Dell Recovery Manager for Active Directory 8.6.0

Transcription

1 Dell Recovery Manager for Active Directory April, 2014 These release notes provide information about the Recovery Manager for Active Directory release. About Recovery Manager for Active Directory New features Enhancements Resolved issues Known issues System requirements Product licensing Getting started with Recovery Manager for Active Directory About Dell About Recovery Manager for Active Directory Recovery Manager for Active Directory enables fast, online recovery. Comparison reports highlight what objects and attributes have been changed and deleted in Active Directory enabling efficient, focused recovery at the object or attribute level. Accurate backups and a quicker recovery enable you to reduce the time and costs associated with AD outages and reduce the impact on users throughout your organization. Recovery Manager for Active Directory is based on patented technology. Recovery Manager for Active Directory is a minor release, with enhanced features and functionality. See New features and Enhancements. 1

2 New features New features in Recovery Manager for Active Directory 8.6.0: Rebranded to Dell. This product was rebranded as Dell Recovery Manager for Active Directory. German language support. When Recovery Manager for Active Directory is installed on a computer running a German-language version of the Windows operating system, the user interface and online help are displayed in the German language. Product documentation is also provided in German and available from the installation media. Support for Windows 8.1 and Windows Server 2012 R2. You can install this release on computers running Windows 8.1 or Windows Server 2012 R2. Also you can use domain controllers running Windows Server 2012 R2 as targets for backup and restore operations. For detailed information about Windows 8.1 and Windows Server 2012 R2 support, see System requirements. See also: Enhancements Resolved issues Enhancements The following is a list of enhancements implemented in Recovery Manager for Active Directory Enhancement: Now Recovery Manager for Active Directory uses FIPS 140 compliant encryption algorithms to protect its data. Resolved issues The following is a list of issues addressed in this release. Recovery Manager for Active Directory Recovery Manager Portal Recovery Manager for Active Directory Fixed: You may receive the following uninformative error message in a situation where backup creation fails because there is not enough disk space available: Unable to receive request data Fixed: Your attempt to view a comparison report in the Online Restore Wizard may fail with the error Unable to start reports viewer application. Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding. This issue only occurs if you compare a significant number ( ) of objects Fixed: When you use the Group Policy Restore Wizard to view a report on a Group Policy object, the wizard may display incorrect information about the object's state. For example, if the Group Policy object has not changed since the time of backup, the wizard may erroneously state that the object has changed. Also, if the Group Policy object has actually changed, the wizard may state that the object's state has not changed. 2

3 Fixed: Unexpected behavior on the Group Policy Object Selection page in the Group Policy Restore Wizard: If you click the Compare button two or more times in a row, each time the compare operation result may be different Fixed: You may encounter the following uninformative error message in the Password and SIDHistory Recoverability tool: An exception occurred: Current security context is not associated with an Active Directory domain or forest. Stack trace: <Details> Fixed: Unexpected behavior: Recovery Manager for Active Directory may allow an administrator of a child domain to restore data in the parent domain Fixed: Unexpected behavior when you attempt to recover objects in the Deleted Objects container provided by Recovery Manager: The wizard that helps you recover the objects only allows you to select backups created for the domain controller through which Recovery Manager connected to the forest for the first time, although there are backups created for other domain controllers in the forest Fixed: The Recovery Manager Console may become unusable after you repair the Recovery Manager for Active Directory installation. Your attempt to open the Recovery Manager Console in this situation may fail with the error Input string was not in correct format Fixed: You may encounter the following error while using the Online Restore Wizard: Failed to connect to the extracted database. Active Directory Schema is corrupted. This issue occurs after you raise the domain functional level to Windows Server 2012 R2, back up a domain controller in the domain, and then try to use the created backup in the Online Restore Wizard Fixed: The Setup Wizard may crash while you are trying to uninstall the Reports feature of Recovery Manager for Active Directory. This issue only occurs if while installing Recovery Manager, you selected the SQL Server authentication option in the Setup Wizard. Recovery Manager Portal Fixed: Unexpected behavior on the Recovery and access options page: The Specified credentials option may not show currently used access credentials Fixed: Unexpected behavior on the Monitoring tab in the Recovery Manager Portal: Operation duration shown for a domain controller in the backup creation history actually shows operation duration for the entire Computer Collection to which the domain controller belongs Fixed: Selecting the Grant restore rights to all domain admins check box on the Recovery and access options page may have no effect. For example, an account that is appointed domain administrator after this check box is selected may not receive restore rights Fixed: An issue on the Specify access credentials page of the wizard that helps you configure the Recovery Manager Portal for first time use: If you enter incorrect user name or password, the wizard displays an uninformative error failing to clearly state that you should supply the correct credentials. 3

