Recovery Manager for Active Directory Disaster Recovery Edition 10.1.1 - What is new and resolved (4234471)

10.1.1 New Features:

• Support LDAP over SSL (LDAPS) to encrypt Active Directory connection for online restore of backups
  •  support for both agent-based and agentless online restores of Active Directory objects
  • New global option to specify SSL connection. Select the Use Secure Sockets Layer (SSL) to encrypt the connection check box in the Recovery Manager for Active Directory Settings dialog
  • Ability to select SSL connection when connecting to a forest in the Recovery Manager console
• Run PowerShell Scripts before and after creating a backup This option allows you to customize your environment by running PowerShell scripts before and/or after creating a backup. Custom scripts can be launched either on the Recovery Manager for Active Directory Console machine or on the domain controller side

10.1 HF2 New Features:

• FEATURE PREVIEW: Support for Broadcom Endpoint Security Recovery Manager for Active Directory supports malware scan for BMR and Active Directory backups using Broadcom Endpoint Security (former name: Symantec Endpoint Protection 15)

10.1. HF1 New Features:

• Convert Windows Server Backup to RMAD BMR Backup Support for native Windows Server backups by converting them to RMAD BMR backups using PowerShell API.
• Support for VMware vCenter/ESX version 6.7 in Active Directory Virtual Lab Recovery Manager for Active Directory supports VMware vCenter/ESX version 6.7 for creating virtual test environments in Active Directory Virtual Lab.
• Scan Active Directory backups for viruses Malware scan is now supported for Active Directory backups.
• FEATURE PREVIEW: Support for Symantec Endpoint Protection version 14.x From this version, Recovery Manager for Active Directory supports malware scan for BMR and Active Directory backups using Symantec Endpoint Protection.

10.1.1 Enhancements:

• Support LDAP over SSL (LDAPS) to encrypt Active Directory connection for online restore of backups. This includes full support for both agent-based and agentless online restores of Active Directory objects and a new global option to specify SSL connection (select the Use Secure Sockets Layer (SSL) to encrypt the connection check box in the Recovery Manager for Active Directory Settings dialog) - RMADFE-823, ADO-222475
• Run PowerShell Scripts before and after creating a backup. This option allows you to customize your environment by running PowerShell scripts before and/or after creating a backup. Custom scripts can be launched either on the Recovery Manager for Active Directory Console machine or on the domain controller side - RMADFE-2281, ADO-21830
• ADVL automatic DNS selection doesn't work if no target item has preferred DNS - RMADFE-3250, ADO-218271
• Support LDAP over SSL (LDAPS) for Forest Recovery Edition, including the ability to select SSL  connection when connecting to a forest in the Recover Manager console - RMADFE-823, ADO-218354
• Creating Recovery Media (ISO) enhancement - use custom WinRE.wim image - RMADFE-3126, ADO-218437

10.1 HF2 Enhancements:

• The computer collection type (System State and Bare Metal) is displayed in the Recovery Manager Console - RMADFE-2133, ADO-218173
• Full replication: A user can view collection properties and global settings in the console that is used as a replication target. All of these settings are read-only, except Logging in global settings - RMADFE-2874, ADO-218185
• Hide replication sessions older than X days shown under Replication > History in Recovery Manager Console Introduced a new registry key named "ReplicationSessionLimitDays" that allows you to specify the number of days (Default: 10). The new registry key only limits the replication history shown in the Recovery Manager Console, and it does not work with the relevant PowerShell cmdlets - RMADFE-2910, ADO-218187
• The "PassedWithWarnings" antivirus scan status is shown if your antivirus database is older than the specified time limit. From this version, this limit is set to 3 days by default - RMADFE-3230, ADO-218220
• Opening large projects in the Forest Recovery Console is made quicker by running the DNS cache update in the background - RMADFE-3107, ADO-218205
• Default states of checkboxes on the General tab now depend on the original DC type "Install the domain controller as a read-only" - This option is selected by default if the original DC was a read-only DC. Applicable methods include Install/Reinstall Active Directory, and Install/Reinstall Active Directory from Media. "Configure the domain controller as a global catalog server" - This option is selected by default if the original DC was a global catalog. Applicable methods include Install/Reinstall Active Directory, Install/Reinstall Active Directory from Media, and Restore Active Directory on Clean OS - RMADFE-2904, ADO-218186
• Scheduled BMR project verification does not use the latest backup - RMADFE-3053, ADO-218195
• If the DC name is too long, the resulting path to the temporary folder that is used to extract backup files during the malware scan may exceed the limit and the backup files cannot be extracted - RMADFE-3081, ADO-218199

10.1 HF1 Enhancements:

• Auto-select a manually-registered backup for Install and Reinstall AD from Media recovery methods Now the Forest Recovery Console can automatically select a manually-registered backup for the recovery methods Install and Reinstall AD from Media - RMADFE-2905, ADO-218362
• Active Directory backups for a DC with custom DNS suffix now contain correct domain names Now such Active Directory backups have correct domain names and can be selected for the recovery methods Install and Reinstall AD from Media in the Forest Recovery Console when performing forest recovery in an environment with disjoint namespace - RMADFE-2850, ADO-218527
• Support for restore of custom Primary DNS suffixes for domain controllers from a disjoint namespace The Install Active Directory (including the Install from Media option) and Restore Active Directory on Clean OS recovery methods support restore of custom Primary DNS suffixes for domain controllers from a disjoint namespace - RMADFE-2911, ADO-218365
• The Reset Passwords option is not available for the Repromotion mode The Reset Passwords dialog is not displayed during the Phase 2 recovery because this feature is not available for the Repromotion mode - RMADFE-2903, ADO-218359
• Search for BMR backups for an Active Directory with disjoint namespace works fine BMR backups for an Active Directory with disjoint namespace can be easily found in Forest Recovery Console - RMADFE-2797, ADO-218517

10.1.1 Resolved Issues:

• Agent-based online restore can result in lsass process crash - RMADFE-3233, ADO-218222
• Unable to restore AD object when user provides smart card PIN and username hint - RMADFE-3132, ADO-218574
• Configuring a backup schedule is disabled when creating a backup from Recovery Manager for Active Directory > Create Backup - RMADFE-3260, ADO-219136
• SCOM pack Get Collections call results in Access denied errors - RMADFE-3025, ADO-220574
• Increasing number of scheduled tasks makes Console, Replication, and Cmdlets extremely slow - RMADFE-1837, ADO-223040
• RMAD console crashed due to missing DLL Microsoft.Xaml.Behaviors.dll - ADO-226682
• After restore a User Object Member Of is different than in Active Directory - ADO-230090
• IPv6 based UNC Path support - RMADFE-3232, ADO-218913
• Scanning of all backups does not stop when one of the processes ends urgently - ADO-219145
• Errors when trying to restore SYSVOL: Need to improve the RPC stability - ADO-228250
• ADVL converter returns 500 error - ADO-230091
• Error when booting VM: "Invalid location type. Location accepts only VIDatastore objects." - ADO-233811
• Impossible to collect an encrypted BMR backup when Bitlocker was hardened by GPOs - RMADFE-3212, ADO-218269
• Cannot create BMR backup for the domain controller with Data Duplication enabled on a non-critical volume - RMADFE-3211, ADO-218929
• Impossible to collect an encrypted BMR backup when GPO "Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)" is set - RMADFE-3213, ADO-219148
• Error when processing Bare Metal Active Directory Recovery in Forest Recovery Console - ADO-222538
• "Invalid server certificate" error occurs when connecting to vCenter - ADO-227404
• Bare metal recovery fails with error "The process terminated unexpectedly" if the target disk is too small - ADO-230712
• Permissions applied based on current documentation and BMR restore does not work - no access to list data stores - ADO-232623

10.1 HF2 Resolved Issues:

• Cannot replicate a password from the E-mail tab in the Recovery Manager for Active Directory Settings dialog during full replication - RMADFE-2999, ADO-218191
• Recovery Manager Console cannot replicate AD LDS (ADAM) instances from an untrusted domain in a collection - RMADFE-3099, ADO-218203
• Recovery Manager Portal installation using SQL Server authentication fails with an error indicating the specified credentials do not have sufficient privileges on target SQL Server - RMADFE-3064, ADO-218197
• Restore to Clean OS does not restore SYSVOL contents if custom SYSVOL path was specified in the project settings - RMADFE-3231, ADO-218221
• The "Verify selected DCs" operation shows zero progress for all other domain controllers - RMADFE-2649, ADO-218183
• The "Elapsed time" counter in the Forest Recovery Console stops after DC failure even when the verify operation continues - RMADFE-2925, ADO-218188
• When every DC in the domain is marked as "Do not recover" it implies that the domain will be removed during the recovery process. But it is a forest-wide operation and should be prohibited in the "Domain Recovery" mode - RMADFE-2988, ADO-218189
• Forest Recovery Console cannot open a project file saved with UTF-8 BOM - RMADFE-3083, ADO-218201
• Forest Recovery console mistakenly performs user authentication during health check for a read-only domain controller - RMADFE-2015, ADO-218501
• Opening a saved project in Active Directory Virtual Lab fails with the "This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms" error when FIPS compliance is enabled in the server where Recovery Manager Console is installed - RMADFE-3060, ADO-218196
• DC access credentials cannot be reset if they are specified in the "domain\username" format on the General tab or on the Recovery Mode tab in the Recovery Project Settings dialog - RMADFE-3104, ADO-218204
• If the domain access account is entered in the "domain\username" format on the General tab, this account will not be automatically excluded from the password reset operation when the "Reset password for domain users in privileged groups" option is enabled in the Reset Passwords dialog - RMADFE-3189, ADO-218213
• The "An item with the same key has already been added" error may occur while verifying the recovery project with Bare Metal Active Directory Recovery - RMADFE-3092, ADO-218202
• The "Another task is already in progress" error occurs when starting the VMWare virtual machine - RMADFE-3229, ADO-218219
• Bare Metal Recovery project verification fails to process DNS IP addresses delimited with a comma followed by space - RMADFE-3223, ADO-218217
• Restore to Clean OS may fail on the "reboot to Normal mode" operation - RMADFE-3225, ADO-218218
• Server booting using Dell iDRAC fails with the "No suitable authentication method found to complete authentication" error - RMADFE-3177, ADO-218211
• HP iLO server cannot be booted automatically - RMADFE-3196, ADO-218215
• You may get "Object reference is not set to an instance of an object" error on the "Getting information about computer from backup" step - RMADFE-3186, ADO-218212
• The IP address of the wrong NIC is used in the "Get information about computer from backup" verification step - RMADFE-3112, ADO-218206
• The recovery method 'Restore AD on Clean OS' mistakenly uses the domain credentials to install Forest Recovery Agent while verifying project settings - RMADFE-3033, ADO-218193
• Forest Recovery Console cannot use network credentials (non-Administrative) for a backup share due to malware scan of Active Directory backup - RMADFE-3082, ADO-218200
• Malware scan result icon and tooltip are not refreshed in case of manual selection of BMR backup - RMADFE-3039, ADO-218194
• The DVD boot device is not available in Firmware list after BMR restore (Hyper-V) - RMADFE-3066, ADO-218198
• BMR console may fail when going back to Config IP address step - RMADFE-3128, ADO-218209

