Veeam 8 - AD Restore step by step - part 1

In these others article I already explained about new Veeam 8 capabilities and AD restore feature:

 Backup - Veeam Explorer for Microsoft Active Directory

 Veeam 8 and relative upgrade from 7 version

 You need to search about VBK Extract and go to

 C:\Program Files\Veeam\Backup

 Considering that DC would be unavailable and DNS too you need to copy this files to proxy target:
  1. Veeam.Backup.Extractor.exe
  2. Extract.exe

you need to launch Veeam.Backup.Extractor.exe and restore Backup to Vmware.
<-----veeam 7="" and="" considerations------="" precedents="" version="">

There is no specific recommendations regarding domain controller backups, just make sure you have application-aware image processing enabled. You may find more information here:http://helpcenter.veeam.com/backup/70/vsphere/application_aware_processing.html
In case of restore, you may encounter the situation when for the first time DC boots in safe mode. It's an expected behavior, however, which is explained here:http://www.veeam.com/kb1277

<-------->

Here they are Applicatioin-aware requirements and original article that explain step by step single object recovery from whom I copied some images:


veeam8recoveradobjects07

veeam8recoveradobjects08

veeam8recoveradobjects13

 About DC virtualization here they are some best practices
Virtualizing Active Directory Six Best Practices for Domain Controllers


Here is the procedure you should follow while restoring multiple DCs into a fresh environment where no other/existing DCs are available: 

 Active Directory and DR Site
<----------->
Veeam uses VSS compliant backups and when restoring a DC it will automatically perform a non-authoritative restore. It's my understanding that, because of this, you don't need to worry about having the domain controls snapshots happen all at the exact same moment.

 <----------->

 http://www.veeam.com/kb_articles.html/kb1277
http://www.veeam.com/kb_articles.html/kb1280

boot the machine up in dsrm ( bcdedit /set safeboot dsrepair )

log in with ds repair mode password .\Administrator

run the bcdedit command to set and remove dsrepair mode ( bcdedit /deletevalue safeboot )

net stop ntfrs

open regedit and

Open Regedit
Browse to the following extension: HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
Add the following dword (32 bit) value: Repl Perform Initial Synchronizations
And leave this set to 0.
http://www.veeam.com/kb_articles.html/kb1280
then

open regedit and expand: hklm\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters\Backup/Restore\Process at Startup
Set the burflags to d2 (sometimes you will have to use d4, but only do this in isolated network or it will overwrite other DC's during replication)
http://www.veeam.com/kb_articles.html/kb1278

reboot

 [from http://forums.veeam.com/vmware-vsphere-f24/restoring-2012-domain-controller-vm-t18629.html]
Posted by
Labels: ,