How To Recover A Computer From Disaster

LiveVault Disaster Recovery Guide Version 7.60 Document Revision 0 25 June 2012

Copyright Notice Notice This documentation is a proprietary product of Autonomy and is protected by copyright laws and international treaty. Information in this documentation is subject to change without notice and does not represent a commitment on the part of Autonomy. While reasonable efforts have been made to ensure the accuracy of the information contained herein, Autonomy assumes no liability for errors or omissions. No liability is assumed for direct, incidental, or consequential damages resulting from the use of the information contained in this documentation. The copyrighted software that accompanies this documentation is licensed to the End User for use only in strict accordance with the End User License Agreement, which the Licensee should read carefully before commencing use of the software. No part of this publication may be reproduced, transmitted, stored in a retrieval system, nor translated into any human or computer language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise, without the prior written permission of the copyright owner. This documentation may use fictitious names for purposes of demonstration; references to actual persons, companies, or organizations are strictly coincidental. Trademarks and Copyrights Copyright 2012 Autonomy Corporation plc and all its affiliates. All rights reserved. Audit Center, Autonomy Consolidated Archive, Autonomy Express Search, Autonomy imanage ConflictsManager, Autonomy imanage RecordsManager, Autonomy Interaction Control Element (ICE), Autonomy Message Manager, Autonomy Notification Server, Autonomy Records Manager, Autonomy Windows Extension, Connected Backup, DeskSite, Digital Safe, Digital Supervisor, EAS On-Demand, EAS, Enterprise Archive Solution, FileShare, FileSite, imanage WorkSite MP, imanage WorkSite, imanage, Introspect, LiveVault, Meridio, OffSite, Scrittura, WorkDocs, WorkPortal, WorkRoute, WorkSite MP, WorkSite, WorkTeam, Zantaz, and all related titles and logos are trademarks of Autonomy Corporation plc and its affiliates. Microsoft is a registered trademark, and MS-DOS, Windows, Windows 95, Windows NT, SharePoint, and other Microsoft products referenced herein are trademarks of Microsoft Corporation. UNIX is a registered trademark of The Open Group. AvantGo is a trademark of AvantGo, Inc. Epicentric Foundation Server is a trademark of Epicentric, Inc. Documentum and eroom are trademarks of Documentum, a division of EMC Corp. FileNet is a trademark of FileNet Corporation. Lotus Notes is a trademark of Lotus Development Corporation. mysap Enterprise Portal is a trademark of SAP AG. Oracle is a trademark of Oracle Corporation. Adobe is a trademark of Adobe Systems Incorporated. Novell is a trademark of Novell, Inc. Stellent is a trademark of Stellent, Inc. All other trademarks are the property of their respective owners. Notice to Government End Users If this product is acquired under the terms of a DoD contract: Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c)(1)(ii) of 252.227-7013. Civilian agency contract: Use, reproduction or disclosure is subject to 52.227-19 (a) through (d) and restrictions set forth in the accompanying end user agreement. Unpublished-rights reserved under the copyright laws of the United States. Autonomy, Inc., One Market Plaza, Spear Tower, Suite 1900, San Francisco, CA. 94105, US. Acknowledgements RSA Data Security, Inc. MD5 Message-Digest Algorithm; zlib general purpose compression library, Jean-loup Gailly and Mark Adler; Info-ZIP, more information at ftp://ftp.info-zip.org/pub/infozip/license.html; HTML-to-RTF Pro DLL 1.8 2002-2007 SautinSoft. 31 May 2012

Contents About This Document... 7 Documentation Updates... 7 Related Documentation... 8 Conventions... 9 Notational Conventions... 9 Command-line Syntax Conventions...10 Notices...11 Autonomy Product References...12 Autonomy Customer Support...12 Contact Autonomy...13 Chapter 1 Prepare for Disaster Recovery... 15 Assumptions...16 Before You Begin...16 Terminology...17 What to Expect...17 Gather As-Built Configuration Information...18 Windows 2000 Server/Professional, or Windows Server 2003/2008...19 Microsoft Cluster Server (MSCS) Cluster Node...20 Disaster Recovery with EFS (Encrypting File System)...20 Recover a VMware Computer...20 Select the Correct Disaster Recovery Procedure...20 Chapter 2 Recover a Windows Server with DSRM... 23 Summary of steps...24 Detailed steps...24 LiveVault Disaster Recovery Guide 3

