Overview
About Quest Recovery Manager for Active Directory Disaster Recovery Edition
Features and benefits
Getting started
Comprehensive Active Directory recovery options
AD LDS (ADAM) recovery
Granular selective restore
Group Policy recovery
Restore on Clean OS
Antimalware checks for backups
Integrity checks for backups
Centralized remote administration
Secondary Storage for backups
Audit of objects and operations
Integration with Change Auditor for Active Directory
Management Shell
Scheduling and automation
Scalability and performance
Simplified restoration of an Active Directory forest
Bare metal forest recovery
Granular domain-level recovery
Integration with On Demand Recovery
Automation of manual operations
Remote quarantine
Fault tolerance
Simultaneous system recovery
Support for Windows tools for restoring domain controllers
Recovery plan
Running custom scripts
Technical overview
Permissions required to use Recovery Manager for Active Directory
Recovery Manager Console
Getting and using help
Configuring Windows Firewall
Using Computer Collections
Backing up data
Creating Computer Collections
Renaming Computer Collections
Modifying Computer Collection properties
Deleting Computer Collections
Specifying an access account for Backup Agent and backup storage
Adding domain controllers to a Computer Collection
Adding containers to a Computer Collection
Adding AD LDS (ADAM) hosts and instances to a Computer Collection
Removing items from a Computer Collection
Cloud Storage
Adding Microsoft Azure Cloud Storage
Adding Amazon Web Services (AWS) Cloud Storage
Viewing Registered Cloud Storage
Editing Cloud Storage
Removing Cloud Storage
Cloud Storage Upload Sessions
Secure Storage Server
Adding a Secure Storage server
Hardening a Secure Storage server
Accessing a Secure Storage server
Upgrading a Secure Storage server
Secure Storage server with Multiple Consoles
Configuring Allowed Volumes for a Secure Storage server
Viewing backups on Secure Storage server
Secure Storage server backups
Configuring backup retention policy for Secure Storage server
Configuring exceptions for Secure Storage server maintenance
Hybrid Recovery with On Demand Recovery
Managing Recovery Manager for Active Directory configuration
Preparing for working with Active Directory or AD LDS (ADAM) backups
Settings
Licensing
General tab
Unpacked Backups tab (global settings)
E-mail tab
Registering Application for Exchange Online Email Notifications
Logging tab
Ports tab
Default properties for Computer Collections
Properties for an existing Computer Collection
Backup tab
Local Storage tab
Remote Storage tab
Secondary Storage tab
Agent tab
Schedule tab
Alerts tab
Performance tab
Advanced tab
Unpacked Backups tab
Container and site properties
Properties for a domain or organizational unit
Properties for an Active Directory site
Properties for an AD LDS (ADAM) site
Sessions node properties
Forest properties
Domain properties
Domain controller properties
AD LDS (ADAM) partition properties
AD LDS (ADAM) instance properties
Showing or hiding AD LDS (ADAM) partitions
Showing or hiding domains
Showing or hiding sites
Permissions required for the Backup operation
Managing Backup Agent
Restoring data
Installing Backup Agent automatically
Preinstalling Backup Agent manually
Discovering preinstalled Backup Agent
Updating Backup Agent information
Upgrading Backup Agent
Uninstalling Backup Agent
Removing a Backup Agent entry from the Backup Agent Management node
Using a least-privileged user account to back up data
Using Managed Service Accounts
Active Directory backups vs Windows System State backups
Creating BMR and Active Directory backups
Using the Backup Wizard
Retrying backup creation
Enabling backup encryption
Backing up AD LDS (ADAM)
Method 1: Back up AD LDS (ADAM) from the Recovery Manager Console
Method 2: Schedule backup creation for AD LDS (ADAM)
Backing up cross-domain group membership
Backing up distributed file system (DFS) data
Backup scheduling
Setting performance options
Setting advanced backup options
Using Forest Recovery Agent
Unpacking backups
Configuring default settings to unpack backups
Configuring Computer Collection-specific settings to unpack backups
Unpacking a backup manually
Deleting data unpacked from a backup
Using e-mail notification
Viewing backup creation results
Sessions node properties
Computer properties
Computer session properties
Backups node properties
Filtering backups
General tab for Active Directory backups
General tab for Bare Metal backups
General tab for AD LDS (ADAM) backups
Integrity checks for Active Directory, Bare Metal, and AD LDS (ADAM) backups
Export List of Active Directory, Bare Metal, and AD LDS (ADAM) backups
Properties of registered Active Directory, Bare Metal, and AD LDS (ADAM) backups
Getting started with Active Directory recovery
Full Replication
Consolidating backup registration data
Recovering an Active Directory forest
Active Directory recovery options
Implications of the online restore
Using agentless or agent-based method
Managing deleted or recycled objects
Restoring backed up Active Directory components
Integration with Change Auditor for Active Directory
Using granular online restore
Restoring AD LDS (ADAM)
