Chat now with support
Chat with Support

Recovery Manager for AD Forest Edition 10.2 - User Guide

Overview Getting started
Permissions required to use Recovery Manager for Active Directory Recovery Manager Console Getting and using help Configuring Windows Firewall Using Computer Collections Managing Recovery Manager for Active Directory configuration Licensing
Backing up data
Permissions required for the Backup operation Managing Backup Agent Using a least-privileged user account to back up data Using Managed Service Accounts Active Directory backups vs Windows System State backups Creating BMR and Active Directory backups Using the Backup Wizard Retrying backup creation Enabling backup encryption Backing up AD LDS (ADAM) Backing up cross-domain group membership Backing up distributed file system (DFS) data Backup scheduling Setting performance options Setting advanced backup options Using Forest Recovery Agent Unpacking backups Using e-mail notification Viewing backup creation results
Restoring data
Getting started with Active Directory recovery Managing deleted or recycled objects Restoring backed up Active Directory components Integration with Change Auditor for Active Directory Using granular online restore Restoring AD LDS (ADAM) Selectively restoring Active Directory object attributes Restoring objects in an application directory partition Restoring object quotas Restoring cross-domain group membership Performing a restore without having administrator privileges Reports about objects and operations Using complete offline restore Offline restore implications Restoring SYSVOL authoritatively Performing a granular restore of SYSVOL Recovering Group Policy Restoring data from third-party backups Using the Extract Wizard Restoring passwords and SID history
Full Replication Consolidating backup registration data Monitoring Recovery Manager for Active Directory Recovering an Active Directory forest
Forest recovery overview Deploying Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Permissions required to use Forest Recovery Console Forest Recovery Console Managing a recovery project Recovery methods Phased recovery Managing Forest Recovery Agent Rebooting domain controllers manually Resetting DSRM Administrator Password Purging Kerberos Tickets Managing the Global Catalog servers Managing FSMO roles Manage DNS Client Settings Configuring Windows Firewall Developing a custom forest recovery plan Backing up domain controllers Assigning a preferred DNS server during recovery Handling DNS servers during recovery Forest recovery approaches Deciding which backups to use Running custom scripts while recovering a forest Overview of steps to recover a forest Viewing forest recovery progress Viewing recovery plan Viewing a report about forest recovery or verify settings operation Handling failed domain controllers Adding a domain controller to a running recovery operation Selectively recovering domains in a forest Recovering SYSVOL Deleting domains during recovery Resuming an interrupted forest recovery Recovering read-only domain controllers (RODCs) Checking forest health Collecting diagnostic data for technical support
Using Management Shell Creating virtual test environments Using Recovery Manager for Active Directory web portal Appendices
Frequently asked questions Best practices for using Computer Collections Technical characteristics Best practices for creating backups Best practices for creating backups for forest recovery Best practices for recovering a forest Descriptions of recovery or verification steps Ports Used by Recovery Manager for Active Directory Forest Edition (Disaster Recovery Edition) Backup Wizard Online Restore Wizard Online Restore Wizard for AD LDS (ADAM) Group Policy Restore Wizard Repair Wizard Extract Wizard Events generated by Recovery Manager for Active Directory Descriptions of PowerShell commands
Add-RMADBackup Add-RMADCollectionItem Add-RMADReplicationConsole Add-RMADStorageServer Backup-RMADCollection Close-RMADFEProject Compare-RMADObject Convert-RMADBackup ConvertTo-RMADRecycledObject Copy-RMADFEBackup Create-RMADStorageAgentSetup Expand-RMADBackup Export-RMADBackup Export-RMADFERecoveryCertificate Export-RMADFEResult Export-RMADSecureStorageBackup Get-RMADBackup Get-RMADBackupAgent Get-RMADBackupInfo Get-RMADBackupObject Get-RMADBackupSecurityStatus Get-RMADCollection Get-RMADCollectionItem Get-RMADDeletedObject Get-RMADFEAvailableSubnet Get-RMADFEComputer Get-RMADFEConsole Get-RMADFEDnsCache Get-RMADFEDomain Get-RMADFEEvent Get-RMADFEGlobalOptions Get-RMADFEOperation Get-RMADFEPersistenceConnection Get-RMADFEProject Get-RMADFERecoveryAgent Get-RMADFESchedule Get-RMADGlobalOptions Get-RMADLicenseInfo Get-RMADObject Get-RMADReplicationConsole Get-RMADReplicationSchedule Get-RMADReplicationSession Get-RMADReplicationSessionItem Get-RMADReportObject Get-RMADReportObjectAttributes Get-RMADReportObjectChildren Get-RMADReportSession Get-RMADSession Get-RMADSessionItem Get-RMADSessionItemEvent Get-RMADStorageServer Get-RMADStorageServerHardeningStatus Get-RMADStorageServerRetentionPolicy Import-RMADBackup Import-RMADFERecoveryCertificate Install-RMADBackupAgent Install-RMADFERecoveryAgent New-RMADCollection New-RMADFEProject New-RMADFERecoveryMedia New-RMADSchedule Open-RMADFEProject Protect-RMADSecureStorageServer Publish-RMADBackupSecurityStatus Refresh-RMADStorageServer Register-RMADSecureStorageBackups Remove-RMADBackup Remove-RMADBackupAgent Remove-RMADCollection Remove-RMADCollectionItem Remove-RMADFERecoveryAgent Remove-RMADFESchedule Remove-RMADReplicationConsole Remove-RMADReplicationSchedule Remove-RMADReplicationSession Remove-RMADStorageServer Remove-RMADUnpackedComponent Rename-RMADCollection Restore-RMADDeletedObject Restore-RMADDomainController Restore-RMADObject Resume-RMADFERecovery Save-RMADFEProject Set-RMADCollection Set-RMADFEComputer Set-RMADFEDnsCache Set-RMADFEDomain Set-RMADFEGlobalOptions Set-RMADFEPersistenceConnection Set-RMADFERecoveryMode Set-RMADFESchedule Set-RMADGlobalOptions Set-RMADReplicationConsole Set-RMADReplicationSchedule Set-RMADStorageServerRetentionPolicy Start-RMADFERecovery Start-RMADFERecoveryAgentOperation Start-RMADFEVerification Start-RMADReplication Start-RMADReportViewer Stop-RMADFEWorkflow Test-RMADSecureStorageBackup Unprotect-RMADStorageServer Update-RMADBackupAgent Update-RMADFEProject Update-RMADLicense

