Chat now with support
Chat with Support

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

Recovery Manager for AD Disaster Recovery Edition 10.2.2 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Cloud Storage Secure Storage Server Hybrid Recovery with On Demand Recovery Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Restore Active Directory on Clean OS method Bare metal forest recovery Using Management Shell Creating virtual test environments Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory

Creating virtual test environments


About Active Directory Virtual Lab

The Active Directory Virtual Lab is a component of Recovery Manager for Active Directory that helps you create virtual test environments from an Active Directory® forest. You can use the created test environments to design and evaluate Active Directory® disaster recovery scenarios, test planned Active Directory changes before deploying them to production, train your staff to perform Active Directory-related tasks, and more.


When creating virtual machines from the source computers, the Active Directory Virtual Lab uses third-party virtualization software, such as Microsoft System Center Virtual Machine Manager (SCVMM), VMware ESX, or VMware vCenter. For a full list of supported virtualization software, see the System Requirements section in the Recovery Manager for Active Directory Release Notes.

You can create virtual machines that maintain all the data available on the source computers, including Active Directory®, installed programs, and files. To manage the created virtual test environment, you need to use the tools provided by the virtualization software with which the Active Directory Virtual Lab created the virtual machines in the test environment.

To create a virtual test environment from an Active Directory® forest, you first need to select the source computers (domain controllers or standalone servers) you want to include in the test environment, configure settings to create a virtual machine from each source computer, and then have the Active Directory Virtual Lab create the test environment for you.

For instructions on creating a virtual test environment, see How to create a virtual test environment.



This section lists the permissions required to create a virtual test environment by using the Active Directory Virtual Lab.

Install and use Active Directory Virtual Lab

Be a member of the local Administrators group.

Create a virtual machine from a source computer

NOTE: This includes access to the source computer, Forest Recovery Agent installation, and virtualization agent installation.

Be a member of the local Administrators group.

Create a virtual test environment using Microsoft SCVMM
  • Have the Delegated Administrator role on the Microsoft SCVMM server. Be a member of the local Administrators group on the target Hyper-V® host.

  • To create a generation 2 virtual machine using SCVMM, Active Directory Virtual Lab console needs access to the share with VHDX/RAW files on the Hyper-V® host.

Create a virtual test environment using VMware vCenter/ESX

VMware vCenter® / VMware ESX® server:

  • Datastore

    • Allocate Space

    • Browse Datastore

  • Network

    • Assign Network
  • Resource

    • Assign Virtual Machine To Resource Pool
  • Profile-driven storage

    • Profile-driven storage view

This permission must be assigned to the vCenter Server root level.

  • Virtual Machine

    • Configuration

    • Guest Operations

    • Interaction

      • Configure CD Media

      • Device Connection

      • Power Off

      • Power On

      • VMware Tools Install

  • Inventory

  • Provisioning

    • Allow Disk Access

    • Allow Read-Only Disk Access

    • Customize

    • Modify Customization Specifications

    • Read Customization Specifications

  • Sessions

    • Validate session

To install Converter Standalone agent, use built-in Administrator account to connect to the source machine or disable User Access Control (UAC) on the source machine.


Communication ports

This section provides information about the communication ports required to create a virtual test environment with the Active Directory Virtual Lab.

In this section:


Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating