Chat now with support
Chat with Support

Recovery Manager for AD Disaster Recovery Edition 10.2.2 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Cloud Storage Secure Storage Server Hybrid Recovery with On Demand Recovery Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Restore Active Directory on Clean OS method Bare metal forest recovery Using Management Shell Creating virtual test environments Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory

Infrastructure tab

This tab is available only for the Restore Active Directory on Clean OS and Bare Metal Active Directory Recovery methods.
To automatically boot a physical server or create and/or boot a virtual machine, from the Infrastructure drop-down list, select the type of physical server, virtual machine platform, or cloud platform on which you want to perfrom the selected recovery method.

iDRAC/iLO/Custom physical host controller settings

If you select Dell® server, HPE server, or Custom from the Infrastructure drop-down list, you must complete this section. For more information, see Boot from the ISO image automatically.

When recovering a DC to the VMWare® or Hyper-V® platform, from the Infrastructure drop-down list, select VMWare ESXi™ or Microsoft Hyper-V®. For more information, see VMware ESXi™ and Microsoft Hyper-V®.

If you selected the Restore Active Directory on Clean OS method, see Create virtual machines in Microsoft Azure.

Recovery Media Image

The Quest Recovery Environment image requires storage drivers to recognize the drives of the server, and network adapter drivers in order to communicate with the Forest Recovery Console over the network.

A generic set of Windows storage controller and network adapter drivers are included automatically when you generate the Recovery Environment image. This satisfies the requirements of newer systems. Systems from other manufacturers or older systems may require you to inject storage controller or network adapter drivers when creating the Recovery Environment image.

When creating the Recovery Environment image, driver injection is used to facilitate interoperability between the Forest Recovery Console, network adapter, and storage on the target machine.

Data restored from the Bare Metal Recovery Backup includes drivers for the hardware previously in place. Custom third-party drivers will be added automatically from the Recovery Environment image to the restored operating system. This allows the restored operating system to boot using the new set of hardware.

Recovery Environment Image area

  • Store recovery media on the Bare Metal Recovery backup share - By default, the Quest Recovery Environment image file will be saved on the backup share specified on the General tab.

  • Add third-party drivers - This option allows you to create the Quest Recovery Environment image supporting custom network cards and custom disks.

  • Add third-party drivers from Bare Metal Backup - Adds third-party drivers from Bare Metal Recovery backup.

If you choose not to add third party drivers and then run the Verify Settings operation, the Recovery Environment image will not contain any third-party drivers. You can add third-party drivers to the Recovery Environment image later by selecting the Add third-party drivers check box or the Add third-party drivers from Bare Metal Backup check box and running the Verify Settings operation again. You can also remove third-party drivers from the Recovery Environment image by clearing the Add third-party drivers check box and the Add third-party drivers from Bare Metal Backup check box and running the Verify Settings operation.

Note

Note that adding additional drivers may significantly increase the size of the Quest Recovery Environment image file.

 

Malware Remediation tab

You can use this tab to make choices for scanning of malware or server maintenance during recovery. RMAD does not scan and remediate with this feature. The feature pauses the recovery during Directory Services Restore mode (DSRM) before the domain controller is restarted into normal mode allowing users to perform maintenance and run their own scans using third party tools and/or remediate if malware found.

The choices are:

  • Scan the selected backup for malware during the project verification

  • Pause recovery in DSRM to perform maintenance tasks including malware remediation



Pause recovery in DSRM to perform maintenance tasks including malware remediation can be enabled for specific domain controllers by selecting the option from the Malware Remediation tab from each domain controller in the project, or for all domain controllers in the entire domain/forest.



To select all of the domain controllers in a domain or forest to be paused during recovery in DSRM mode, select Configure by domain and select a domain or multiple domains within the forest.



When a domain is selected the Pause recovery in DSRM to perform maintenance tasks including malware remediation is no longer available on each domain controller for the selected domain, and The option is managed by domain settings is displayed.


NOTE

When the Pause recovery in DSRM option is managed by domain settings, it applies to all domain controllers in the project for the selected domain. When enabled for entire domain, you can not individually enable the pause recovery in DSRM option for specific domain controllers. To do so, within Configure by Domain, unselect the domain(s). After a domain is unselected, within the project select each Domain Controller the pause is required for. From the Malware Remediation tab, select to enable Pause recovery in DSRM to perform maintenance tasks including malware remediation.

To Resume recovery when paused, select all or individual domain controllers in the recovery project and click Resume. Otherwise the Resume button will be unavailable.

 

Progress tab

You can use this tab to view progress of the recovery stages and steps applicable to the domain controller selected in the list. To view more information about a recovery step on this tab, point to that step, and then point to the question mark displayed next to it.

You can copy the information displayed on the Progress tab to the Clipboard and then paste it to another application (for example, a Microsoft Office Word file). To do so, point to the Progress tab, and then click the Copy button in the upper right corner of the tab. This copies all the information displayed on the Progress tab, including the current status of each recovery stage and step and any error messages displayed on the tab.

 

Events tab

You can use this tab to view recovery events related to the entire Active Directory® forest, specific domain controllers, or both these categories of recovery events.

On this tab, you can use the following elements:

  • Show - Select a category of recovery events to view:

    • Forest-wide events. Shows recovery events related to the entire Active Directory® forest.

    • Events for selected DCs. Shows recovery events related to the domain controllers selected in the list.

    • All events. Shows forest-wide events and events related to the domain controllers selected in the list.

  • Copy - Copies events in the list to Clipboard.

  • Save - Allows you to export events in the list to one of the following formats:

    • Text (Tab delimited) (*.txt)

    • CSV (Comma delimited) (*.csv)

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating