{"id":11124,"date":"2014-11-25T09:10:00","date_gmt":"2014-11-25T08:10:00","guid":{"rendered":"http:\/\/nolabnoparty.com\/?p=11124"},"modified":"2020-03-15T18:11:05","modified_gmt":"2020-03-15T17:11:05","slug":"veeam-8-recovering-ad-objects-veeam-explorer","status":"publish","type":"post","link":"https:\/\/nolabnoparty.com\/en\/veeam-8-recovering-ad-objects-veeam-explorer\/","title":{"rendered":"Veeam 8 recovering AD objects with Veeam Explorer"},"content":{"rendered":"

\"veeam8recoveradobjects01\"<\/p>\n

Recovering deleted AD objects in an easy way and just in few seconds is now possible with the new Veeam Explorer for Active Directory.<\/p>\n

Accidentally deleted objects from the directory need a tricky procedure to be recovered from backup or Active Directory Recycle Bin<\/strong> if enabled. Procedure that often takes time to complete leaving the deleted object unavailable to the network. Using Veeam Explorer everything is now simpler and very quick<\/strong>.<\/p>\n

<\/p>\n

 <\/p>\n

Prerequisites<\/h2>\n

Veeam Explorer supports AD database files (.dit<\/strong>) created with the following Domain Controllers:<\/p>\n

    \n
  • Microsoft Windows Server<\/strong> 2012, 2012 R2, 2008, 2008 R2, 2003 SP2.<\/li>\n
  • Minimum supported domain and forest functional level<\/strong> is Windows 2003.<\/li>\n<\/ul>\n

    The following permissions must be granted<\/strong> to the account used for connection with target Domain Controller:<\/p>\n

    \u2022 Administrative<\/strong> rights for target Active Directory.<\/p>\n

     <\/p>\n

    Procedure<\/h2>\n

    To create the scenario where Veeam Explorer can play its role, we're going to delete some Active Directory objects using the tool Active Directory users and Computers<\/strong>.<\/p>\n

    Navigate to the OU to test.<\/p>\n

    \"veeam8recoveradobjects02\"<\/p>\n

    Select some objects (i.e. users) to delete, right click and select Delete<\/strong> option.<\/p>\n

    \"veeam8recoveradobjects03\"<\/p>\n

    Click Yes<\/strong> to confirm the deletion.<\/p>\n

    \"veeam8recoveradobjects04\"<\/p>\n

    The selected accounts have been deleted from Active Directory<\/strong>.<\/p>\n

    \"veeam8recoveradobjects05\"<\/p>\n

    The deleted user is no longer able to login<\/strong> because the account doesn't exist in AD anymore.<\/p>\n

    \"veeam8recoveradobjects06\"<\/p>\n

     <\/p>\n

    Restore deleted objects<\/h2>\n

    To restore successfully the deleted objects, we should have a reliable backup configured for application-aware processing<\/strong> (VSS) to guarantee the AD database consistency.<\/p>\n

    The use of VSS feature is enabled in the backup job<\/strong> configuration.<\/p>\n

    \"veeam8recoveradobjects07\"<\/p>\n

    Open Veeam Backup and Replication 8, navigate to Backup & Replication<\/strong> section and select the Backups > Disk<\/strong> items. Expand the Job name<\/strong> containing the Domain Controller backup and right click the computer object.<\/p>\n

    Select Restore application items > Microsoft Active Directory objects<\/strong> options.<\/p>\n

    \"veeam8recoveradobjects08\"<\/p>\n

    The Microsoft Active Directory Object Restore<\/strong> window opens showing the available restore points. Select the backup to use to restore the deleted object then click Next<\/strong>.<\/p>\n

    \"veeam8recoveradobjects09\"<\/p>\n

    Optionally enter the Restore reason<\/strong> for the future reference then click Next<\/strong>.<\/p>\n

    \"veeam8recoveradobjects10\"<\/p>\n

    Click Finish<\/strong> to exit the wizard and open Veeam Explorer for Active Directory<\/strong>.<\/p>\n

    \"veeam8recoveradobjects11\"<\/p>\n

    Veeam Explorer for Microsoft Active Directory opens and automatically mount the database<\/strong> from the selected Domain Controller backup.<\/p>\n

    \"veeam8recoveradobjects12\"<\/p>\n

    Navigate to the same OU where the objects were deleted<\/strong>. Click Compare with Production<\/strong> button to identifying the deleted accounts through their Status<\/strong> marked as Tombstone<\/strong>. A Tombstone is an object deleted from the directory but not yet removed from the database.<\/p>\n

    \"veeam8recoveradobjects13\"<\/p>\n

    Select the objects to restore, right click and select the Restore to domain <\/strong>where domain identify your local domain name (i.e. nolabnoparty.local<\/em>).<\/p>\n

    \"veeam8recoveradobjects14\"<\/p>\n

    Veeam Explorer starts the restore process.<\/p>\n

    \"veeam8recoveradobjects15\"<\/p>\n

    When completed, a Restore summary<\/strong> is shown. Click OK<\/strong> to close.<\/p>\n

    \"veeam8recoveradobjects16\"<\/p>\n

    Recovered objects are no longer marked as Tombstone in the Status<\/strong> column.<\/p>\n

    \"veeam8recoveradobjects17\"<\/p>\n

    Open Active Directory users and Computers<\/strong> tool and select Action > Refresh<\/strong> menu.<\/p>\n

    \"veeam8recoveradobjects18\"<\/p>\n

    The previously deleted objects have been successfully restored<\/strong>\u00a0and\u00a0listed in the pane.<\/p>\n

    \"veeam8recoveradobjects19\"<\/p>\n

    The restored user is now able to login again.<\/p>\n

    \"veeam8recoveradobjects20\"<\/p>\n

    With Veeam Explorer, the restore process takes seconds<\/strong> and the functionality of the recovered object is immediate.<\/p>\n

    \"firma\"<\/p>\n","protected":false},"excerpt":{"rendered":"

    Recovering deleted AD objects in an easy way and just in few seconds is now possible with the new Veeam Explorer for Active Directory. Accidentally deleted objects from the directory need a tricky procedure to be recovered from backup or Active Directory Recycle Bin if enabled. Procedure that often takes time to complete leaving the deleted object unavailable to the network. Using Veeam Explorer everything is now simpler and very quick.<\/p>\n","protected":false},"author":3,"featured_media":11104,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":{"linkedin_93tdZWzMZc_93tdZWzMZc":"","facebook_2879994398731222_17841400390232720":"","twitter_113568041_113568041":"","mastodon_115463926174894442_115463926174894442":""},"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[2138,933,903],"tags":[688,936,1418],"class_list":["post-11124","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-backup-en","category-veeam-en","category-vmware-en","tag-active-directory-en","tag-restore-en","tag-veeam-explorer-en","has_thumb"],"_links":{"self":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/11124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/comments?post=11124"}],"version-history":[{"count":0,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/posts\/11124\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media\/11104"}],"wp:attachment":[{"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/media?parent=11124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/categories?post=11124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nolabnoparty.com\/en\/wp-json\/wp\/v2\/tags?post=11124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}