NetWorker：Active Directory GLR 無法還原已移動物件的屬性

適用於 Microsoft 的 NetWorker 模組 （NMM） 會備份 Active Directory （AD） 物件。這稱為粒度級別的備份和還原。  

當 NMM 無法還原從原始 AD 路徑移動到新路徑的物件屬性時，就會發生此問題。 

路徑為 Active Directory 中的辨別名稱 （DN）。  

例如：
 

The restore of Active directory attributes of object "CN=UserNameX" is failing. 
The reason is because this object at the time of backup had a DN like
"CN=UsernameX,OU=OU123,OU=Admin,DC=domain,DC=com"

Some time after the backup completes, that same object is moved in AD to new path like
"CN=UsernameX,OU=Decommissioned,DC=domain,DC=com"


Message:
>>>>    the Object does not exist in the Active directory, so its attributes cannot be restored. please try to reanimate it. 


NOTE
Since the object has not been deleted, it is not present in Deleted Items of Active Directory and cannot be reanimated.

NMM Active Directory 精細備份與還原功能行為和 Active Directory 限制會導致發生此問題。
NMM 可以還原已備份的物件或物件的屬性，但存在一些限制。

 

Tombstone lifetime restriction—When an Active Directory object is deleted, the object is retained in a Deleted Objects
container or tombstone. If you need the deleted object, you should recover the tombstone object instead of creating a new
object because data, such as the Security Identifier (SID) and the Globally Unique Identifier (GUID), are stored with the
tombstone object. This data is critical for additional data recoveries, such as reclaiming assigned group permissions.

Objects in tombstone are deleted when they reach the tombstone lifetime age for the domain. The lifetime age is 180 days for Windows. 
After an object is deleted from the tombstone, it cannot be recovered. This is an Active Directory restriction.
The tombstone lifetime is a configurable attribute of a Windows domain.

Moved or renamed objects—If objects are moved or renamed, but not deleted from Active Directory, 
those objects cannot be restored even if they are successfully backed up. 
Those objects are not stored in the deleted storage database (tombstone) so they cannot be restored.

• 備份 Active Directory 物件後，請勿將該物件移至 Active Directory 中的新路徑。這會導致還原失敗。
• 如果尚未執行 Windows 更新，請儘快排程更新。  這包括 .Net Framework 的更新。

• 將AD中的當前物件移回原始位置。
• 然後測試該物件屬性的還原。