Converse agora com nosso suporte
Chat com o suporte

Recovery Manager for AD Forest Edition 10.2 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Using Management Shell Creating virtual test environments Using Recovery Manager for Active Directory web portal Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory Descriptions of PowerShell commands
Add-RMADBackup Add-RMADCollectionItem Add-RMADReplicationConsole Add-RMADStorageServer Backup-RMADCollection Close-RMADFEProject Compare-RMADObject Convert-RMADBackup ConvertTo-RMADRecycledObject Copy-RMADFEBackup Create-RMADStorageAgentSetup Expand-RMADBackup Export-RMADBackup Export-RMADFERecoveryCertificate Export-RMADFEResult Export-RMADSecureStorageBackup Get-RMADBackup Get-RMADBackupAgent Get-RMADBackupInfo Get-RMADBackupObject Get-RMADBackupSecurityStatus Get-RMADCollection Get-RMADCollectionItem Get-RMADDeletedObject Get-RMADFEAvailableSubnet Get-RMADFEComputer Get-RMADFEConsole Get-RMADFEDnsCache Get-RMADFEDomain Get-RMADFEEvent Get-RMADFEGlobalOptions Get-RMADFEOperation Get-RMADFEPersistenceConnection Get-RMADFEProject Get-RMADFERecoveryAgent Get-RMADFESchedule Get-RMADGlobalOptions Get-RMADLicenseInfo Get-RMADObject Get-RMADReplicationConsole Get-RMADReplicationSchedule Get-RMADReplicationSession Get-RMADReplicationSessionItem Get-RMADReportObject Get-RMADReportObjectAttributes Get-RMADReportObjectChildren Get-RMADReportSession Get-RMADSession Get-RMADSessionItem Get-RMADSessionItemEvent Get-RMADStorageServer Get-RMADStorageServerHardeningStatus Get-RMADStorageServerRetentionPolicy Import-RMADBackup Import-RMADFERecoveryCertificate Install-RMADBackupAgent Install-RMADFERecoveryAgent New-RMADCollection New-RMADFEProject New-RMADFERecoveryMedia New-RMADSchedule Open-RMADFEProject Protect-RMADSecureStorageServer Publish-RMADBackupSecurityStatus Refresh-RMADStorageServer Register-RMADSecureStorageBackups Remove-RMADBackup Remove-RMADBackupAgent Remove-RMADCollection Remove-RMADCollectionItem Remove-RMADFERecoveryAgent Remove-RMADFESchedule Remove-RMADReplicationConsole Remove-RMADReplicationSchedule Remove-RMADReplicationSession Remove-RMADStorageServer Remove-RMADUnpackedComponent Rename-RMADCollection Restore-RMADDeletedObject Restore-RMADDomainController Restore-RMADObject Resume-RMADFERecovery Save-RMADFEProject Set-RMADCollection Set-RMADFEComputer Set-RMADFEDnsCache Set-RMADFEDomain Set-RMADFEGlobalOptions Set-RMADFEPersistenceConnection Set-RMADFERecoveryMode Set-RMADFESchedule Set-RMADGlobalOptions Set-RMADReplicationConsole Set-RMADReplicationSchedule Set-RMADStorageServerRetentionPolicy Start-RMADFERecovery Start-RMADFERecoveryAgentOperation Start-RMADFEVerification Start-RMADReplication Start-RMADReportViewer Stop-RMADFEWorkflow Test-RMADSecureStorageBackup Unprotect-RMADStorageServer Update-RMADBackupAgent Update-RMADFEProject Update-RMADLicense

Set-RMADFEDomain

external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Sets the domain settings for the current RMADFE project.

SYNTAX

AnyParameters (Default)

Set-RMADFEDomain [-Domain] <String> [-Recover <Boolean>] [-AuthoritativeSysvolRestoreComputer <String>]
 [-ResetPasswords <Boolean>] [-Groups <System.Collections.Generic.List`1[System.String]>]
 [-Exclusions <System.Collections.Generic.List`1[System.String]>] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

IncludeCredentials

Set-RMADFEDomain [-Domain] <String> [-Recover <Boolean>] [-AuthoritativeSysvolRestoreComputer <String>]
 -DcCredential <PSCredential> -DsrmCredential <PSCredential> -LocalCredential <PSCredential>
 [-ResetPasswords <Boolean>] [-Groups <System.Collections.Generic.List`1[System.String]>]
 [-Exclusions <System.Collections.Generic.List`1[System.String]>] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

This cmdlet sets the domain settings for the current RMADFE project.

EXAMPLES

EXAMPLE 1

@{paragraph=PS C:\>}

PS C:\> $dcCreds = Get-Credential
$dsrmCreds = Get-Credential

Set-RMADFEDomain -Domain acme.com -Recover $true -AuthoritativeSysvolRestoreComputer dc1.acme.com -DcCredential $dcCreds -DsrmCredential $dsrmCreds

This command applies the domain settings to the acme.com domain.

EXAMPLE 2

@{paragraph=PS C:\>}

Set-RMADFEDomain acme.com -ResetPasswords $true -Groups Group_A, Group_B, Group_C -Exclusions User_01, User_02

This command enables password resetting for domain users in the following privileged groups: Group_A, Group_B, and Group_C in the domain acme.com, except User_01 and User_02.

PARAMETERS

-Domain

Specifies the fully qualified domain name.

Type: String
Parameter Sets: (All)
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Recover

This option lets you include the domain into or exclude the domain from the current RMADFE project.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AuthoritativeSysvolRestoreComputer

This option allows you to configure the domain controller where the authoritative restore of SYSVOL will be performed.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ResetPasswords

This parameter resets the password for administrative accounts in the domain during forest recovery, including members of Enterprise Admins, Domain Admins, Administrators, Account Operators, Schema Admins, Group Policy Creator Owners, Backup Operators, Server Operators, and Print Operators.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Groups

This parameter specifies one or more groups of users (separated by commas).
When this parameter is specified, this command ONLY resets the password for the specified groups of users in the domain instead of the predefined administrative accounts.

Type: System.Collections.Generic.List`1[System.String]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Exclusions

This parameter specifies one or more users (separated by commas).
By default, only the domain administrator configured in your project settings is excluded from password resetting.
When this parameter is specified, both the administrator and the specified user(s) are excluded.

Type: System.Collections.Generic.List`1[System.String]
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-DcCredential

Specifies the user name and the password with which you want Recovery Manager for Active Directory Forest Edition to access domain controllers in the selected domain in the Normal mode.
Use the Get-Credential cmdlet provided by Windows PowerShell to get the PSCredential object representing user credentials.

Type: PSCredential
Parameter Sets: IncludeCredentials
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-DsrmCredential

Specifies the user name and the password with which you want Recovery Manager for Active Directory Forest Edition to access domain controllers in the selected domain in Directory Services Restore Mode (DSRM).
Use the Get-Credential cmdlet provided by Windows PowerShell to get the PSCredential object representing user credentials.

Type: PSCredential
Parameter Sets: IncludeCredentials
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-LocalCredential

Specifies local credentials for the machine.

Type: PSCredential
Parameter Sets: IncludeCredentials
Aliases:

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Set-RMADFEGlobalOptions

external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Sets global settings for recovery projects.

SYNTAX

Set-RMADFEGlobalOptions [[-SmtpServer] <String>] [[-SmtpPort] <Int32>] [[-SmtpUserName] <String>]
 [[-SmtpUserPassword] <SecureString>] [[-FromAddress] <String>] [[-ToAddress] <String>]
 [[-SendVerifyNotification] <Boolean>] [[-SendRecoveryNotification] <Boolean>] [[-SmtpEnableSsl] <Boolean>]
 [[-SmtpAuthRequired] <Boolean>] [[-CustomDriversPath] <String>] [[-AgentOperationAbortTimeout] <UInt32>]
 [-Save] [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

Sets global settings that will be applied to all recovery projects by default.

EXAMPLES

Example 1

@{paragraph=PS C:\>}

PS C:\> Set-RMADFEGlobalOptions -SmtpServer "server" -SmtpPort 587 -SmtpEnableSsl $true -FromAddress "from@domain.com" -ToAddress "to@domain.com" -SmtpAuthRequired $true -SmtpUserName "username" -SmtpUserPassword "password"

This command applies the specified settings to the configuration.

Example 2

@{paragraph=PS C:\>}

PS C:\> Set-RMADFEGlobalOptions -FromAddress "from@domain.com" -ToAddress "to@domain.com" -Save

This command applies the specified settings to the configuration and saves the updated settings to the file.

PARAMETERS

-SmtpServer

Specifies the address of the SMTP server.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SmtpPort

Specifies the SMTP server port.

Type: Int32
Parameter Sets: (All)
Aliases:

Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SmtpUserName

Specifies the name of the SMTP server.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SmtpUserPassword

Specifies the password that is used to access the SMTP server.

Type: SecureString
Parameter Sets: (All)
Aliases:

Required: False
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-FromAddress

Specifies the sender of email notifications.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 4
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ToAddress

Specifies the recipient of email notifications.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 5
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SendVerifyNotification

Indicates whether the email notification option is enabled for the verification process.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: 6
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SendRecoveryNotification

Indicates whether the email notification option is enabled for the restore process.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: 7
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SmtpEnableSsl

Indicates whether Secure Sockets Layer (SSL) is used to encrypt the connection with SMTP server.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: 8
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-SmtpAuthRequired

Indicates whether a SMTP server requires authentication.

Type: Boolean
Parameter Sets: (All)
Aliases:

Required: False
Position: 9
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-CustomDriversPath

Specifies the path to the Quest Recovery Environment image.

Type: String
Parameter Sets: (All)
Aliases:

Required: False
Position: 11
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-AgentOperationAbortTimeout

Specifies the path of a custom driver that you want to add to the Quest Recovery Environment image.

Type: UInt32
Parameter Sets: (All)
Aliases:

Required: False
Position: 12
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Save

Saves the global settings to the file.

Type: SwitchParameter
Parameter Sets: (All)
Aliases:

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Set-RMADFEPersistenceConnection

external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Sets persistence connection settings.

SYNTAX

MSSQLSecurity (Default)

Set-RMADFEPersistenceConnection [-DataSource] <String> [-Credentials] <PSCredential>
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

DisableConnection

Set-RMADFEPersistenceConnection [-Disable] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

EnableConnection

Set-RMADFEPersistenceConnection [-Enable] [-InformationAction <ActionPreference>]
 [-InformationVariable <String>] [<CommonParameters>]

IntegratedSecurity

Set-RMADFEPersistenceConnection [-DataSource] <String> [-IntegratedSecurity]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

Sets persistence connection settings that are used to store the Forest Recovery process state.

EXAMPLES

Example 1

@{paragraph=PS C:\>}

PS C:\> $creds = new-object PSCredential("sa",  (ConvertTo-SecureString 'Password' -asPlainText -Force))
Set-RMADFEPersistenceConnection -DataSource "ws\SQLExpress" -Credentials $creds 
Get-RMADFEPersistenceConnection

This command sets persistence connection settings.

Example 2

@{paragraph=PS C:\>}

PS C:\> Set-RMADFEPersistenceConnection -Disable
Get-RMADFEPersistenceConnection

This command disable persistence connection settings.

PARAMETERS

-DataSource

Specifies MS SQL instance

Type: String
Parameter Sets: MSSQLSecurity, IntegratedSecurity
Aliases:

Required: True
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Credentials

Specifies MS SQL security credentials

Type: PSCredential
Parameter Sets: MSSQLSecurity
Aliases:

Required: True
Position: 3
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Disable

Disables persistence connection

Type: SwitchParameter
Parameter Sets: DisableConnection
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Enable

Enables persistence connection

Type: SwitchParameter
Parameter Sets: EnableConnection
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IntegratedSecurity

Enable Windows Authentication using

Type: SwitchParameter
Parameter Sets: IntegratedSecurity
Aliases:

Required: True
Position: 2
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Set-RMADFERecoveryMode

external help file: QuestSoftware.RecoveryManager.AD.PowerShellFE.dll-Help.xml
Module Name: Quest.RecoveryManager.AD.PowerShellFE
online version:

schema: 2.0.0

SYNOPSIS

Sets recovery mode for the current recovery project

SYNTAX

Set-RMADFERecoveryMode [-RecoveryMode] <RecoveryMode> [[-ExcludingDomains] <String[]>]
 [-InformationAction <ActionPreference>] [-InformationVariable <String>] [<CommonParameters>]

DESCRIPTION

This cmdlet changes the recovery mode of the recovery project.

EXAMPLES

Example 1

@{paragraph=PS C:\>}

PS C:\> Set-RMADFERecoveryMode -RecoveryMode SYSVOLRecovery

Sets up SYSVOL recovery mode on the recovery project

Example 2

@{paragraph=PS C:\>}

PS C:\> Set-RMADFERecoveryMode -RecoveryMode DomainRecovery -ExcludingDomains @("domain1", "domain2")

Sets up Domain recovery mode on the recovery project and exclude "domain1" and "domain2" from recovering.

PARAMETERS

-RecoveryMode

Specifies recovery mode which can accept one of the following values:
1.
ForestRecovery - complete forest recovery mode
2.
DomainRecovery - recover selected domains only
3.
SYSVOLRecovery - recover SYSVOL only
4.
Repromotion - recover domain controllers that were not recovered in previous recovery sessions

Type: RecoveryMode
Parameter Sets: (All)
Aliases:

Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-ExcludingDomains

Specifies domains that must not be recovered when DomainRecovery mode selected.

Type: String[]
Parameter Sets: (All)
Aliases:

Required: False
Position: 1
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationAction

@{Text=}

Type: ActionPreference
Parameter Sets: (All)
Aliases: infa

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-InformationVariable

@{Text=}

Type: String
Parameter Sets: (All)
Aliases: iv

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

INPUTS

OUTPUTS

NOTES

RELATED LINKS

 

Documentos relacionados

The document was helpful.

Selecione a classificação

I easily found the information I needed.

Selecione a classificação