating license key file Revoking licenses

Backing up data

Permissions required for the Backup operation Managing Backup Agent

Installing Backup Agent automatically Preinstalling Backup Agent manually Discovering preinstalled Backup Agent Updating Backup Agent information Upgrading Backup Agent Uninstalling Backup Agent Removing a Backup Agent entry from the Backup Agent Management node

Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups

Creating Active Directory backup Creating BMR backup Usage of backup access credentials

Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM)

Method 1: Back up AD LDS (ADAM) from the Recovery Manager Console

Step 1: Connect to AD LDS (ADAM) Step 2: Back up AD LDS (ADAM)

Method 2: Schedule backup creation for AD LDS (ADAM)

Step 1: Connect to AD LDS (ADAM) Step 2: Add AD LDS (ADAM) instances to Computer Collection Step 3: Create or modify backup creation schedule

Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling

Task scheduler overview

Scheduling backup creation Managing backup schedule Setting user account for scheduled tasks

Setting performance options Setting advanced backup options Unpacking backups

Configuring default settings to unpack backups Configuring Computer Collection-specific settings to unpack backups Unpacking a backup manually Deleting data unpacked from a backup

Using e-mail notification Viewing backup creation results

Sessions node properties

General tab Progress tab

Computer properties Computer session properties

General tab Events tab Backup tab

Backups node properties Filtering backups

General tab for Active Directory backups General tab for AD LDS (ADAM) backups

Properties of registered AD and AD LDS (ADAM) backups

General tab

Restoring data

Getting started with Active Directory recovery

Active Directory recovery options Implications of the online restore

Forcing replication Skipping replication Stopping online restore

Using agentless or agent-based method

Agentless method Agent-based method

Managing deleted or recycled objects

Recovering deleted objects Recycling deleted objects Recovering recycled objects

Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore

Online Restore Wizard overview

Compare, restore, and report changes in Active Directory Compare two backups and report the differences Reporting Selecting objects in the Online Restore Wizard

Restoring AD LDS (ADAM)

Method 1: Restore an AD LDS (ADAM) instance from a backup created with Recovery Manager for Active Directory

Step 1: Select a backup Step 2: Restore AD LDS (ADAM) instance

Method 2: Restore an AD LDS (ADAM) database from a backup created with third-party software

Step 1: Extract and register AD LDS (ADAM) database Step 2: Restore the extracted AD LDS (ADAM) database

Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations

Reports about Active Directory objects Reports about AD LDS (ADAM) objects Reports about Group Policy objects Data about who modified Active Directory objects

Using complete offline restore

Repair Wizard overview

Offline restore implications

Non-authoritative restore

DIT Database SYSVOL

Authoritative restore

DIT database SYSVOL

Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy

Group Policy Restore Wizard overview

Restoring data from third-party backups Using the Extract Wizard

Creating a Windows Server 2008 R2-based domain controller from a backup

Step 1: Create and extract a backup Step 2: Use IFM to create a domain controller

Creating a Windows Server 2012-based or higher domain controller from a backup

Step 1: Create and extract a backup Step 2: Install AD DS on the Windows Server 2012-based or higher computer Step 3: Use the Install-ADDSDomainController cmldet to install from media

Restoring passwords and SID history

Preserving passwords and SID history in object tombstones

Step 1: Make sure prerequisites are met Step 2: Modify the searchFlags attribute value

Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory

Supported versions of Microsoft Operations Manager Importing Management Pack Rules provided in Microsoft System Center Operations Manager Health dashboards

Using Management Shell

About Management Shell Installing and opening Management Shell

Installation requirements Installing Management Shell Opening Management Shell

Getting Help

Collecting diagnostic data for technical support

Step 1: Use Diagnostic Data Collector to automatically gather data Step 2: Gather remaining data manually

Using Recovery Manager for Active Directory web portal

About Recovery Manager Portal Installing Recovery Manager Portal Connecting to Recovery Manager Portal Administering Recovery Manager Portal

Configuring portal for working with Recovery Manager for Active Directory

Step 1: Install Recovery Manager Portal Access Service Step 2: Configure Recovery Manager for Active Directory Step 3: Add Recovery Manager for Active Directory instances Step 4: Configure recovery settings for Active Directory domains

Modifying recovery settings for domains Assigning roles to portal users Delegating restore or undelete permissions Configuring e-mail notification How Recovery Manager Portal recovers data Integration with On Demand Recovery