4 Known issues The following is a list of issues, including those attributed to third-party products, known to exist at the time of release. Recovery Manager for Active Directory Recovery Manager Portal Recovery Manager for Active Directory Unexpected behavior when you upgrade operating system on the domain controller that has the Backup Agent installed from Windows Server 2003 to Windows Server 2008: After the upgrade, the Backup Agent may not work properly. Reinstall the Backup Agent on the domain controller You may encounter the following unexpected behavior on the Backup Data Preparation step of the Online Restore Wizard: The wizard may not respond to any user action while it is processing a backup. Wait until the backup processing is finished Unexpected behavior on the Select an action step in the Restore Wizard for Deleted Objects: If you select both the Restore objects from the selected backup option and the Show backups that include previous versions of the selected objects check box, the list of available backups may remain empty, although backups that include the selected object do exist. This behavior indicates that the object is missing from the backups of the currently selected domain controller, and you need to select another domain controller whose backups include the object. To select another domain controller: 1. In the Recovery Manager Console, expand the Active Directory node, then expand the appropriate forest node. 2. Expand the Domains node. 3. Right-click the node representing the appropriate domain, and then click Connect to Domain Controller command. 4. Specify the domain controller whose backups include the object you want to restore. 5. Run the Restore Wizard for Deleted Objects to restore the object you want When you select the Backup Agent Management node in the Recovery Manager Console, you may observe the following issue: The Recovery Manager Console stops responding, showing the status Discovering Backup Agent instances, please wait.... Wait until the Backup Agent discovery completes Unexpected behavior on the Reporting Options step in the Online Restore Wizard: When you select the Include ChangeAuditor data in reports check box, select a ChangeAuditor database, and click Next, you may encounter the error Unable to connect to the ChangeAuditor database: <database>. Details: Login failed for user '<current user>'. This error shows up if the current user account does not have sufficient permissions to access the ChangeAuditor database. The expected behavior in the described situation is that the Online Restore Wizard should prompt you for credentials to access the ChangeAuditor database. Run the Online Restore Wizard under an account that has sufficient permissions to access the target ChangeAuditor database. 4

5 You may encounter the following unexpected behavior while using the Backup Agent Management view in the Recovery Manager Console to view a list of Backup Agents: The list of Backup Agents may be incomplete. The cause of this behavior is that when you apply a filter on one or more columns in the Backup Agent Management view, there is no indication that the filter is applied. Check to see if a filter is applied on any columns in the Backup Agent Management view. Remove the filter if necessary While using the Online Restore Wizard on a Windows XP-based computer, on the Backup Data Preparation step, you may encounter the following error message that incorrectly describes the issue: Error occurred while opening database. Details: Invalid API Parameter. In fact, this error message may indicate that the required DLL files are missing from the Recovery Manager for Active Directory computer. Make sure you copy the required DLL files to the Recovery Manager for Active Directory computer. For instructions, see the Preparing for Working with Active Directory or AD LDS (ADAM) Backups section in the User Guide Agent-based restore may fail with the error Failed to create a remote object. The RPC server is unavailable. if the target domain controller is running Windows Server This issue only occurs if Windows Firewall is enabled on the target domain controller. Manually configure Windows Firewall on the domain controller to allow traffic on the required communication ports. For more information about these ports, see the Deployment Guide supplied with this release The Recovery Manager Console may crash upon its start. CAUTION: Incorrectly editing the registry may severely damage your system. Before making changes to the registry, you should back up any valued data on the computer. 1. On the Recovery Manager for Active Directory computer, modify the SoftLicense value name in the HKLM\SOFTWARE\Wow6432Node\Quest Software registry key. You can assign any new name to the value. 2. Start the Recovery Manager Console, and then install your license key file as described in the User Guide A compare operation performed in the Online Restore Wizard may take a significant time to complete (30+ minutes). Also, the compare operation may consume a significant amount of RAM. This issue only occurs if the number of objects being compared is 100,000+. Wait for the compare operation to complete. Recovery Manager Portal Unexpected behavior when you use the Recovery Manager Portal to delegate restore or undelete permissions to a user or group that is not assigned any role in the Recovery Manager Portal: The delegation operation completes successfully. The expected behavior in this situation is that the Recovery Manager Portal should not allow you to delegate permissions to a user or group that has not been assigned any role in the portal. Before delegating restore or undelete permissions, ensure that the target user or group is assigned the appropriate role in the Recovery Manager Portal. For more information about assigning roles to portal users, see the Using Recovery Manager Portal chapter in the User Guide. 5

6 The Recovery Manager Portal uninstallation may fail if Microsoft.NET Framework 4.5 is not installed on the Recovery Manager Portal computer. 1. Install Microsoft.NET Framework Uninstall the Recovery Manager Portal. 3. Uninstall Microsoft.NET Framework Unexpected result when you uninstall the Recovery Manager Portal: The database used by the portal may not be deleted from the corresponding SQL Server. To delete the portal database, use the native Microsoft SQL Server tools (such as SQL Server Management Studio) The Recovery Manager Portal fails to show the result of a restore or undelete operation if while the restore or undelete is still running you switch to some other tab, and then return to the Recovery tab. To ensure that all objects have been successfully restored or undeleted: 1. On the Recovery tab, click the button with the name of the operation you have just performed. 2. See the Objects to restore or Objects to undelete list. This list contains the objects whose restore has failed When selecting a backup the Recovery Manager Portal, you may encounter the error No backup found for the last backup session. This issue occurs if the backup is located on the domain controller and in the Recovery Manager Console its storage location is specified using a UNC path. Select a backup stored locally on the Recovery Manager for Active Directory computer. System requirements Before installing Recovery Manager for Active Directory 8.6.0, ensure that your system meets the following minimum system requirements. In this section: Recovery Manager for Active Directory Recovery Manager Portal Password and SIDHistory Recoverability Tool Upgrade and compatibility 6

7 Recovery Manager for Active Directory Table 1. Recovery Manager for Active Directory system requirements Requirement Processor Memory (overall RAM) Hard disk space Monitor Details Minimum: 1.4 GHz Recommended: 2.0 GHz or faster Minimum: 1 GB Recommended: 2 GB These figures apply only if the Active Directory domains managed by Recovery Manager for Active Directory include 1 million objects or less. Increase RAM size by 512 MB for every additional 1 million objects. x86 system Full installation including the prerequisite software: 1.5 GB of free disk space In case all the prerequisite software is already installed: 200 MB of free disk space x64 system Full installation including the prerequisite software: 2.7 GB of free disk space In case all the prerequisite software is already installed: 210 MB of free disk space NOTE: Additional storage space is required for a backup repository, at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40 MB for the transaction log files. SVGA at 1024 x 768 or higher 7

8 Table 1. Recovery Manager for Active Directory system requirements Requirement Operating system Microsoft.NET Framework Details Installation Microsoft Windows Server 2012 R2 with or without any Service Pack Microsoft Windows Server 2012 with or without any Service Pack Microsoft Windows Server 2008 R2 without Service Pack or with Service Pack 1 Microsoft Windows Server 2008 with Service Pack 1 or Service Pack 2 Microsoft Windows Server 2003 R2 with Service Pack 2 Microsoft Windows Server 2003 with Service Pack 2 Microsoft Windows 8.1 with or without any Service Pack Microsoft Windows 8 with or without any Service Pack Microsoft Windows 7 without Service Pack or with Service Pack 1 Microsoft Windows Vista with Service Pack 2 Microsoft Windows XP with Service Pack 3 When installed on a Windows XP-, Windows Server 2003-, or Windows Server 2003 R2-based computer, Recovery Manager for Active Directory does not support working with the following: Domain controllers or AD LDS (ADAM) hosts running Windows Server 2012 or 2012 R2 AD LDS (ADAM) hosts running Windows 8 or 8.1 Targets for backup, restore, or compare operations Microsoft Windows Server 2012 R2 with or without any Service Pack (including Server Core installation) Microsoft Windows Server 2012 with or without any Service Pack (including Server Core installation) Microsoft Windows Server 2008 R2 without Service Pack or with Service Pack 1 (including Server Core installation) Microsoft Windows Server 2008 with Service Pack 1 or Service Pack 2 (including Server Core installation) Microsoft Windows Server 2003 R2 without Service Pack or with Service Pack 2 Microsoft Windows Server 2003 without Service Pack or with Service Pack 1 or Service Pack 2 Your computer must have all of the following versions installed: Microsoft.NET Framework version 4.0 Microsoft.NET Framework version 3.5 SP1 8