10.1 HF1 Resolved Issues:

• Now the backup collecting schedule can be configured for the selected day of the week - RMADFE-3029, ADO-218556
• Recovery Manager for Active Directory does not restore GPO template files because they are considered as DFSR conflicts and are removed - RMADFE-2800, ADO-218518
• The Group Policy Restore Wizard cannot connect to a domain controller because it mistakenly tries to connect to another domain controller that is not available - RMADFE-2554, ADO-218510
• Full replication fails with the "No such host is known" error when the slave console has an unreachable DC in the Backup Agent Management list - RMADFE-2625, ADO-225873
• The Online Restore Wizard cannot accept long paths (longer than 22 symbols) to the Change Auditor database - RMADFE-2567, ADO-225869
• A list of registered backups opens with a delay in Online Restore Wizard - RMADFE-2715, ADO-218318
• The text on the "Unpacked Backups" (global settings) tab in the "Settings" dialog box has been improved - RMADFE-2775, ADO-218324
• Recovery Manager Console cannot replicate AD sites from an untrusted domain in a collection - RMADFE-2844, ADO-218523
• Full replication fails when a DC is selected for the option 'Unpack each backup upon its creation' in the primary console - RMADFE-1858, ADO-225860
• Forest Recovery scheduled verification fails if Persistence is enabled but the Persistence SQL server is not accessible - RMADFE-2831, ADO-218519
• Reinstall of read-only DC may not work - RMADFE-2996, ADO-218549
• Install Active Directory may fail due to the Select DNS operation cannot restart the Netlogon service - RMADFE-3013, ADO-218552
• Forest Recovery Console correctly displays a type of scanned backup in warnings if the backup is infected - RMADFE-3008, ADO-218550
• Recovery Manager for Active Directory should clean the 'selected backup' field in the Forest Recovery Console when no backups pass the backup selection criteria filter - RMADFE-2932, ADO-218375
• Do not validate a backup password if the backup is not specified for the Install Active Directory or Reinstall Active Directory method - RMADFE-2987, ADO-218393
• Cannot select the "Do nothing" option for a read-only domain controller (RODC) in the second phase - RMADFE-2915, ADO-218532
• DNS A record of a domain may not be deleted during DNS cleanup - RMADFE-2860, ADO-218335
• The "Install from Media" option on the General tab of the Forest Recovery Console gets unchecked when you check or uncheck the "Use backup criteria to automatically select a backup" option -RMADFE-2906, ADO-218530
• In the "Adjust to Active Directory changes" recovery method only credentials in the Normal mode should be available - RMADFE-2843, ADO-218522
• The CD-ROM device must be added (if it is absent on the source machine) to an instance converted with ADVL to install VMware Guest Tools on the target machine - RMADFE-2786, ADO-218515
• It is required to limit the maximum number of automatically selected DNS servers on the domain controller - RMADFE-2608, ADO-218312
• Automatic DNS configuration can choose an unrestored DNS server - RMADFE-2714, ADO-218317
• The UI controls that are associated with the Restore Active Directory on Clean OS recovery method are not disabled if the Disaster Recovery Edition license is not applied - RMADFE-3054, ADO-218566
• Scheduled BMR project verification does not use the latest backup - RMADFE-3044, ADO-218561
• When the "Use backup criteria to automatically select a backup" option is selected and you change the current recovery method to "Restore on Clean OS", the auto-selected backup will disappear - RMADFE-3045, ADO-218562
• Recovery to Clean OS could fail for Windows Server 2012 DCs with FRS replication - RMADFE-3037, ADO-218558
• The VM is not booted from the ISO file if the machine was previously restored using BMR recovery - RMADFE-2942, ADO-218536
• The ISO file is not deleted from the VM storage location after recovery (Hyper-V, VMWare) - RMADFE-2941, ADO-218535
• Ensure that Windows Defender is not mentioned in the UI - RMADFE-2887, ADO-218353
• Some passwords are logged in clear text for ZeroTouch operations (VMWare, Hyper-V) - RMADFE-2940, ADO-225924
• Unable to cancel the "waiting for recovery media" operation when the agent does not respond - RMADFE-2837, ADO-218520
• The ISO file access credentials are not applied when booting a Hyper-V virtual machine - RMADFE-2916, ADO-218533
• Booting of a VMWare virtual machine may fail if the virtual machine name contains special symbols (e.g. dot) - RMADFE-2907, ADO-218531
• Parallel upload of the ISO file to the VMWare datastore may fail - RMADFE-2899, ADO-218529
• Now Recovery Manager for Active Directory checks the required Windows version (2016 or higher) and returns an error message if needed during the antimalware scan - RMADFE-2852, ADO-225895
• The Hardware settings in Forest Recovery Console must be disabled if there is no DRE license - RMADFE-2848, ADO-218526
• Recovery Manager for AD generates too many progress logs in the event of a failure in creating a Bare Metal Recovery backup - RMADFE-2439, ADO-218508
• Now BMR backups are read-only to ensure that they cannot be unintentionally modified during a malware scan - RMADFE-2771, ADO-218322
• You may get a confusing event "Information about the computer was read from backup. Original IP address: N/A…" when the target network settings are explicitly specified - RMADFE-2583, ADO-218511
• The misleading "Start-RMADFileSystemScan did not return a job" error may occur when scanning a BMR backup on Windows 2012 R2 - based DC or earlier - RMADFE-2854, ADO-218528