Contents Chapter 3 Recover an Exchange Server on Windows 2003 Computers... 37 Assumptions... 37 Summary of steps... 38 Detailed steps... 39 Complete the Recovery on Exchange 2007 CCR Configurations... 49 Chapter 4 Recover an Exchange Server on Windows 2008 computers... 53 Assumptions... 53 Summary of steps... 54 Detailed steps... 55 Complete the Recovery on Standalone Exchange Configurations... 64 Complete the Recovery on Exchange 2010 DAG Configurations... 64 Complete the Recovery on Exchange 2007 CCR Configurations... 66 Chapter 5 Recover a SQL Server with a SQL-aware policy... 69 Assumptions... 69 Summary of steps... 70 Detailed steps... 71 Post-restore considerations... 80 Chapter 6 Recover a Windows 2003 Small Business Server... 83 Assumptions... 83 Summary of steps... 84 Detailed steps... 85 Chapter 7 Recover a DPM server... 103 Summary of Steps... 104 Recovering your DPM server... 104 Synchronize a restored database in a changed environment... 109 4 LiveVault Disaster Recovery Guide

Contents Appendix A In-place Upgrade of Windows 2000...113 Appendix B Restore a domain controller...119 Appendix C Authoritative System State restore...125 LiveVault Disaster Recovery Guide 5

Contents 6 LiveVault Disaster Recovery Guide

About This Document This guide is for users who need to recover an entire computer that has failed. Documentation Updates Related Documentation Conventions Autonomy Product References Autonomy Customer Support Contact Autonomy Documentation Updates The information in this document is current as of LiveVault version 7.60. The content was last modified 25 June 2012. You can retrieve the most current product documentation from Autonomy s Knowledge Base on the Customer Support Site. A document in the Knowledge Base displays a version number in its name, such as IDOL Server 7.5 Administration Guide. The version number applies to the product that the document describes. The document may also have a revision number in its name, such as IDOL Server 7.5 Administration Guide Revision 6. The revision number applies to the document and indicates that there were revisions to the document since its original release. It is recommended that you periodically check the Knowledge Base for revisions to documents for the products your enterprise is using. To access Autonomy documentation 1. Go to the Autonomy Customer Support site at https://customers.autonomy.com LiveVault Disaster Recovery Guide 7

About This Document 2. Click Login. 3. Enter the login credentials that were given to you, and then click Submit. The Knowledge Base Search page opens. 4. In the Search box, type a search term or phrase. To browse the Knowledge Base using a navigation tree only, leave the Search box empty. 5. Ensure the Documentation check box is selected. 6. Click Search. Documents that match the query display in a results list. 7. To refine the results list, select one or more of the categories in the Filter By pane. You can restrict results by Product Group. Filters the list by product suite or division. For example, you could retrieve documents related to the imanage, IDOL, Virage or KeyView product suites. Product. Filters the list by product. For example, you could retrieve documents related to IDOL Server, Virage Videologger, or KeyView Filter. Component. Filters the list by a product s components. For example, you could retrieve documents related to the Content or Category component in IDOL. Version. Filters the list by product or component version number. Type. Filters the list by document format. For example, you could retrieve documents in PDF or HTML format. Guides are typically provided in both PDF and HTML format. 8. To open a document, click its title in the results list. To download a PDF version of a guide, open the PDF version, click the Save icon in the PDF reader, and save the PDF to another location. Related Documentation The following documents provide more details about LiveVault: LiveVault Release Notes LiveVault Quick Start Guide LiveVault Environment Configuration Guide LiveVault Agent Distribution Guide LiveVault Disaster Recovery Guide 8 LiveVault Disaster Recovery Guide