9 Table 1. Recovery Manager for Active Directory system requirements Requirement Microsoft SQL Server and its Microsoft SQL Server versions components Microsoft SQL Server 2012 with or without any Service Pack (Enterprise, Business Intelligence, Standard, Express, Web, or Developer Edition) Microsoft SQL Server 2008 R2 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition) Microsoft SQL Server 2008 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition) Microsoft SQL Server 2005 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, or Developer Edition) Microsoft SQL Server components Microsoft System CLR Types for SQL Server 2012 Microsoft SQL Server 2012 Transact-SQL ScriptDom Microsoft SQL Server 2012 Data-Tier Application Framework Microsoft SQL Server Reporting Services To display reports, Recovery Manager for Active Directory can integrate with Microsoft SQL Server Reporting Services Microsoft Windows PowerShell Microsoft Windows PowerShell version 4.0, 3.0, or 2.0 Microsoft Windows Installer Microsoft Windows Installer 4.5 Microsoft Management Console Microsoft Management Console 3.0 Integration with ChangeAuditor for Active Directory Details To provide information on who modified particular Active Directory objects, Recovery Manager for Active Directory can integrate with the following versions of ChangeAuditor for Active Directory: 5.6, 5.5, 5.1, 5.0, 4.9, 4.8, 4.7, 4.6, and 4.5 If any prerequisite software is not installed, the Setup program automatically installs it for you before installing Recovery Manager for Active Directory. If the prerequisite software to be installed is not included in this release package, it is automatically downloaded. 9

10 Recovery Manager Portal Table 2. Recovery Manager Portal system requirements Requirement Details Processor 1 GHz or faster Memory (overall RAM) 512 MB or more Hard disk space x86 system: 850 MB or more x64 system: 2 GB or more Monitor SVGA at 1024 x 768 or higher Operating system You can install the Recovery Manager Portal on a computer running one of the following operating systems (both x86 and x64 platforms are supported): Microsoft Windows Server 2012 R2 with or without any Service Pack Microsoft Windows Server 2012 with or without any Service Pack Microsoft Windows Server 2008 R2 with Service Pack 1 or later Microsoft Windows Server 2008 with Service Pack 2 or later Web browser To access the Recovery Manager Portal, you can use Microsoft Internet Explorer 10, 9, or 8. Microsoft.NET Framework Microsoft.NET Framework version 4.5 Microsoft Internet Information Microsoft Internet Information Services (IIS) 8.0, 7.5, or 7.0. Server (IIS) Microsoft SQL Server and its Microsoft SQL Server versions components One of the following versions is required: Microsoft SQL Server 2012 with or without any Service Pack (Enterprise, Business Intelligence, Standard, Express, Web, or Developer Edition ) Microsoft SQL Server 2008 R2 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition) Microsoft SQL Server 2008 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition) Required Microsoft SQL Server components All of the following components are required: Microsoft System CLR Types for SQL Server 2012 Microsoft SQL Server 2012 Transact-SQL ScriptDom Microsoft SQL Server 2012 Data-Tier Application Framework Password and SIDHistory Recoverability Tool You can only use the Password and SIDHistory Recoverability Tool if Microsoft's Active Directory Recycle Bin is not enabled in your environment. Upgrade and compatibility Recovery Manager for Active Directory version is upgradeable from version or later. 10

