On this tab, you can specify some global (or default) settings to automatically unpack backups. By default, these settings will apply to all new Computer Collections.
This tab provides the following options:
Unpack each backup upon its creation. Specifies to unpack each backup upon its creation. This option will only apply to those Computer Collections whose properties are configured to use the global settings. In this option, you can specify the number of recent backup creation sessions (default 3) from which you want to keep unpacked backups for each domain in the Computer Collections.
Prompt me to keep backups unpacked by wizards. Specifies that the Online Restore Wizard and the Group Policy Restore Wizard will prompt you to keep unpacked backups. Use the Keep unpacked backups list to specify for how long you want RMAD to keep (default 7 days) the backups unpacked by the wizards.
Unpacked backups folder. Provides a space for you to specify the path to the folder (default C:\ProgramData\Quest\Recovery Manager for Active Directory\Unpacked) where you want RMAD to keep unpacked backups. Each unpacked backup will be saved in a separate subfolder. Type the folder path or click Browse to locate and select the folder.
Only one DC backup per domain is chosen for unpacking for each backup session.
Not Read-Only DCs are selected first.
-OR-
If there are no Not Read-Only DCs in the domain, all the DCs are supposed to be selected.
If several DCs are selected on the Step 2, DC with the Global Catalog role will be selected among them. If there are several DCs with the GC role, it is unpredictable which backup will be selected then.
The chosen backup (one per domain) is unpacked.
If there is limit for unpacked backups and it is exceeded, the specified number of the oldest backups are deleted. If individual settings are specified for a collection, backups for that particular collection are taken into account, otherwise backups of all collections that use the global settings are taken into account when comparing against the specified limit.
For more information on managing unpacked backups, see Unpacking backups.
On this tab, you can configure e-mail notification settings. Recovery Manager for Active Directory (RMAD) will use these settings to send notification e-mails about backup creation sessions.
This tab provides the following options:
Service Type Select SMTP Authentication or Exchange OAuth2 for Microsoft 365 Exchange Online.
SMTP Authentication
To set up email notifications for Exchange, specify the following for SMTP Authentication:
SMTP server. Provides a space for you to specify the SMTP server for outgoing messages.
SMTP port. Provides a space for you to specify the port number (default port for SMTP is 25) to connect to on your outgoing mail (SMTP) server.
From address. Provides a space for you to specify the return address for your e-mail notification messages. It is recommended that you specify the e-mail address of the RMAD administrator.
SMTP server requires authentication. When selected, specifies that you must log on to your outgoing mail server.
User. Provides a space for you to specify the account name used to log on to the SMTP server.
Password. Provides a space for you to specify the user password.
Use Secure Sockets Layer (SSL) to encrypt the connection. Allows you to use SSL when accessing the e-mail server.
Exchange OAuth2 Authentication
To set up email notifications for Microsoft 365 Exchange Online, you need to register Recovery Manager for Active Directory with Azure Active Directory. For steps to create and manage your Azure Active Directory application see Registering Recovery Manager for Microsoft 365 Exchange Online Email Notifications.
From address. Provides a space for you to specify the return address for your email notification messages. It is recommended that you specify the e-mail address of the RMAD administrator.
Application (client) ID. Provide the application (client) ID for the Azure Active Directory application created for Recovery Manager for Active Directory email notifications.
Directory (tenant) ID. Provide the directory (tenant) ID for the Azure Active Directory application created for Recovery Manager for Active Directory email notifications.
Certificate Thumprint. Provide the certificate thumbprint for the Azure Active Directory application created for Recovery Manager for Active Directory email notifications.
Test Settings. Sends a test notification message to the address set in the “From” address text box. Use this button to verify that the specified e-mail notification settings are valid.
For more information, see Using e-mail notification.
To use email notifications using Microsoft 365 Exchange Online, you need to register Recovery Manager for Active Directory with Azure Active Directory. During the registration process, the required variables are generated. These variables are used when you configure OAuth2 authentication.
Log into the Azure Active Directory portal (https://portal.azure.com) with your global administrator user account.
In the Microsoft Azure dashboard, go to Azure Active Directory | App Registrations, and click New Registration.
Enter a name for the application.
Under Supported account types, select Accounts in this organizational directory only (Single tenant) for the accounts that can access the application API.
IMPORTANT: It is highly recommended that the application does not have access to all mailboxes. For more information about how to limit the application access to all mailboxes see the article Limiting application permissions to specific Exchange Online mailboxes.
Leave the Redirect URI (optional) field empty.
Click Register.
On the Overview tab, go to View API Permissions. Click Add a permission, click Microsoft Graph | Application Permissions and add the Mail.ReadWrite and Mail.Send permissions. See Microsoft documentation for details on limiting permissions to specific Exchange Online mailboxes. (Note: The Enforce approver account validation option found when configuring email notifications will not function if you select to follow the Microsoft article to restrict access to a single mailbox.)
Click Add Permission.
On the API Permission tab, under Grant consent, click Grant admin consent for tenant name.
Click Yes to confirm.
On the preview screen, click Overview, and note the application ID and the directory ID. (You will need these values when setting up OAuth authentication.)
Go to Azure Active Directory - Roles and administrators and assign the Exchange Administrator role for the application you created in previous steps.
The Azure Active Directory application requires a certificate for authentication. Go to Certificates & secrets, select Upload Certificate and upload the required file.
Recovery Manager for Active Directory requires the certificate to be copied to the machine where the Recovery Manager console is installed. The certificate should be stored in the local certificate store.
To import the certificate on the console machine:
| NOTE |
Once OAuth2 authentication is set up, Recovery Manager for Active Directory saves the Application (client) ID, Directory (tenant) ID, and Certificate thumbprint in the registry. It is located in the registry path: "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Quest\Recovery Manager for Active Directory\Options\Email". |
On this tab, you can configure diagnostic logging to write detailed information about the activity of RMAD to log files.
This tab provides the following options:
| Caution |
Diagnostic logging can be resource intensive, affecting overall server performance and consuming disk space. Therefore, it should only be used temporarily when more detailed information is needed to isolate and resolve possible problems or to monitor the activity of RMAD on your server. |
Log files location. Specifies the location where to create the log files. The default location is C:\ProgramData\Quest\Recovery Manager for Active Directory\Logs.
Create a new set of log files. Use this list to define how often (default Daily) to create a new set of log files. Each new set of log files is placed in a separate subfolder in the log files location.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