Viewing health summary for Recovery Manager for Active Directory instances Viewing backup creation history Recovering data using Recovery Manager Portal

Restoring objects from a backup Undeleting objects

Appendices

Frequently asked questions

Why do I need to restore deleted users or groups, rather than re-create them? How can I restore a user or group in Active Directory? How does online restore work? When an object is undeleted, what is restored from the tombstone and what is restored from the backup? What's the difference between an online restore and an authoritative restore? What's the difference between the agentless restore method and the agent-based restore method? Can I undelete a mailbox-enabled user? In the Group Policy Restore Wizard, a GPO link is shown as deleted, but the link actually exists in Active Directory. What's wrong? What is a primary restore of the SYSVOL? How do I change the Backup Agent port number?

Best practices for using Computer Collections Best practices for creating backups

Develop a backup and restore plan Determine which domain controllers to back up and how often Methods for deploying Backup Agent Retain recent backups Where to store backups

Storing backups for granular online or complete offline restores Storing backups for forest recovery

Ports Used by Recovery Manager for Active Directory Backup Wizard

What to Back Up Where to Store Backups When to Back Up Computer Collection Name (optional) Completing the Backup Wizard

Online Restore Wizard

Wizard Operation Mode Domain Selection Backup Selection Backup for Comparison (optional) Unpacked Backups Folder Selection Backup Data Preparation Domain Access Options Objects to Be Processed Operation Selection Processing Options

Select Object Types Select Attributes to Be Processed

Additional Options Operation Start Operation Progress

Password Settings

Operation Option Objects to Be Restored Where to Restore Deleted Objects Operation Results Completing the Online Restore Wizard

Online Restore Wizard for AD LDS (ADAM)

Wizard Operation Mode AD LDS (ADAM) Instance Selection Backup Selection Backup for Comparison Unpacked Backups Folder Selection Backup Data Preparation AD LDS (ADAM) Access Options Objects to Be Processed Processing Options Reporting Options Operation Start Operation Progress Operation Option Objects to Be Restored Operation Results Completing the Online Restore Wizard for AD LDS (ADAM)

Group Policy Restore Wizard

Domain Selection Backup Selection Unpacked Backups Folder Selection Backup Data Preparation Select Domain Controller Group Policy Object Selection GPO Restore Options Link Restore Options Restore Process Start Completing the Group Policy Restore Wizard

Repair Wizard

Computer and Backup Selection Target Computer Computer Restart Primary Restore of SYSVOL Restore Process Start Restore Progress Authoritative Restore Selections Computer Restart in Normal Mode Completing the Repair Wizard

Extract Wizard

Backup Selection Folder Selection Operation Start Operation Progress Completing the Extract Wizard

Technical characteristics

Typical sizes of databases

Reports database files

Typical backup creation times

Recommendations

Typical times to unpack backups

Events generated by Recovery Manager for Active Directory

Common Events Recovery Manager Console events Backup Agent events Management Agent events Restore Agent events Recovery Manager Portal events

Descriptions of PowerShell commands

Add-RMADBackup Add-RMADCollectionItem Add-RMADReplicationConsole Add-RMADStorageServer Backup-RMADCollection Compare-RMADObject Convert-RMADBackup ConvertTo-RMADRecycledObject Create-RMADStorageAgentSetup Expand-RMADBackup Export-RMADBackup Export-RMADSecureStorageBackup Get-RMADBackup Get-RMADBackupAgent Get-RMADBackupInfo Get-RMADBackupObject Get-RMADBackupSecurityStatus Get-RMADCollection Get-RMADCollectionItem Get-RMADDeletedObject Get-RMADGlobalOptions Get-RMADLicenseInfo Get-RMADObject Get-RMADReplicationConsole Get-RMADReplicationSchedule Get-RMADReplicationSession Get-RMADReplicationSessionItem Get-RMADReportObject Get-RMADReportObjectAttributes Get-RMADReportObjectChildren Get-RMADReportSession Get-RMADSession Get-RMADSessionItem Get-RMADSessionItemEvent Get-RMADStorageServer Get-RMADStorageServerHardeningStatus Get-RMADStorageServerRetentionPolicy Import-RMADBackup Install-RMADBackupAgent New-RMADCollection New-RMADSchedule Protect-RMADSecureStorageServer Publish-RMADBackupSecurityStatus Refresh-RMADStorageServer Register-RMADSecureStorageBackups Remove-RMADBackup Remove-RMADBackupAgent Remove-RMADCollection Remove-RMADCollectionItem Remove-RMADReplicationConsole Remove-RMADReplicationSchedule Remove-RMADReplicationSession Remove-RMADStorageServer Remove-RMADUnpackedComponent Rename-RMADCollection Restore-RMADDeletedObject Restore-RMADDomainController Restore-RMADObject Set-RMADCollection Set-RMADGlobalOptions Set-RMADReplicationConsole Set-RMADReplicationSchedule Set-RMADStorageServerRetentionPolicy Start-RMADReplication Start-RMADReportViewer Test-RMADSecureStorageBackup Unprotect-RMADStorageServer Update-RMADBackupAgent Update-RMADLicense

