-
Title
How to back up or restore Dynamic Access Control objects with Recovery Manager for Active Directory -
Description
The Recovery Manager for Active Directory documentation does not mention that the product supports backing up, comparing, and restoring Dynamic Access Control (DAC) objects. The documentation also does not provide instructions on how to backup, compare and restore Dynamic Access Control (DAC) objects. -
Resolution
Backing up DAC Objects
Recovery Manager for Active Directory backs up DAC objects as part of Active Directory data. For more information about how to back up Active Directory, see the Recovery Manger for Active Directory User Guide.Comparing or Restoring DAC Objects
To compare or restore DAC objects:
1. Start the Online Restore Wizard (right-click the “Recovery Manager for Active Directory” console tree root to select “Online Restore Wizard” from the shortcut menu.)
2. Step through the wizard until the “Objects to Be Processed” page.
3. Click the Add button, and then click Browse.
4. In the dialog box that opens, select the “Show advanced objects” check box, and then locate and select the container that includes the DAC objects you want to compare or restore (DAC Policies are stored in "CN=Central Access Policies,CN=Claims Configuration,CN=Services,CN=Configuration,<forest-dn>" and DAC Rules are stored in "CN=Central Access Rules,CN=Claims Configuration,CN=Services,CN=Configuration,<forest-dn>").
5. Once the objects have been added, click Ok
6. Step through the wizard to complete the compare or restore operation.