Method 1: Restore an AD LDS (ADAM) instance from a backup created with Recovery Manager for Active Directory
Method 2: Restore an AD LDS (ADAM) database from a backup created with third-party software
Selectively restoring Active Directory object attributes
Restoring objects in an application directory partition
Restoring object quotas
Restoring cross-domain group membership
Performing a restore without having administrator privileges
Reports about objects and operations
Reports about Active Directory objects
Reports about AD LDS (ADAM) objects
Reports about Group Policy objects
Data about who modified Active Directory objects
Using complete offline restore
Offline restore implications
Restoring SYSVOL authoritatively
Performing a granular restore of SYSVOL
Recovering Group Policy
Restoring data from third-party backups
Using the Extract Wizard
Creating a Windows Server 2008 R2-based domain controller from a backup
Creating a Windows Server 2012-based or higher domain controller from a backup
Restoring passwords and SID history
Forest recovery overview
Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition)
Permissions required to use Forest Recovery Console
Forest Recovery Console
Restore Active Directory on Clean OS method
Bare metal forest recovery
Menu
Toolbar
Project summary
List of domain controllers
Domain controller recovery settings and progress
Configuring advanced settings
Console Configuration Backup and Restore
Managing a recovery project
Creating a recovery project
Opening a recovery project
Saving a recovery project
Protecting recovery project with password
Updating a recovery project
Specifying recovery project settings
Cloning an infrastructure platform template
Verifying recovery project settings
Scanning backups for viruses
Scheduling project verification
Specifying recovery settings for a DC
Selecting backups for recovery
Using recovery alerts
Copying a backup file to a new location
Recovery methods
Restore Active Directory from backup method
Install Active Directory method
Reinstall Active Directory method
Uninstall Active Directory method
Restore SYSVOL
Restore Active Directory on Clean OS method
Bare Metal Active Directory Recovery method
Do not recover method
Do nothing method
Adjust to Active Directory changes method
Phased recovery
Managing Forest Recovery Agent
Installing or upgrading Forest Recovery Agent
Viewing installed Forest Recovery Agent version
Uninstalling Forest Recovery Agent
Rebooting domain controllers manually
Resetting DSRM Administrator Password
Purging Kerberos Tickets
Managing the Global Catalog servers
Managing FSMO roles
Manage DNS Client Settings
Configuring Windows Firewall
Developing a custom forest recovery plan
Backing up domain controllers
Assigning a preferred DNS server during recovery
Handling DNS servers during recovery
Forest recovery approaches
Recovery approach 1: Restore as many domain controllers from backups as possible
Recovery approach 2: Restore one domain controller from backup in each domain
Deciding which backups to use
Running custom scripts while recovering a forest
Overview of steps to recover a forest
Viewing forest recovery progress
Viewing recovery plan
Viewing a report about forest recovery or verify settings operation
Handling failed domain controllers
Adding a domain controller to a running recovery operation
Selectively recovering domains in a forest
Step 1: Select domains to recover
Step 2: Specify recovery settings for domain controllers
Step 3: Start recovery
Recovering SYSVOL
Deleting domains during recovery
Resuming an interrupted forest recovery
Recovering read-only domain controllers (RODCs)
Checking forest health
Collecting diagnostic data for technical support
Bare metal recovery requirements and limitations
Preparing backups
Restoring from standard Active Directory backup
NIC teaming support
Disaster recovery workflow
Boot from the ISO image automatically
Using Management Shell
Appendices
Dell Remote Access Controller (iDRAC)
HPE ProLiant iLO Management Engine (iLO)
VMware ESXi
Microsoft Hyper-V
Custom host controllers
Creating a virtual test environment using Disaster Recovery Edition
Frequently asked questions
Why do I need to restore deleted users or groups, rather than re-create them?
How can I restore a user or group in Active Directory?
How does online restore work?
When an object is undeleted, what is restored from the tombstone and what is restored from the backup?
What's the difference between an online restore and an authoritative restore?
What's the difference between the agentless restore method and the agent-based restore method?
Can I undelete a mailbox-enabled user?
In the Group Policy Restore Wizard, a GPO link is shown as deleted, but the link actually exists in Active Directory. What's wrong?
What is a primary restore of the SYSVOL?
How do I change the Backup Agent port number?
How and where is LDAP used in RMAD?
How does Recovery Manager for Active Directory select a DC for an authoritative (primary) restore of SYSVOL during forest recovery?
How does Recovery Manager for Active Directory isolate domain controllers during forest recovery?
How does Recovery Manager for Active Directory select a DC to add the global catalog during forest recovery?
