With Recovery Manager for Active Directory, you can selectively restore Group Policy information from normal System State backups of domain controllers.
To restore Group Policy information
The Group Policy Restore Wizard helps you recover Group Policy objects and links deleted or modified since the last backup. The wizard operates in online mode and does not require restarting the domain controller. The wizard also enables the migration of Group Policy objects between domains.
Group Policy Restore allows you to roll back changes made to Group Policy information, and return individual Group Policy objects to the state they were in when the backup was created. It is important to note that a Group Policy Restore only affects the object selected for recovery, and optionally, the links to that object. Any objects that are not involved in the operation remain unchanged in the domain.
For this type of restore, it is not necessary to create any special backups; you may use any regular backup of a domain controller’s System State.
After Recovery Manager for Active Directory completes Group Policy Restore on the target domain controller, the restored Group Policy objects and links are replicated to the other domain controllers through the normal replication process. The previously erased or modified Group Policy information is ignored during replication, because the restored data appears to be more recent.
The wizard lets you choose the backup source domain and lists System State backups of domain controllers of that domain. You select a backup from the list on the Backup Selection page, or click Register to register additional backups. The wizard then unpacks the backup, preparing backup data for further use.
After the backup data preparation is completed, the wizard prompts you to choose the target domain controller and lists all Group Policy objects that are in the backup. To have the wizard compare the state of Group Policy objects in the backup with their state on that domain controller, click Compare All. After the wizard performs the comparison, the State in AD column indicates a state of each object, shown as ‘Different’, ‘Identical’, or ‘Deleted’. You can select the object you want the wizard to restore.
Then, the wizard prompts you to choose whether to restore policy settings in the Group Policy objects, security settings on the objects, or both, and asks about how to process links to the selected Group Policy objects.
Finally, the wizard informs you about the changes to be made to the Group Policy and allows you to start the restore process or step back to modify the restore options.
Recovery Manager for Active Directory provides for restoration of Active Directory data from backups created by other applications if these backups are stored in Microsoft Tape Format (MTF). Such backups of domain controllers' System State can be created, for example, Veritas Backup Exec. Depending on your needs, you can use the Online Restore Wizard, the Group Policy Restore Wizard, the Repair Wizard, or the Extract Wizard to restore data.
To restore data from backups created by other applications
To register a backup in the Repair Wizard, on the Computer and Backup Selection page, click Register, and then click one from the above-listed items.
Snapshot backups (that is, backups created using the Volume Shadow Copy service) are not supported by the Repair Wizard. By default, Veritas Backup Exec 9.0 or later uses the Volume Shadow Copy service when creating System State backups. However, you can restore Active Directory data from snapshot backups using the Online Restore Wizard and Group Policy Restore Wizard. The Extract Wizard also supports snapshot backups.
The Extract Wizard allows you to restore previously backed up files to a specified folder (an alternate location).
Restoring backed up files to an alternate location allows you to use the files as a standalone data source, or to replace existing files on a given computer. The wizard lets you select a backup, choose the components to be extracted from that backup, and specify the destination folder. Then, the wizard guides you through the extract operation.
The Extract Wizard can help you to perform an authoritative restore of the SYSVOL. For more information, see Restoring SYSVOL authoritatively.
Also you can use the Extract Wizard in conjunction with the Install from Media (IFM) feature of Windows to create a domain controller. IFM allows you to create an additional domain controller using a restored backup of another domain controller. The restored backup can be held on any backup media (tape, CD, or DVD) or on a shared network resource. A restored backup makes it possible to set up an additional domain controller in an existing domain without replicating the entire directory database to the new domain controller.
With the Extract Wizard, you can restore a backup of a domain controller’s System State to a specified folder. Then, using the restored backup files, you can create a new domain controller, as described in the following sections: