Recovery Manager for Active Directory Forest Edition 10.1.1 - What is new and resolved (4224089)

10.1.1 New Features:

• Support LDAP over SSL (LDAPS) to encrypt Active Directory connection for online restore of backups
  •  support for both agent-based and agentless online restores of Active Directory objects
  • New global option to specify SSL connection. Select the Use Secure Sockets Layer (SSL) to encrypt the connection check box in the Recovery Manager for Active Directory Settings dialog
  • Ability to select SSL connection when connecting to a forest in the Recovery Manager console
• Run PowerShell Scripts before and after creating a backup This option allows you to customize your environment by running PowerShell scripts before and/or after creating a backup. Custom scripts can be launched either on the Recovery Manager for Active Directory Console machine or on the domain controller side

10.1 HF2 New Features:

• FEATURE PREVIEW: Support for Broadcom Endpoint Security Recovery Manager for Active Directory supports malware scan for BMR and Active Directory backups using Broadcom Endpoint Security (former name: Symantec Endpoint Protection 15)

10.1. HF1 New Features:

• Support for VMware vCenter/ESX version 6.7 in Active Directory Virtual Lab Recovery Manager for Active Directory supports VMware vCenter/ESX version 6.7 for creating virtual test environments in Active Directory Virtual Lab.
• Scan Active Directory backups for viruses Malware scan is now supported for Active Directory backups.
• FEATURE PREVIEW: Support for Symantec Endpoint Protection version 14.x From this version, Recovery Manager for Active Directory supports malware scan for BMR and Active Directory backups using Symantec Endpoint Protection.

10.1.1 Enhancements:

• Support LDAP over SSL (LDAPS) to encrypt Active Directory connection for online restore of backups. This includes full support for both agent-based and agentless online restores of Active Directory objects and a new global option to specify SSL connection (select the Use Secure Sockets Layer (SSL) to encrypt the connection check box in the Recovery Manager for Active Directory Settings dialog) - RMADFE-823, ADO-222475
• Run PowerShell Scripts before and after creating a backup. This option allows you to customize your environment by running PowerShell scripts before and/or after creating a backup. Custom scripts can be launched either on the Recovery Manager for Active Directory Console machine or on the domain controller side - RMADFE-2281, ADO-21830
• ADVL automatic DNS selection doesn't work if no target item has preferred DNS - RMADFE-3250, ADO-218271
• Support LDAP over SSL (LDAPS) for Forest Recovery Edition, including the ability to select SSL  connection when connecting to a forest in the Recover Manager console - RMADFE-823, ADO-218354
• Creating Recovery Media (ISO) enhancement - use custom WinRE.wim image - RMADFE-3126, ADO-218437

10.1 HF2 Enhancements:

• The computer collection type (System State and Bare Metal) is displayed in the Recovery Manager Console - RMADFE-2133, ADO-218173
• Full replication: A user can view collection properties and global settings in the console that is used as a replication target. All of these settings are read-only, except Logging in global settings - RMADFE-2874, ADO-218185
• Hide replication sessions older than X days shown under Replication > History in Recovery Manager Console Introduced a new registry key named "ReplicationSessionLimitDays" that allows you to specify the number of days (Default: 10). The new registry key only limits the replication history shown in the Recovery Manager Console, and it does not work with the relevant PowerShell cmdlets - RMADFE-2910, ADO-218187
• The "PassedWithWarnings" antivirus scan status is shown if your antivirus database is older than the specified time limit. From this version, this limit is set to 3 days by default - RMADFE-3230, ADO-218220
• Opening large projects in the Forest Recovery Console is made quicker by running the DNS cache update in the background - RMADFE-3107, ADO-218205
• Default states of checkboxes on the General tab now depend on the original DC type "Install the domain controller as a read-only" - This option is selected by default if the original DC was a read-only DC. Applicable methods include Install/Reinstall Active Directory, and Install/Reinstall Active Directory from Media. "Configure the domain controller as a global catalog server" - This option is selected by default if the original DC was a global catalog. Applicable methods include Install/Reinstall Active Directory, Install/Reinstall Active Directory from Media, and Restore Active Directory on Clean OS - RMADFE-2904, ADO-218186

10.1 HF1 Enhancements:

• Auto-select a manually-registered backup for Install and Reinstall AD from Media recovery methods Now the Forest Recovery Console can automatically select a manually-registered backup for the recovery methods Install and Reinstall AD from Media - RMADFE-2905, ADO-218362
• Active Directory backups for a DC with custom DNS suffix now contain correct domain names Now such Active Directory backups have correct domain names and can be selected for the recovery methods Install and Reinstall AD from Media in the Forest Recovery Console when performing forest recovery in an environment with disjoint namespace - RMADFE-2850, ADO-218527
• Support for restore of custom Primary DNS suffixes for domain controllers from a disjoint namespace The Install Active Directory (including the Install from Media option) and Restore Active Directory on Clean OS recovery methods support restore of custom Primary DNS suffixes for domain controllers from a disjoint namespace - RMADFE-2911, ADO-218365
• The Reset Passwords option is not available for the Repromotion mode The Reset Passwords dialog is not displayed during the Phase 2 recovery because this feature is not available for the Repromotion mode - RMADFE-2903, ADO-218359