Remove-RMADStorageServer

external help file: QuestSoftware.RecoveryManager.AD.PowerShell.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShell
online version:

schema: 2.0.0

SYNOPSIS

Removes the secure storage server.

SYNTAX

Name

Remove-RMADStorageServer [-IgnoreReadOnly] [-Name] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

Server

Remove-RMADStorageServer [-IgnoreReadOnly] -Server <StorageServer> [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

Removes currently registered secure storage servers.

EXAMPLES

Example 1

PS C:\> Remove-RMADStorageServer -Name "backupsrv01.acme.test"

Removes the specified secure storage server.

Example 2

PS C:\> Get-RMADStorageServer | Remove-RMADStorageServer

Removes all registered secure storage servers.

PARAMETERS

-Name

Specifies the name of the registered storage server (DNS name or IP address).

Type: String
Parameter Sets: Name
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-Server

Specifies the secure storage server object.

Type: StorageServer
Parameter Sets: Server
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Shows what happens when you run the cmdlet. The cmdlet does not actually run.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

schema: 2.0.0

SYNOPSIS

Allows you to delete components (data) unpacked from specified backups.

SYNTAX

Instance

Remove-RMADUnpackedComponent [-InputObject] <BackupInfo[]> [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

Id

Remove-RMADUnpackedComponent [-Id] <Int32[]> [-IgnoreReadOnly] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

Allows you to delete all components (data) unpacked from specified backups and saved in the Recovery Manager cache for further use.

EXAMPLES

Example 1

PS C:\> Remove-RMADUnpackedComponent (Get-RMADBackup | where{$_.IsUnpacked -eq "true"})

Deletes all components unpacked from backups created with Recovery Manager for Active Directory.

PARAMETERS

-InputObject

Specifies the IBackupInfo objects representing the backups whose unpacked components you want to delete.
If you use this parameter, omit the Id parameter of this cmdlet.

Type: BackupInfo[]
Parameter Sets: Instance
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Describes what would happen if you ran the command without actually running the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Prompts for confirmation before executing the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Id

Specifies the IDs of the backups whose unpacked components you want to delete.
If you use this parameter, omit the InputObject parameter of this cmdlet.

Type: Int32[]
Parameter Sets: Id
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

INPUTS

OUTPUTS

NOTES

schema: 2.0.0

SYNOPSIS

Renames a computer collection.

SYNTAX

Name (Default)

Rename-RMADCollection [-Name] <String> [-Value] <String> [-PassThru] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

InputObject

Rename-RMADCollection [-InputObject] <ComputerCollection> [-Value] <String> [-PassThru] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

Id

Rename-RMADCollection [-Id] <Int32> [-Value] <String> [-PassThru] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

DESCRIPTION

Renames a computer collection with the name you specify.

EXAMPLES

Example 1

PS C:\> Rename-RMADCollection -Name "New Computer Collection" -Value Collection1

This command renames the computer collection named "New Computer Collection" to "Collection1".

Example 2

PS C:\> $c = Get-RMADCollection -Name "Collection1"

C:\PS>Rename-RMADCollection -InputObject $c -Value "Collection2"

The Get-RMADCollection cmdlet retrieves the computer collection named Collection1.
This collection is then passed to the Rename-RMADCollection cmdlet that renames it to Collection2.

PARAMETERS

-Name

Specifies the name of the computer collection to be renamed.

Type: String
Parameter Sets: Name
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False

-Value

Specifies the new name you want to assign to the computer collection.

