NetWorker: Active Directory GLR이 이동된 오브젝트의 특성을 복원하지 못함

NMM(NetWorker Module for Microsoft)은 AD(Active Directory) 객체를 백업합니다. 이를 세분화된 수준의 백업 및 복원이라고 합니다.  

이 문제는 NMM이 원래 AD 경로에서 새 경로로 이동된 오브젝트의 특성을 복원하지 못할 때 발생합니다. 

경로는 Active Directory의 DN(Distinguished Name)입니다.  

예:
 

The restore of Active directory attributes of object "CN=UserNameX" is failing. 
The reason is because this object at the time of backup had a DN like
"CN=UsernameX,OU=OU123,OU=Admin,DC=domain,DC=com"

Some time after the backup completes, that same object is moved in AD to new path like
"CN=UsernameX,OU=Decommissioned,DC=domain,DC=com"


Message:
>>>>    the Object does not exist in the Active directory, so its attributes cannot be restored. please try to reanimate it. 


NOTE
Since the object has not been deleted, it is not present in Deleted Items of Active Directory and cannot be reanimated.

NMM Active Directory 세분화된 백업 및 복원 기능 동작과 Active Directory 제한 사항으로 인해 이 문제가 발생합니다.
NMM은 백업된 오브젝트 또는 오브젝트의 속성을 복원할 수 있지만 몇 가지 제한 사항이 있습니다.

 

Tombstone lifetime restriction—When an Active Directory object is deleted, the object is retained in a Deleted Objects
container or tombstone. If you need the deleted object, you should recover the tombstone object instead of creating a new
object because data, such as the Security Identifier (SID) and the Globally Unique Identifier (GUID), are stored with the
tombstone object. This data is critical for additional data recoveries, such as reclaiming assigned group permissions.

Objects in tombstone are deleted when they reach the tombstone lifetime age for the domain. The lifetime age is 180 days for Windows. 
After an object is deleted from the tombstone, it cannot be recovered. This is an Active Directory restriction.
The tombstone lifetime is a configurable attribute of a Windows domain.

Moved or renamed objects—If objects are moved or renamed, but not deleted from Active Directory, 
those objects cannot be restored even if they are successfully backed up. 
Those objects are not stored in the deleted storage database (tombstone) so they cannot be restored.

• Active Directory 객체가 백업된 후에는 Active Directory의 새 경로로 이동하지 마십시오. 이로 인해 복원이 실패합니다.
• Windows 업데이트가 수행되지 않은 경우 가능한 한 빨리 업데이트를 예약하십시오.  여기에는 .Net Framework에 대한 업데이트가 포함됩니다.

• AD의 현재 개체를 원래 위치로 다시 이동합니다.
• 그런 다음 해당 오브젝트의 특성 복원을 테스트합니다.