Chat now with support
Chat with Support

Recovery Manager for AD Forest Edition 10.0.1 - Deployment Guide

Installing Forest Recovery Agent

Recovery Manager for Active Directory Forest Edition employs Forest Recovery Agent to restore Active Directory on target domain controllers to be recovered. Therefore, Forest Recovery Agent must be installed on each domain controller in the forest to be recovered.

Important: If Forest Recovery Agent was not installed on a target domain controller before a disaster occurred, the application may not be able to recover that domain controller.

For instructions on how to install Forest Recovery Agent on a target domain controller, see the User Guide supplied with this release of Recovery Manager for Active Directory Forest Edition

Planning for Active Directory forest recovery

This section provides basic best practice information about planning the recovery of an Active Directory forest. For detailed instructions on how to restore the entire Active Directory forest or selected domains in the forest, please refer to the Recovery Manager for Active Directory Forest Edition User Guide supplied with this release.

Developing a custom forest recovery plan

When planning for Active Directory forest recovery, you should first have a detailed topology map of your forests. The map should list all the information about the domain controllers, such as their names and backup status, and the trust relationships between them.

TIP: To perform a forest recovery, an Administrator account password is required for each domain in the forest. It is a good practice to archive the Administrator account password history and store the archive in a safe place.

Pre-recovery steps

Because of the complexity and critical nature of the forest recovery process, it is recommended that Active Directory administrator observe the following rules to prevent the forest failure:

  • Use only reliable and tested hardware, such as hard disks, uninterruptible power supply, etc.
  • Test any new configuration in a test lab before deploying it in your environment.
  • Ensure that each domain in the forest has at least two domain controllers.
  • Keep detailed logs about the health state of Active Directory on a daily basis, so that in case of a forest wide failure the approximate time of failure can be identified.
  • Regularly back up all domain controllers in the forest with Recovery Manager for Active Directory.
  • Install Forest Recovery Agent on all domain controllers in the forest.
  • Using the Forest Recovery Console, create a recovery project for your forest. Verify the settings of your forest recovery project on a regular basis, especially when there are membership changes to the Enterprise Admins or Domain Admins group. This helps ensure that the IT staff fully understands the forest recovery plan.

For more information on verifying the recovery project settings, see the Recovery Manager for Active Directory Forest Edition User Guide supplied with this release.

TIP: It is a good practice to create a Computer Collection that includes all domain controllers in the forest and back up the Collection each time you make changes to the forest infrastructure. To ensure that the Forest Recovery Agent is automatically installed on all domain controllers, open the Recovery Manager console (MMC snap-in), and perform the following steps:

  1. In the console tree, expand the Computer Collections node, and then select the Computer Collection that includes all domain controllers in the forest.
  2. On the Action menu, click Properties, and then open the Agent Settings tab.
  3. On the Agent Settings tab, select the Ensure Forest Recovery agent is deployed check box.
  4. Click OK.
Related Documents