Type: String
Parameter Sets: (All)
Aliases: NewName

Required: True
Position: 1
Default value: None
Accept pipeline input: True (ByPropertyName)
Accept wildcard characters: False

-PassThru

Passes the renamed collection along the pipeline.
If this parameter is omitted, the renamed collection is not passed along the pipeline.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Describes what would happen if you ran the command without actually running the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Prompts for a confirmation before executing the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InputObject

Renames the computer collection represented by the specified collection objects.
Specify the name of the variable that contains the objects or type a command or expression that gets the objects.

Type: ComputerCollection
Parameter Sets: InputObject
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-Id

Specifies the identifier of the computer collection you want to rename.

Type: Int32
Parameter Sets: Id
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: True (ByValue)
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

INPUTS

OUTPUTS

NOTES

schema: 2.0.0

SYNOPSIS

Restores deleted Active Directory objects.
This cmdlet requires Windows PowerShell to be started using a multi-threaded apartment (MTA).

SYNTAX

Default (Default)

Restore-RMADDeletedObject [-ProcessRecycledObjects] [-Backup <Guid>] [-RestoreParent <RestoreParent>] [-Full]
 [-NoReport] [-SkipReplication] [-ReportUnchangedObjects] [-ReportUnchangedAttributes] [-RestoreTo <String>]
 [-KeepBackupUnpacked] [-Id] <String[]> [-ProcessChildren] [-ChildObjectClass <String[]>]
 [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>]
 [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

ADLds

Restore-RMADDeletedObject [-ProcessRecycledObjects] [-Backup <Guid>] [-BackupPassword <SecureString>]
 [-NoReport] [-SkipReplication] [-SQLCredential <PSCredential>] [-ReportUnchangedObjects]
 [-ReportUnchangedAttributes] [-RestoreTo <String>] [-AsJob] [-KeepBackupUnpacked] [-Id] <String[]>
 [-ProcessChildren] [-ChildObjectClass <String[]>] [-AdLds] -AdLdsInstance <String>
 [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>]
 [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

Bkf

Restore-RMADDeletedObject [-ProcessRecycledObjects] -Backup <Guid> [-BackupPassword <SecureString>] [-NoReport]
 [-SkipReplication] [-SQLCredential <PSCredential>] [-ReportUnchangedObjects] [-ReportUnchangedAttributes]
 [-RestoreTo <String>] [-AsJob] [-KeepBackupUnpacked] [-Id] <String[]> [-ProcessChildren]
 [-ChildObjectClass <String[]>] [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor] [-Server <String>]
 [-Credential <PSCredential>] [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [-WhatIf] [-Confirm]
 [<CommonParameters>]

Firewall

Restore-RMADDeletedObject [-ProcessRecycledObjects] [-Backup <Guid>] [-BackupPassword <SecureString>]
 [-RestoreParent <RestoreParent>] [-Full] [-NoReport] [-SkipReplication] [-SQLCredential <PSCredential>]
 [-ReportUnchangedObjects] [-ReportUnchangedAttributes] [-RestoreTo <String>] [-AsJob] [-KeepBackupUnpacked]
 [-Id] <String[]> [-ProcessChildren] [-ChildObjectClass <String[]>] [-AdLds] [-ChangeAuditorDbName <String>]
 [-ConfigureFirewall] [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>]
 [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

Agentless

Restore-RMADDeletedObject [-ProcessRecycledObjects] [-Backup <Guid>] [-BackupPassword <SecureString>]
 [-RestoreParent <RestoreParent>] [-Full] [-NoReport] [-SkipReplication] [-SQLCredential <PSCredential>]
 [-ReportUnchangedObjects] [-ReportUnchangedAttributes] [-RestoreTo <String>] [-AsJob] [-KeepBackupUnpacked]
 [-Id] <String[]> [-UseAgentlessMethod] [-ProcessChildren] [-ChildObjectClass <String[]>] [-AdLds]
 [-ChangeAuditorDbName <String>] [-RestoreUsingChangeAuditor] [-Server <String>] [-Credential <PSCredential>]
 [-Partition <String>] [-Port <Int32>] [-IgnoreReadOnly] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

DESCRIPTION

Restores deleted Active Directory objects whose applicable tombstone lifetime or deleted object lifetime has not expired.
Depending on your settings and your environment, this cmdlet can restore deleted objects by using the following methods:

Restore deleted objects from Microsoft's Active Directory Recycle Bin (provided that it is available in your environment).
Restore deleted objects from a backup registered with Recovery Manager for Active Directory.
Reanimate object's tombstones.
You can only use this cmdlet when Windows PowerShell is started using MTA.
To start Windows PowerShell using MTA, run this command:
PowerShell -mta

EXAMPLES

Example 1

PS C:\> Restore-RMADDeletedObject -Id d8742dcb-3e6a-4b3c-b3fe-374623cdcf06 -Backup 2b509d4e-40f5-4337-82f7-458584555d0c -ProcessRecycledObjects -Server dc1.mydomain.com

Retrieves the recycled object with the specified Id (GUID) from the domain controller dc1.mydomain.com, and then restores the object from the backup with the specified GUID.
This command is only applicable to environments where Microsoft's Active Directory Recycle Bin is enabled.
In this example, the Server parameter is mandatory.

Example 2

PS C:\> Restore-RMADDeletedObject -Id d8742dcb-3e6a-4b3c-b3fe-374623cdcf06 -Backup 2b509d4e-40f5-4337-82f7-458584555d0c -Server dc1.mydomain.com

Retrieves deleted object with the specified Id (GUID) from the domain controller dc1.mydomain.com, and then restores the object from the backup with the specified GUID.
In this example, the Server parameter is mandatory.

Example 3

PS C:\> Restore-RMADDeletedObject -Id d8742dcb-3e6a-4b3c-b3fe-374623cdcf06 -Backup 2b509d4e-40f5-4337-82f7-458584555d0c -Server dc1.mydomain.com -WindowsServerBackup -AsJob

Retrieves deleted object with the specified Id (GUID) from the domain controller dc1.mydomain.com, and then restores the object from the backup with the specified GUID in the background job.
In this example, the Server parameter is mandatory.

PARAMETERS

-ProcessRecycledObjects

Specifies to process recycled objects.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Backup

Specifies the backup that contains the deleted object you want to restore.
To specify a backup, type the backup GUID in this parameter or use the Get-RMADBackup cmdlet.

Type: Guid
Parameter Sets: Default, ADLds, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Type: Guid
Parameter Sets: Bkf
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RestoreParent

Restores the deleted parents of the deleted objects being recovered.
This parameter can take one of the following values:

Never - Specifies to not restore deleted parents.
Always - Specifies to always restore deleted parents.
Prompt - Prompts you for action.

Type: RestoreParent
Parameter Sets: Default, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: Prompt
Accept pipeline input: False
Accept wildcard characters: False

-Full

Specifies to restore the deleted objects with all their attributes. When this parameter is present, the cmdlet does one of the following:

Restores the deleted objects from Microsoft's Active Directory Recycle Bin.
This occurs only if the Recycle Bin is available and if you do not specify to restore the deleted objects from a backup.
Restores the deleted object from the backup whose GUID you specify in the BackupGuid parameter. When this parameter is omitted, the cmdlet does one of the following:
If Microsoft's Active Directory Recycle Bin is available, the cmdlet completely undeletes the deleted objects from the Recycle Bin.
If Microsoft's Active Directory Recycle Bin is disabled or not supported, the cmdlet reanimates the objects' tombstones.

Type: SwitchParameter
Parameter Sets: Default, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-NoReport

Specifies to not create any report about the restore operation.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SkipReplication

Specifies to skip replication during the restore operation.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ReportUnchangedObjects

Includes information about the objects that have not changed since the time of the specified backup into the operation report.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ReportUnchangedAttributes

Includes information about the object attributes that have not changed since the time of the specified backup into the operation report.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RestoreTo

Specifies a target container for the restore operation.
To specify a target container, specify the container's distinguished name (DN) in this parameter.
You can use this parameter to specify a target container if the parent container of the object you want to restore has been deleted.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-KeepBackupUnpacked

Determines whether to save the unpacked backup after the search operation.
If this parameter is not set, the unpacked backup will be deleted after the search operation is completed.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Id

Specifies the deleted objects to restore.
To specify an object, you can use object GUID, distinguished name (DN), sAMAccountName, or user principal name (UPN).

Type: String[]
Parameter Sets: (All)
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ProcessChildren

Specifies to process children of the objects specified in the Id attribute.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ChildObjectClass

Allows you to reanimate only those child objects that belong to the classes you specify in this parameter.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ChangeAuditorDbName

Specifies a location of the ChangeAuditor SQL database.
If this parameter is omitted, the 'ModifyBy' cell in AD reports will be empty.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-RestoreUsingChangeAuditor

Specifies if Change Auditor is used to restore the latest changes to the object.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Server

Specifies the domain controller or ADAM instance host from which deleted objects are to be retrieved.
The domain controller can be specified by its computer name, IP address, or domain name.
If you specify a domain name, deleted objects are retrieved from any available domain controller in the specified domain.
The ADAM instance host can be specified by its computer name or IP address.
If this parameter is omitted, deleted objects are retrieved from any available domain controller in the current domain.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Credential

The user name and password of the user account with which you want to connect, in the form of a PSCredential object.
Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.

Type: PSCredential
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Partition

Specifies the distinguished name of the Active Directory partition from which deleted objects are to be retrieved.
If this parameter is omitted, the default naming context is used.
This parameter is required if you specify an ADAM instance host in the DirectoryHost parameter.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Port

Specifies the port number to be used for connection.
If this parameter is set to 0 or not specified, the default LDAP port (389) is used.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IgnoreReadOnly

Allows you to perform the action in a console currently performing full replication.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-WhatIf

Describes what would happen if you ran the command without actually running the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: wi

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Confirm

Prompts for a confirmation before executing the command.

Type: SwitchParameter
Parameter Sets: (All)
Aliases: cf

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-BackupPassword

Specifies the password to access the password-protected backup that contains the deleted object you want to restore.

Type: SecureString
Parameter Sets: ADLds, Bkf, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SQLCredential

Specifies the user name and password of the user account with which you want to connect to SQL Server to generate a report about the performed operation.
The user name and password must be in the form of a PSCredential object.
When this parameter is omitted, the cmdlet uses the credentials of the account under which Management Shell is running.
Use the Get-Credential cmdlet provided by Windows PowerShell to pass a PSCredential object to this parameter.

Type: PSCredential
Parameter Sets: ADLds, Bkf, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AsJob

Runs the command as a background job.
You can use this parameter to run commands that take a significant time to complete.

Type: SwitchParameter
Parameter Sets: ADLds, Bkf, Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AdLds

Specifies that the AD LDS instance is used as a data storage.

Type: SwitchParameter
Parameter Sets: ADLds
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Type: SwitchParameter
Parameter Sets: Firewall, Agentless
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AdLdsInstance

If you restore the backed up AD LDS (ADAM) objects, you should specify the AD LDS instance whose backup you want to use.

Type: String
Parameter Sets: ADLds
Aliases: AdamInstance

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ConfigureFirewall

Specifies whether Recovery Manager automatically configures Windows Firewall on the target Windows Server 2008-based or Windows Server 2012-based DCs to allow compare and restore operations.

Type: SwitchParameter
Parameter Sets: Firewall
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-UseAgentlessMethod

Specifies to use the agentless method to access the target domain controller.
If this parameter is omitted, the target domain controller is accessed via Restore Agent.

Type: SwitchParameter
Parameter Sets: Agentless
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Recovery Manager for AD 10.2 - User Guide

Remove-RMADStorageServer

schema: 2.0.0

SYNOPSIS

SYNTAX

Name

Server

DESCRIPTION

EXAMPLES

Example 1

Example 2

PARAMETERS

-Name

-Server

-Confirm

-WhatIf

-IgnoreReadOnly

CommonParameters

INPUTS

OUTPUTS

NOTES

RELATED LINKS

Remove-RMADUnpackedComponent

schema: 2.0.0

SYNOPSIS

SYNTAX

Instance

Id

DESCRIPTION

EXAMPLES

Example 1

PARAMETERS

-InputObject

-IgnoreReadOnly

-WhatIf

-Confirm

-Id

-InformationAction

-InformationVariable

CommonParameters

INPUTS

OUTPUTS

NOTES

RELATED LINKS

Rename-RMADCollection

schema: 2.0.0

SYNOPSIS

SYNTAX

Name (Default)

InputObject

Id

DESCRIPTION

EXAMPLES

Example 1

Example 2

PARAMETERS

-Name

-Value

-PassThru

-IgnoreReadOnly

-WhatIf

-Confirm

-InputObject

-Id

-InformationAction

-InformationVariable

CommonParameters

INPUTS

OUTPUTS

NOTES

RELATED LINKS

Restore-RMADDeletedObject

schema: 2.0.0

SYNOPSIS

SYNTAX

Default (Default)

ADLds