-
Title
Can Recovery Manager recover Domain Controllers that have been encrypted? -
Description
Can RMAD be used to recover Domain Controllers that have had their File System encrypted due to ransomeware or some other malware? -
Resolution
To be able to use the Forest Recovery Console, or even the Repair Wizard, the DCs have to be rebooted into DSRM mode. If the DCs cannot be put into DSRM mode due to a bad MBR or encrypted file system, RMAD will not be able perform the restoration.
To preform a domain or forest restore, RMADFE requires that at least one DC that was backed up be available. It is not supported to restore to new machines, even with the same names or hardware. The same is true for the Repair Wizard. The restore process may work, however due to restoring the registry from one machine to another, we do not currently support these scenarios (Bare Metal Restore) due to the risk of the restored machine's OS being unstable.
The intended purpose of RMAD(FE) is to restore AD corrupt, not server or hardware issue.
Enhancement Request RMADFE-831 (the ability to recover from a disaster that exceeds logical AD corruption) has been submitted to Development for consideration in a future release of RMADFE.
-
Defect ID
RMADFE-831