11 Product licensing The Recovery Manager for Active Directory license key file specifies the licensed number of user accounts in the Active Directory domains protected with the product. If the actual number of user accounts exceeds the licensed number, Recovery Manager for Active Directory does not stop functioning but displays a warning message each time you back up data. In this case, you need to purchase and install a new license key file allowing you to back up a greater number of user accounts or revoke licenses from the domains whose backups you no longer need. To view information about and manage the installed license key file, you can use the License tab in the About dialog box: in the Recovery Manager Console, right-click the Recovery Manager for Active Directory console tree root, and then click About. In this section: Installing license key file Updating license key file Revoking licenses Installing license key file You need to supply a valid license key file when installing Recovery Manager for Active Directory. To install a license key file 1 In the Setup Wizard, on the User Information page, click Licenses to display the License Status dialog box. 2 Click Browse License, locate and open the license key file using the Open dialog box, and then click Close. Updating license key file If you have purchased a new license key file, use the Recovery Manager Console to update the license key file. To update the license key file 1 In the Recovery Manager Console, right-click the Recovery Manager for Active Directory console tree root, and then click About. 2 In the About dialog box, click the License tab, and then click Install License. 3 In the Update License dialog box, enter the path and name of the license key file, and then click OK. 11

12 Revoking licenses When the actual number of user accounts exceeds the licensed number, Recovery Manager for Active Directory returns a warning message each time you back up data. In this case, you can revoke licenses from the domains whose backups you no longer need. The revoked licenses are returned to the pool of available licenses and you can allocate them to a different domain. CAUTION: When you revoke licenses from a domain, all backups created by Recovery Manager for Active Directory for that domain get deleted. You should only revoke licenses from a domain if you no longer need backups created for that domain. To revoke licenses from a domain 1 In the console tree, right-click the root node, and then click About. 2 In the About dialog box, click the License tab. 3 On the License tab, select the domain from the License Usage list, and then click Revoke. 4 In the confirmation message box, click Yes. Getting started with Recovery Manager for Active Directory Upgrade and installation instructions Additional resources Upgrade and installation instructions To upgrade, install Recovery Manager for Active Directory on the computer where an upgradeable product version is installed. During the upgrade process, setup transfers the product configuration to the new installation of Recovery Manager for Active Directory. For your scheduled backup tasks to work properly after the upgrade, install the new version of Recovery Manager for Active Directory to the folder where the earlier version is installed. This assures seamless operation of all backup creation tasks scheduled in the earlier version. If you install the new version of Recovery Manager for Active Directory to a different folder, the backup creation tasks will still refer to the old installation folder. In this case, you will need to re-configure the tasks using Windows Task Scheduler. Recovery Manager for Active Directory is incompatible with pre versions of Backup Agent. Manually upgrade Backup Agent to version or later on every domain controller where an earlier version of Backup Agent is preinstalled. Additional resources The Recovery Manager Community offers easy access to information and is a collaborative site where IT pros can ask questions and get answers. Interact with industry experts and your peers. Engage in discussions, browse through content, and more. So, make yourself at home: en.community.dell.com/techcenter/windows-management/f/4807.aspx 12

13 Globalization This section contains information about installing and operating this product in non-english configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation. This release is Unicode-enabled and supports any character set. In this release, all product components should be configured to use the same or compatible character encodings and should be installed to use the same locale and regional options. This release is targeted to support operations in the following regions: North America, Western Europe and Latin America, Central and Eastern Europe, Far-East Asia, Japan. The release is localized to the following languages: German. About Dell Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information, visit Contacting Dell Technical support: Online support Product questions and sales: (800) Technical support resources Technical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions. To access the Support Portal, go to The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the portal provides direct access to product support engineers through an online Service Request system. The site enables you to: Create, update, and manage Service Requests (cases) View Knowledge Base articles Obtain product notifications Download software. For trial software, go to Trial Downloads. View how-to videos Engage in community discussions Chat with a support engineer 13

14 2014 Dell Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Dell Inc. The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document. If you have any questions regarding your potential use of this material, contact: Dell Inc. Attn: LEGAL Dept 5 Polaris Way Aliso Viejo, CA Refer to our web site (software.dell.com) for regional and international office information. Patents This product is protected by U.S. Patent 8,234,253. Additional patents pending. Trademarks Dell, the Dell logo, and ChangeAuditor are trademarks of Dell Inc. and/or its affiliates. Adobe, Adobe Illustrator, Adobe Photoshop, Adobe Streamline and TypeAlign are trademarks of Adobe Systems Incorporated which may be registered in certain jurisdictions. Microsoft, Active Directory, Internet Explorer, SQL Server, Windows, Windows PowerShell, Windows Server, and Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others. Legend CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death. IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information. 14