10.1.1 Resolved Issues:

• Agent-based online restore can result in lsass process crash - RMADFE-3233, ADO-218222
• Unable to restore AD object when user provides smart card PIN and username hint - RMADFE-3132, ADO-218574
• Configuring a backup schedule is disabled when creating a backup from Recovery Manager for Active Directory > Create Backup - RMADFE-3260, ADO-219136
• SCOM pack Get Collections call results in Access denied errors - RMADFE-3025, ADO-220574
• Increasing number of scheduled tasks makes Console, Replication, and Cmdlets extremely slow - RMADFE-1837, ADO-223040
• RMAD console crashed due to missing DLL Microsoft.Xaml.Behaviors.dll - ADO-226682
• After restore a User Object Member Of is different than in Active Directory - ADO-230090
• IPv6 based UNC Path support - RMADFE-3232, ADO-218913
• Scanning of all backups does not stop when one of the processes ends urgently - ADO-219145
• Errors when trying to restore SYSVOL: Need to improve the RPC stability - ADO-228250
• ADVL converter returns 500 error - ADO-230091
• Error when booting VM: "Invalid location type. Location accepts only VIDatastore objects." - ADO-233811

10.1 HF2 Resolved Issues:

• Cannot replicate a password from the E-mail tab in the Recovery Manager for Active Directory Settings dialog during full replication - RMADFE-2999, ADO-218191
• Recovery Manager Console cannot replicate AD LDS (ADAM) instances from an untrusted domain in a collection - RMADFE-3099, ADO-218203
• Recovery Manager Portal installation using SQL Server authentication fails with an error indicating the specified credentials do not have sufficient privileges on target SQL Server - RMADFE-3064, ADO-218197
• Restore to Clean OS does not restore SYSVOL contents if custom SYSVOL path was specified in the project settings - RMADFE-3231, ADO-218221
• The "Verify selected DCs" operation shows zero progress for all other domain controllers - RMADFE-2649, ADO-218183
• The "Elapsed time" counter in the Forest Recovery Console stops after DC failure even when the verify operation continues - RMADFE-2925, ADO-218188
• When every DC in the domain is marked as "Do not recover" it implies that the domain will be removed during the recovery process. But it is a forest-wide operation and should be prohibited in the "Domain Recovery" mode - RMADFE-2988, ADO-218189
• Forest Recovery Console cannot open a project file saved with UTF-8 BOM - RMADFE-3083, ADO-218201
• Forest Recovery console mistakenly performs user authentication during health check for a read-only domain controller - RMADFE-2015, ADO-218501
• Opening a saved project in Active Directory Virtual Lab fails with the "This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms" error when FIPS compliance is enabled in the server where Recovery Manager Console is installed - RMADFE-3060, ADO-218196
• DC access credentials cannot be reset if they are specified in the "domain\username" format on the General tab or on the Recovery Mode tab in the Recovery Project Settings dialog - RMADFE-3104, ADO-218204
• If the domain access account is entered in the "domain\username" format on the General tab, this account will not be automatically excluded from the password reset operation when the "Reset password for domain users in privileged groups" option is enabled in the Reset Passwords dialog - RMADFE-3189, ADO-218213

10.1 HF1 Resolved Issues:

• Now the backup collecting schedule can be configured for the selected day of the week - RMADFE-3029, ADO-218556
• Recovery Manager for Active Directory does not restore GPO template files because they are considered as DFSR conflicts and are removed - RMADFE-2800, ADO-218518
• The Group Policy Restore Wizard cannot connect to a domain controller because it mistakenly tries to connect to another domain controller that is not available - RMADFE-2554, ADO-218510
• Full replication fails with the "No such host is known" error when the slave console has an unreachable DC in the Backup Agent Management list - RMADFE-2625, ADO-225873
• The Online Restore Wizard cannot accept long paths (longer than 22 symbols) to the Change Auditor database - RMADFE-2567, ADO-225869
• A list of registered backups opens with a delay in Online Restore Wizard - RMADFE-2715, ADO-218318
• The text on the "Unpacked Backups" (global settings) tab in the "Settings" dialog box has been improved - RMADFE-2775, ADO-218324
• Recovery Manager Console cannot replicate AD sites from an untrusted domain in a collection - RMADFE-2844, ADO-218523
• Full replication fails when a DC is selected for the option 'Unpack each backup upon its creation' in the primary console - RMADFE-1858, ADO-225860
• Forest Recovery scheduled verification fails if Persistence is enabled but the Persistence SQL server is not accessible - RMADFE-2831, ADO-218519
• Reinstall of read-only DC may not work - RMADFE-2996, ADO-218549
• Install Active Directory may fail due to the Select DNS operation cannot restart the Netlogon service - RMADFE-3013, ADO-218552
• Forest Recovery Console correctly displays a type of scanned backup in warnings if the backup is infected - RMADFE-3008, ADO-218550
• Recovery Manager for Active Directory should clean the 'selected backup' field in the Forest Recovery Console when no backups pass the backup selection criteria filter - RMADFE-2932, ADO-218375
• Do not validate a backup password if the backup is not specified for the Install Active Directory or Reinstall Active Directory method - RMADFE-2987, ADO-218393
• Cannot select the "Do nothing" option for a read-only domain controller (RODC) in the second phase - RMADFE-2915, ADO-218532
• DNS A record of a domain may not be deleted during DNS cleanup - RMADFE-2860, ADO-218335
• The "Install from Media" option on the General tab of the Forest Recovery Console gets unchecked when you check or uncheck the "Use backup criteria to automatically select a backup" option -RMADFE-2906, ADO-218530
• In the "Adjust to Active Directory changes" recovery method only credentials in the Normal mode should be available - RMADFE-2843, ADO-218522
• The CD-ROM device must be added (if it is absent on the source machine) to an instance converted with ADVL to install VMware Guest Tools on the target machine - RMADFE-2786, ADO-218515
• It is required to limit the maximum number of automatically selected DNS servers on the domain controller - RMADFE-2608, ADO-218312
• Automatic DNS configuration can choose an unrestored DNS server - RMADFE-2714, ADO-218317