General tab

On this tab, you can specify the default location for storing Active Directory backups or select a default method for compare and restore operations.

This tab provides the following options:

  • Default backup location. Allows you to specify the path to the folder where to store backups. You can either type the path or click Browse to locate and select the folder.

  • Maximum number of items displayed per folder under the Active Directory node. Use this box to type the maximum number of objects that you want to be displayed for any single folder in the console tree under the Active Directory node.

  • Default method for compare and restore operations. Allows you to select the default method to perform compare and restore operations in the Online Restore Wizard. For more information about the methods that you can select, see Using the agentless or agent-based method.

  • Include Change Auditor "Who" data in reports. Includes information on users who modified certain Active Directory objects into the reports you can generate in the Online Restore Wizard. To use this option, you must have Change Auditor for Active Directory installed in the home Active Directory forest of Recovery Manager for Active Directory.

  • Include subsequent changes from CA on deleted objects. When this option is selected, Recovery Manager for Active Directory restores the deleted object(s) and continuously restores the last change (if any) that was made to the object attributes after creating the backup, using data from the Change Auditor database.

  • Database. Allows you to specify the name of Change Auditor database.

    To specify the CA database server, instance, port, and name, use the following format: <Server Name>\<Instance Name>,<Port>\<Database Name>. Example: testserver.domain.com\testinstance,1432\ChangeAuditorDB

    For details about the Change Auditor-related options, see Integration with Change Auditor for Active Directory.

  • Use Secure Sockets Layer (SSL) to encrypt the connection. Allows you to use LDAP over SSL when accessing the AD forests. This selection affects all the LDAP connections in Recovery Manager for Active Directory and sets the default value for this check box in the other dialogs where it is displayed.

Note

You must reopen the Forest Recovery console after updating the Use Secure Socket Layer (SSL) to encrypt the connection setting for the changes to take effect.

 

E-mail tab

On this tab, you can configure e-mail notification settings. Recovery Manager for Active Directory will use these settings to send notification e-mails about backup creation sessions.

This tab provides the following options:

  • SMTP server. Provides a space for you to specify the SMTP server for outgoing messages.

  • SMTP port. Provides a space for you to specify the port number to connect to on your outgoing mail (SMTP) server.

  • “From” address. Provides a space for you to specify the return address for your e-mail notification messages. It is recommended that you specify the e-mail address of the Recovery Manager for Active Directory administrator.

  • SMTP server requires authentication. When selected, specifies that you must log on to your outgoing mail server.

  • User. Provides a space for you to specify the account name used to log on to the SMTP server.

  • Password. Provides a space for you to specify the user password.

  • Test Settings. Sends a test notification message to the address set in the “From” address text box. Use this button to verify that the specified e-mail notification settings are valid.

For more information, see Using e-mail notification.

 

Unpacked Backups tab (global settings)

On this tab, you can specify some global (or default) settings to automatically unpack backups. By default, these settings will apply to all new Computer Collections.

This tab provides the following options:

  • Unpack each backup upon its creation. Specifies to unpack each backup upon its creation. This option will only apply to those Computer Collections whose properties are configured to use the global settings. In this option, you can specify the number of recent backup creation sessions from which you want to keep unpacked backups for each domain in the Computer Collections.

  • Prompt me to keep backups unpacked by wizards. Specifies that the Online Restore Wizard and the Group Policy Restore Wizard will prompt you to keep unpacked backups. Use the Keep unpacked backups list to specify for how long you want Recovery Manager for Active Directory to keep the backups unpacked by the wizards.

  • Unpacked backups folder. Provides a space for you to specify the path to the folder where you want Recovery Manager for Active Directory to keep unpacked backups. Each unpacked backup will be saved in a separate subfolder. Type the folder path or click Browse to locate and select the folder.

DC selection algorithm that is used to select a DC for unpacking

  1. Only one DC backup per domain is chosen for unpacking for each backup session.

  2. Not Read-Only DCs are selected first.

-OR-

If there are no Not Read-Only DCs in the domain, all the DCs are supposed to be selected.

  1. If several DCs are selected on the Step 2, DC with the Global Catalog role will be selected among them. If there are several DCs with the GC role, it is unpredictable which backup will be selected then.

  2. The chosen backup (one per domain) is unpacked.

If there is limit for unpacked backups and it is exceeded, the specified number of the oldest backups are deleted. If individual settings are specified for a collection, backups for that particular collection are taken into account, otherwise backups of all collections that use the global settings are taken into account when comparing against the specified limit.

For more information on managing unpacked backups, see Unpacking backups.

 

Logging tab

On this tab, you can configure diagnostic logging to write detailed information about the activity of Recovery Manager for Active Directory to log files.

This tab provides the following options:

  • Use diagnostic logging. Select this check box to enable diagnostic logging in Recovery Manager for Active Directory. Diagnostic logging produces a set of log files detailing the activity of Recovery Manager for Active Directory.

Diagnostic logging can be resource intensive, affecting overall server performance and consuming disk space. Therefore, it should only be used temporarily when more detailed information is needed to isolate and resolve possible problems or to monitor the activity of Recovery Manager for Active Directory on your server.

  • Log files location. Specifies the location where to create the log files. The default location is %AllUsersProfile%\Application Data\Quest\Recovery Manager for Active Directory\Logs.

  • Create a new set of log files. Use this list to define how often to create a new set of log files. Each new set of log files is placed in a separate subfolder in the log files location.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating