Avamar Restore Questions (Active Directory)

Question

Hello!

I'm setting up an Active Directory DR strategy and trying to setup/test a non-authoritative/authoritative AD restore scenerio. Backed up VSS System State using the Online Backup strategy in the User Guide (by unchecking the box for disaster recovery), but when I go to restore a DC I can either check all of the system state components or none at all. It won't let me JUST select Active Directory. Does this mean I should just be restoring the whole system state, or is there a way I can select JUST Active Directory?

On a related note, I'm also trying a full server bare metal restore in case of a needed Forest Recovery using the ISO Avamar provided, but am having trouble there as well.

I have a VMware vSphere environment. I build a virtual machine and connect the ISO to the virtual machine's virtual CDROM and boot the machine, but it never boots to the ISO.. Just doesn't see it. I can connect to a windows OS disk and it boots to that just fine. I mounted the ISO on my windows box and it looks like all the files/folders are there. Have you guys seen this before?

The reason I'm doing the above is because in order to do a Forest Recovery Microsoft requires a Full System Restore. According to Avamar this is a backup of everything using the Windows File System plugin as well as the VSS Plugin for System State, correct? Would doing the Bare Metal Restore be any different than building a fresh machine and restoring both of those items manually?

Thank you very much for your support!

Josiah

Leo Li · Accepted Answer

Hi Josiah,I have researched it, but actually I don't know why cannot only select Active Directory for the restore. But, I think this may be consider to ensure system integrity. When perform the type of backup, it backs up the system state(Including Active Directory etc) and already except critical volume data. So, I think when perform the restore, we cannot only restore Active Directory, need to restore all system state related information. At least I think so!

Leo Li · Answer

Hi Josiah, For question1, I suggest you to refer to 'Windows Server 2008 and 2012 Active Directory backup and recovery' section of 'EMC Avamar 6.1 for Windows Server' . Hope it helps.

JosiahE · Answer

Hi Leo,

Thanks for the reply. I did go through the steps in the EMC Avamar 6.1 for Windows Server User Guide. I created a new VSS backup and unchecked the "Create Disaster Recovery Backup" checkbox. This should JUST backup active directory according to the manual, correct?

Once I go to restore this backup, I don't have the option to select only active directory. I can either restore ALL of the system state, or none of it. The individual checkboxes are greyed out.

Also, please let me know if anyone has any insight on the vSphere/Avamar ISO deal.

Thanks!

Josiah

Leo Li · Answer

Hi Josiah, Do you see 'Active Directory restore roadmap' section on the guide? There has been listed detailed steps for Active Directory backup and recovery. Active Directory restore roadmap: To restore Windows Server 2008 or 2012 Active Directory, complete the following tasks. Tasks 1 and 2 are required for both nonauthoritative and authoritative restores: ◆ 'Task 1: Create an online Active Directory backup' on page 126  Comment: This backup may only be used to perform an online restore of the Active Directory state. ◆ 'Task 2: Set up the client for Active Directory restore' on page 128 • 'Option 1: Manually boot into DSRM with System Configuration' on page 128 -or- • 'Option 2: Add a Windows bootloader entry' on page 129 At the completion of Task 2, proceed to the appropriate Task 3 for nonauthoritative or authoritative restore. Do not perform both: ◆ 'Task 3: Restore Active Directory with a nonauthoritative restore' on page 130 -or- ◆ 'Task 3: Restore Active Directory with an authoritative restore' on page 134

JosiahE · Answer

Hi Leo,I did walk through the Active Directory Restore Roadmap:task 1: I created a Dataset with VSS as the Source Data. No exclusions. I went to options and UNchecked the box for 'Create Disaster Recovery Backup'.Then I created a group and added the client to this group, and enabled the group.The backup was successful, but when I go to Backup and Restore -> Select the client -> Select For Restore -> browse through System State, to BootableSystemState, I can't select JUST active directory. I either have to select the ENTIRE 'BootableSystemState' directory (which selects all System State items) or select NONE at all.Here is what happens when I try selecting 'Active Directory'. I simply can't select the check box:But it WILL let me select ALL of the items:My question is, why can't I just select Active Directory for the restore as the manual specifies I should??

JosiahE · Answer

Understood. Thanks for your help!

null01 · Answer

There is actually a client side hotfix for this issue. It replaces avtar.exe and avvss.exe on the client. Ask support about Hotfix 6_1_101-87_HF49095.

The hotfix allows for Active Directory *only* restores. It also seems to help the backup run a bit faster as well.

Just FYI.

-jcs

J_H_ · Answer

in reading through this now I have a couple of questions on it.

1) Clear the Create Disaster Recovery Backup checkbox as shown in the following

figure. Clearing this checkbox specifies that the backup created can only be used

for online restore:

what does that really mean... "online restore".

I look at my normal backup of my DC and I see system state and I see that I can restore only Active Directory.

but I never did any special backup and "unchecked" that box.

so what is the difference in doing this "special" backup that is stated in the manual, and a normal backup + vss backup?

avmaint · Answer

We are on 7.1.x of Avamar environment, did anyone work with EMC and obtain this hotfix for latest releases?

ionthegeek · Answer

This change was incorporated into the Avamar 7.0 branch in bug 49116. No hotfix is required for 7.1.

avmaint · Answer

Ian, sorry that I was not clear by 'hotfix' Can we restore just AD from system state, as mentioned in hotfix for 6.1.x? I dont see that option in 7.1.x !

123kateb · Answer

Hi @ionthegeek is there any current information/documentation on Active Directory backups/restores, thank you!

ionthegeek · Answer

Active Directory restore requires a non-DR System State backup. There is a checkbox in the dataset options for the VSS System State plugin that controls whether the backup will be created as a DR or non-DR backup.

The Active Directory restore procedure can be found in the Avamar for Windows Servers User Guide under "Disaster Recovery > Active Directory restore".

Avamar

Avamar Restore Questions (Active Directory)

Was this post helpful?