지금 지원 담당자와 채팅
지원 담당자와 채팅

Recovery Manager for AD Disaster Recovery Edition 10.2 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Secure Storage servers Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Restore Active Directory on Clean OS Bare metal forest recovery Using Management Shell Creating virtual test environments Using Recovery Manager for Active Directory web portal Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory Descriptions of PowerShell commands
Add-RMADBackup Add-RMADCollectionItem Add-RMADReplicationConsole Add-RMADStorageServer Backup-RMADCollection Close-RMADFEProject Compare-RMADObject Convert-RMADBackup ConvertTo-RMADRecycledObject Copy-RMADFEBackup Create-RMADStorageAgentSetup Expand-RMADBackup Export-RMADBackup Export-RMADFERecoveryCertificate Export-RMADFEResult Export-RMADSecureStorageBackup Get-RMADBackup Get-RMADBackupAgent Get-RMADBackupInfo Get-RMADBackupObject Get-RMADBackupSecurityStatus Get-RMADCollection Get-RMADCollectionItem Get-RMADDeletedObject Get-RMADFEAvailableSubnet Get-RMADFEComputer Get-RMADFEConsole Get-RMADFEDnsCache Get-RMADFEDomain Get-RMADFEEvent Get-RMADFEGlobalOptions Get-RMADFEOperation Get-RMADFEPersistenceConnection Get-RMADFEProject Get-RMADFERecoveryAgent Get-RMADFESchedule Get-RMADGlobalOptions Get-RMADLicenseInfo Get-RMADObject Get-RMADReplicationConsole Get-RMADReplicationSchedule Get-RMADReplicationSession Get-RMADReplicationSessionItem Get-RMADReportObject Get-RMADReportObjectAttributes Get-RMADReportObjectChildren Get-RMADReportSession Get-RMADSession Get-RMADSessionItem Get-RMADSessionItemEvent Get-RMADStorageServer Get-RMADStorageServerHardeningStatus Get-RMADStorageServerRetentionPolicy Import-RMADBackup Import-RMADFERecoveryCertificate Install-RMADBackupAgent Install-RMADFERecoveryAgent New-RMADCollection New-RMADFEProject New-RMADFERecoveryMedia New-RMADSchedule Open-RMADFEProject Protect-RMADSecureStorageServer Protect-RMADStorageServer Publish-RMADBackupSecurityStatus Refresh-RMADStorageServer Register-RMADSecureStorageBackups Remove-RMADBackup Remove-RMADBackupAgent Remove-RMADCollection Remove-RMADCollectionItem Remove-RMADFERecoveryAgent Remove-RMADFESchedule Remove-RMADReplicationConsole Remove-RMADReplicationSchedule Remove-RMADReplicationSession Remove-RMADStorageServer Remove-RMADUnpackedComponent Rename-RMADCollection Restore-RMADDeletedObject Restore-RMADDomainController Restore-RMADObject Resume-RMADFERecovery Save-RMADFEProject Set-RMADCollection Set-RMADFEComputer Set-RMADFEDnsCache Set-RMADFEDomain Set-RMADFEGlobalOptions Set-RMADFEPersistenceConnection Set-RMADFERecoveryMode Set-RMADFESchedule Set-RMADGlobalOptions Set-RMADReplicationConsole Set-RMADReplicationSchedule Set-RMADStorageServerRetentionPolicy Start-RMADFERecovery Start-RMADFERecoveryAgentOperation Start-RMADFEVerification Start-RMADReplication Start-RMADReportViewer Stop-RMADFEWorkflow Test-RMADSecureStorageBackup Unprotect-RMADStorageServer Update-RMADBackupAgent Update-RMADFEProject Update-RMADLicense

Configuring advanced settings

You can change a number of advanced settings of the Forest Recovery Console. To do so, you need to modify the FRConsoleSettings.xml file that stores these advanced settings. You can find this file in the Recovery Manager for Active Directory installation folder (by default, this is %ProgramFiles%\Quest\Recovery Manager for Active Directory).

The changes you make in the FRConsoleSettings.xml file become effective right after you save the file. You do not need to restart the Forest Recovery Console.

The FRConsoleSettings.xml file includes the following XML elements you can modify:

SkipUnmodifiedFilesDuringRecovery

Enables or disables skipping the files that are identical on the domain controller and in the backup during restore operations. This element can take one of the following values:

  • TRUE. Enables skipping the files.

  • FALSE. Disables skipping the files.

PasswordsLength

Sets the length (in characters) for the passwords automatically generated by Recovery Manager for Active Directory.

PasswordsSymbols

Allows you to specify what symbols you want to use in the passwords automatically generated by Recovery Manager for Active Directory.

This element can take the following values:

  • Latin. Specifies to use English letters.

  • Number. Specifies to use Arabic numerals.

  • Upper. Specifies to use uppercase English letters.

  • Lower. Specifies to use lowercase English letters.

  • All. Specifies to use all of the above-listed characters.

You can specify multiple values in this element. When specifying multiple values, use a pipe (|) as a separator.

Example:

Latin | Number | Upper | Lower

MaximumBackupAgeInDays

Specifies the maximum age (in days) of the backups to be displayed on the GUI. Backups whose age exceeds the specified value will not be displayed.

DisableSystemPauses

Do not change the value in this element. This element is for internal use only.

EnablePersistence

Enables or disables the Recovery Persistence feature. This element can take one of the following values:

  • TRUE. Enables the Recovery Persistence feature.

  • FALSE. Disables the Recovery Persistence feature.

DaysBetweenProjectUpdates

Sets the maximum number of days between the updates of a recovery project. When the specified value is exceeded for a project, the Forest Recovery Console displays a warning.

SelectDnsTimeout

Sets a timeout for the DNS server search operation performed during a forest or domain recovery. Use the format hh:mm:ss.

DiagnosticsDataPath

Specifies the default location on the Forest Recovery Console computer for storing diagnostic data gathered with the Diagnostic Data Collector.

TargetGcOccupancyLevel

Sets the global catalog partition occupancy level value to be used when advertising a rebuilt GC fast.

This element can take one of the following values:

  • 0. No occupancy requirement.

  • 1. At least one read-only partition in site added by Knowledge Consistency Checker.

  • 2. At least one partition in site fully synchronized.

  • 3. All read-only partitions in site added by Knowledge Consistency Checker, at least one synchronized.

  • 4. All partitions in site fully synchronized.

  • 5. All read-only partitions in forest added by the Knowledge Consistency Checker, at least one synchronized.

  • 6. All partitions in forest fully synchronized.

UseRemoveLingeringObjects

If this parameter is set to FALSE, the Adjust to Active Directory changes operation will not call the "Remove lingering objects" command of the Repadmin tool.

UseUnhostRehost

If this parameter is set to FALSE, the Adjust to Active Directory changes operation will not call the "Unhost/Rehost" commands of the Repadmin tool.

EnsuresSingleInstance

Allows you to restrict the number of Forest Recovery Console instances that can be run simultaneously on this computer.

This element can take one of the following values:

  • TRUE. Only one instance of Forest Recovery Console can be run at a time.

  • FALSE. The number of Forest Recovery Console instances that can be run simultaneously is unlimited.

MaxAutomaticDnsCount

Limits the number of automatically selected DNS servers for domain controller DNS client settings.

RidPoolIncreaseValue

Specifies the value by which to raise the number of available RID pools.

If necessary, you can revert to the default values in the FRConsoleSettings.xml file.

RecoveryMediaHttpServicePort

Specifies the port used by the web server handling Recovery Media Images. Images are consumed by HP iLO management software to perform automatic server boots. By default, the port is set to 8080.

To revert to the default values
  1. Delete the FRConsoleSettings.xml file.

  2. Restart the Forest Recovery Console on the computer on which you deleted the file in step 1.

    Recovery Manager for Active Directory recreates the FRConsoleSettings.xml file and assigns default values to the elements in the file.

 

Managing a recovery project

A recovery project is where you manage the recovery of the entire Active Directory forest or specific domains. Each recovery project contains a list of domain controllers to be recovered and their recovery settings, such as recovery method and access credentials. You can specify individual recovery settings for each domain controller in a recovery project. A recovery project also has a number of project-specific settings you can modify.

Each recovery project is saved to an individual project (.frproj) file. A project (.frproj) file holds information about the contents and settings of the project and the recovery settings specified for the DCs in the project.

You can perform sequential recovery against multiple forests (each forest in a separate project file) from a single Forest Recovery Console. Parallel recovery is possible only if you use several instances of Forest Recovery Console on separate machines.

In this section:

 

Creating a recovery project

To create a new recovery project, you can use a New Recovery Project Wizard. This wizard helps you retrieve the Active Directory forest infrastructure information and save it in a recovery project (.frproj) file.

The wizard offers you the following methods to retrieve the forest infrastructure information:

  • Retrieve the forest infrastructure information from an Active Directory backup registered with Recovery Manager for Active Directory.

  • Connect to any available live domain controller in the forest to retrieve the forest infrastructure information.

To create a new recovery project
  1. On the menu bar, select File | New Project.

  2. On the Retrieving the Forest Infrastructure page of the wizard, click one of the following:

    • Select a Backup. Allows you to retrieve the forest infrastructure information from an Active Directory backup registered with Recovery Manager for Active Directory. You can register the backup using Recovery Manager Console or directly from this page. For that, click the Register Backup option.

    • Connect to Forest. Allows you to connect to a live domain controller and retrieve the forest infrastructure information from the Active Directory database held on that domain controller.

  3. On the The following forest information has been collected step, specify the domains you want to include in the recovery project.

  4. On the next step, specify the project file and protection password for the file.

  5. Click Finish to complete the project creation.

The title bar of the Forest Recovery Console displays the name of the project (.frproj) file you have created.

Note

Each recovery project must be protected with a password. When prompted, set a protection password for your project and make sure you keep the password for your records.

 

Opening a recovery project

To open an existing recovery project
  1. On the menu bar, select File | Open Project.

  2. Browse to select the project (.frproj) file you want to open, and then click Open. The title bar of the Forest Recovery Console displays the name of the project (.frproj) file you have opened.

 

관련 문서

The document was helpful.

평가 결과 선택

I easily found the information I needed.

평가 결과 선택