Best practices for using Computer Collections
Technical characteristics
Best practices for creating backups
Develop a backup and restore plan
Determine which domain controllers to back up and how often
Methods for deploying Backup Agent
Retain recent backups
Where to store backups
Best practices for creating backups for forest recovery
Storing backups for granular online or complete offline restores
Storing backups for forest recovery
Best practice for schedule and retention
How many instances of the Recovery Manager Console to deploy?
How many domain controllers to back up?
How many domain controllers to back up at once?
What data to back up?
Using data compression
Using unpacked backups
Best practices for recovering a forest
How many Instances of the Forest Recovery Console to deploy?
Where to Install the Forest Recovery Console?
Backing up the Recovery Manager for Active Directory configuration
Descriptions of recovery or verification steps
Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition)
Backup Wizard
What to Back Up
Where to Store Backups
When to Back Up
Computer Collection Name (optional)
Completing the Backup Wizard
Online Restore Wizard
Wizard Operation Mode
Domain Selection
Backup Selection
Backup for Comparison (optional)
Unpacked Backups Folder Selection
Backup Data Preparation
Domain Access Options
Objects to Be Processed
Action Selection
Action Selection (Compare two backups)
Processing Options
Additional Options
Operation Start
Operation Progress
Operation Option
Objects to Be Restored
Where to Restore Deleted Objects
Operation Results
Completing the Online Restore Wizard
Online Restore Wizard for AD LDS (ADAM)
Wizard Operation Mode
AD LDS (ADAM) Instance Selection
Backup Selection
Backup for Comparison
Unpacked Backups Folder Selection
Backup Data Preparation
AD LDS (ADAM) Access Options
Objects to Be Processed
Action Selection
Processing Options
Additional Options
Operation Start
Operation Progress
Operation Option
Objects to Be Restored
Where to Restore Deleted Objects
Operation Results
Completing the Online Restore Wizard for AD LDS (ADAM)
Group Policy Restore Wizard
Domain Selection
Backup Selection
Backup Data Preparation
Select Domain Controller
Group Policy Object Selection
GPO Restore Options
Link Restore Options
Restore Process Start
Completing the Group Policy Restore Wizard
Repair Wizard
Computer and Backup Selection
Target Computer
Computer Restart
Primary Restore of SYSVOL
Restore Process Start
Restore Progress
Authoritative Restore Selections
Computer Restart in Normal Mode
Completing the Repair Wizard
Extract Wizard
Events generated by Recovery Manager for Active Directory
Operation Start
This page enables you to review settings you have specified in the previous steps of the wizard. To start the operation, click Next. To change the wizard settings, click Back.
Operation Progress
This page shows the progress of the operation and lets you see a summary of the comparison results or a summary of changes made to Active Directory® during the restore process.
-
Target. The target domain the objects will be restored in.
-
Status. The status of the comparison such as "Comparing objects…" and "The wizard has compared the objects".
-
Processing. This field will display the FQDN of the objects being processed. When complete this field will be empty.
-
Objects total. The number of objects the wizard has processed.
-
Different objects / Restored objects. Different objects shows the number of compared objects for which the wizard has detected differences. Restored objects shows the number of objects the wizard has restored in Active Directory®.
-
Errors occurred. The number of errors the wizard has encountered during the operation. Use the Export errors… button to save the error data in CSV format.
During the final Operation Progress step of the restore operation, the following pop up dialogs will appear to allow the final actions for the restored account(s) or objects(s) to be performed.
Password Settings
This dialog box enables you to specify the password and password settings for the user account you restore using the Online Restore Wizard.
The dialog box has the following elements:
-
Specify the new password. Select this option if you want to set a new password for the user account to be restored.
-
New password. Provides a space for you to type a case-sensitive password up to 127 characters.
-
Confirm new password. Provides a space for you to retype the password to confirm the spelling.
-
- Leave the password unchanged. Select this option if you want to leave the user password unchanged. When you select this option, the restored user account can be disabled if its password does not meet the password policy requirements.
If the Active Directory® Recycle Bin is not enabled, deleted user recovery will happen with an empty password.
-
Additional options. Select this check box to specify additional settings for user password.
-
Disable user account. Select this check box to disable the user account.
-
User must change password at next logon. Select this check box to require users to change their passwords the next time they log on.
-
-
Apply these settings to all restored users. Select this check box to apply the specified password settings for all user accounts to be restored from the selected backup.
Operational Progress Pop Ups
During the final Operation Progress step of the restore operation, there are a number of pop up dialogs that appear asking if certain Active Directory® incremental replications should be performed.
When Online Restore Wizard has undeleted some objects possessing linked attributes and to correctly restore linked attributes on all DCs, a replication must be carried out to all DCs before restoring linked attributes.
When Online Restore Wizard has changed some objects on the target DC, the changes should be propagated to the other DCs, an incremental replication can be done by the wizard.
