Veeam 8 recovering AD objects with Veeam Explorer

veeam8recoveradobjects01

Recovering deleted AD objects in an easy way and just in few seconds is now possible with the new Veeam Explorer for Active Directory.

Accidentally deleted objects from the directory need a tricky procedure to be recovered from backup or Active Directory Recycle Bin if enabled. Procedure that often takes time to complete leaving the deleted object unavailable to the network. Using Veeam Explorer everything is now simpler and very quick.

 

Prerequisites

Veeam Explorer supports AD database files (.dit) created with the following Domain Controllers:

  • Microsoft Windows Server 2012, 2012 R2, 2008, 2008 R2, 2003 SP2.
  • Minimum supported domain and forest functional level is Windows 2003.

The following permissions must be granted to the account used for connection with target Domain Controller:

Administrative rights for target Active Directory.

 

Procedure

To create the scenario where Veeam Explorer can play its role, we’re going to delete some Active Directory objects using the tool Active Directory users and Computers.

Navigate to the OU to test.

veeam8recoveradobjects02

Select some objects (i.e. users) to delete, right click and select Delete option.

veeam8recoveradobjects03

Click Yes to confirm the deletion.

veeam8recoveradobjects04

The selected accounts have been deleted from Active Directory.

veeam8recoveradobjects05

The deleted user is no longer able to login because the account doesn’t exist in AD anymore.

veeam8recoveradobjects06

 

Restore deleted objects

To restore successfully the deleted objects, we should have a reliable backup configured for application-aware processing (VSS) to guarantee the AD database consistency.

The use of VSS feature is enabled in the backup job configuration.

veeam8recoveradobjects07

Open Veeam Backup and Replication 8, navigate to Backup & Replication section and select the Backups > Disk items. Expand the Job name containing the Domain Controller backup and right click the computer object.

Select Restore application items > Microsoft Active Directory objects options.

veeam8recoveradobjects08

The Microsoft Active Directory Object Restore window opens showing the available restore points. Select the backup to use to restore the deleted object then click Next.

veeam8recoveradobjects09

Optionally enter the Restore reason for the future reference then click Next.

veeam8recoveradobjects10

Click Finish to exit the wizard and open Veeam Explorer for Active Directory.

veeam8recoveradobjects11

Veeam Explorer for Microsoft Active Directory opens and automatically mount the database from the selected Domain Controller backup.

veeam8recoveradobjects12

Navigate to the same OU where the objects were deleted. Click Compare with Production button to identifying the deleted accounts through their Status marked as Tombstone. A Tombstone is an object deleted from the directory but not yet removed from the database.

veeam8recoveradobjects13

Select the objects to restore, right click and select the Restore to domain where domain identify your local domain name (i.e. nolabnoparty.local).

veeam8recoveradobjects14

Veeam Explorer starts the restore process.

veeam8recoveradobjects15

When completed, a Restore summary is shown. Click OK to close.

veeam8recoveradobjects16

Recovered objects are no longer marked as Tombstone in the Status column.

veeam8recoveradobjects17

Open Active Directory users and Computers tool and select Action > Refresh menu.

veeam8recoveradobjects18

The previously deleted objects have been successfully restored and listed in the pane.

veeam8recoveradobjects19

The restored user is now able to login again.

veeam8recoveradobjects20

With Veeam Explorer, the restore process takes seconds and the functionality of the recovered object is immediate.

firma