Conventions LiveVault Appliance Build Guide LiveVault Appliance Setup and User Guide LiveVault Data Shuttle User s Guide LiveVault Media Restore Server Build Guide LiveVault MRS Request Guide for Partners LiveVault Web Services Programming Reference LiveVault Vault Build Guide: Multiple Volume Vaults LiveVault Vault Build Guide: Single Volume Vaults Conventions Notational Conventions The following conventions are used in this document. This guide uses the following conventions. Convention Bold Italics Usage User-interface elements such as a menu item or button. For example: Click Cancel to halt the operation. Document titles and new terms. For example: For more information, see the IDOL Server Administration Guide. An action command is a request, such as a query or indexing instruction, sent to IDOL Server. LiveVault Disaster Recovery Guide 9

About This Document Convention monospace font monospace bold Usage File names, paths, and code. For example: The FileSystemConnector.cfg file is installed in C:\Autonomy\FileSystemConnector\. Data typed by the user. For example: Type run at the command prompt. In the User Name field, type Admin. monospace italics Replaceable strings in file paths and code. For example: user UserName Command-line Syntax Conventions This guide uses the following command-line syntax conventions. Convention Usage [ optional ] Brackets describe optional syntax. For example: [ -create ] Bars indicate either or choices. For example: [ option1 ] [ option2 ] In this example, you must choose between option1 and option2. { required } Braces describe required syntax in which you have a choice and that at least one choice is required. For example: { [ option1 ] [ option2 ] } In this example, you must choose option1, option2, or both options. 10 LiveVault Disaster Recovery Guide

Conventions Convention required variable <variable> Usage Absence of braces or brackets indicates required syntax in which there is no choice; you must type the required syntax element. Italics specify items to be replaced by actual values. For example: -merge filename1 (In some documents, angle brackets are used to denote these items.)... Ellipses indicate repetition of the same pattern. For example: -merge filename1, filename2 [, filename3... ] where the ellipses specify, filename4, and so on. The use of punctuation such as single and double quotes, commas, periods indicates actual syntax; it is not part of the syntax definition. Notices This guide uses the following notices: CAUTION A caution indicates an action can result in the loss of data. IMPORTANT An important note provides information that is essential to completing a task. NOTE A note provides information that emphasizes or supplements important points of the main text. A note supplies information that may apply only in special cases for example, memory limitations, equipment configurations, or details that apply to specific versions of the software. LiveVault Disaster Recovery Guide 11

About This Document TIP A tip provides additional information that makes a task easier or more productive. Autonomy Product References This document references the following Autonomy products: LiveVault Software and Service Autonomy Customer Support Autonomy Customer Support provides prompt and accurate support to help you quickly and effectively resolve any issue you may encounter while using Autonomy products. Support services include access to the Customer Support Site (CSS) for online answers, expertise-based service by Autonomy support engineers, and software maintenance to ensure you have the most up-to-date technology. To access the Customer Support Site, go to https://customers.autonomy.com The Customer Support Site includes: Knowledge Base: The CSS contains an extensive library of end user documentation, FAQs, and technical articles that is easy to navigate and search. Case Center: The Case Center is a central location to create, monitor, and manage all your cases that are open with technical support. Download Center: Products and product updates can be downloaded and requested from the Download Center. Resource Center: Other helpful resources appropriate for your product. To contact Autonomy Customer Support by e-mail or phone, go to http://www.autonomy.com/content/services/support/index.en.html 12 LiveVault Disaster Recovery Guide

Contact Autonomy Contact Autonomy For general information about Autonomy, contact one of the following locations: Europe and Worldwide E-mail: autonomy@autonomy.com Telephone: +44 (0) 1223 448 000 Fax: +44 (0) 1223 448 001 Autonomy Corporation plc Cambridge Business Park Cowley Rd Cambridge CB4 0WZ United Kingdom North and South America E-mail: autonomy@autonomy.com Telephone: 1 415 243 9955 Fax: 1 415 243 9984 Autonomy, Inc. One Market Plaza Spear Tower, Suite 1900 San Francisco CA 94105 USA LiveVault Disaster Recovery Guide 13

About This Document 14 LiveVault Disaster Recovery Guide

CHAPTER 1 Prepare for Disaster Recovery To ensure that you can recover your computer, you must back up the computer's system state and all data on the computer, including the operating system and program files, with the exception of the specific files and directories that are excluded. For more information about excluded files, refer to the help topic Automatic and Recommended Backup Exclusions in the Web Management Portal Webhelp. This is the only way to ensure that your backup is configured to fully protect your computers and data. Several disaster recovery (DR) procedures differ in the details, but this chapter contains important information for all of the different Disaster Recovery scenarios. Identify the DR procedure in this guide that best matches your situation, and then print that chapter to use as a checklist. Assumptions Before You Begin Terminology What to Expect Windows 2000 Server/Professional, or Windows Server 2003/2008 Microsoft Cluster Server (MSCS) Cluster Node LiveVault Disaster Recovery Guide 15

Chapter 1 Prepare for Disaster Recovery Disaster Recovery with EFS (Encrypting File System) Recover a VMware Computer Recover a VMware Computer Select the Correct Disaster Recovery Procedure Assumptions The following assumptions are made in these procedures: You configured your backup to protect the full computer (including its general files and directories, its databases and applications, and its system state) and that the initial synchronization completed for the computer. The LiveVault service can restore only files, directories, system state, and metadata that you have backed up with the LiveVault Service. All Windows functions worked before the disaster occurred. All databases and applications functions worked before the disaster occurred. Before You Begin Before beginning the disaster recovery process, verify the following information: Correct operating system version. Have the appropriate operating system installation. This must be the same operating system version that was on the computer before the disaster occurred, preferably from the original media that came with the hardware itself. As-built hardware configuration. If you are using new hardware, ensure you have the original computer's hardware and operating system as-built configuration information. VMWare. If you are recovering a VMware operating system, it must be a guest computer, and not the host. If your VMware host fails, you must recover that separately before recovering the guests. Restore method. Determine whether data and system state will be delivered on a restore device or over the Internet. This depends on the amount of data you restore and your Internet connection bandwidth. In some instances, if the amount of data is small and your bandwidth is sufficient, you can restore the data over the Internet. If the 16 LiveVault Disaster Recovery Guide

Terminology amount of data is large, it can take many days to restore over the Internet, and having a media device shipped to you is better for your needs. A media device can usually be shipped in one or two days. Current or historic backup version. Determine whether you want to restore the most current version of the data or a historic version. If a hardware crash led to this disaster, most likely the hardware was experiencing problems for days or weeks before the actual crash. You might want to select a version that occurred before any hardware problems became apparent. If possible, start the original computer in safe mode and check the logs, for example the System Application log. Verify if input/output (I/O), permissions, or disk errors are evident in the days preceding the disaster. If possible, select a version that you backed up before these errors started to occur. Terminology The following terms are used in this procedure to distinguish between computers: Original computer. This is the computer that experienced a failure or has been lost due to a disaster. Recovering computer/recovered computer. This is the computer you are building as part of the disaster recovery procedures. When you complete this procedure, this will be your computer running the LiveVault agent software. Depending on the failure circumstances, these can be the same or different physical computers. What to Expect There are many factors to achieving a successful disaster recovery, and some difficulties can arise. When performing the recovery to the recovering computer hardware, the following mismatches are the most common causes of system recovery failure: Hardware Abstraction Layer (HAL) To find the HAL, go to Computer Management>Device Manager > Computer. Video card LiveVault Disaster Recovery Guide 17

Chapter 1 Prepare for Disaster Recovery RAID device Keyboard type (PS/2 or USB) Mouse type (PS/2 or USB) As-built information required for recovery Operating system version Drive letters The following conditions commonly cause a disaster recovery to fail: Insufficient disk space on the recovering computer Failure to start in DSRM mode Entering the wrong path to the LiveVault agent software during installation Gather As-Built Configuration Information In preparing for a disaster recovery, you need to gather the following information for each original computer into an as-built profile: Operating system version. For example, Windows 2008 Enterprise Server. Windows installation directory. For example, C:\Windows. Windows Service Pack version. For example Windows 2008 Enterprise Server with SP 1. Additional Windows Hotfixes. Required if Windows 2000 Professional. It is good practice to keep complete as-built information for your computers. The subsets of the as-built information provided below are required for performing disaster recovery. They are not comprehensive lists of the as-built information that you should keep for your records. 18 LiveVault Disaster Recovery Guide

2003/2008 Windows 2000 Server/Professional, or Windows Server Windows 2000 Server/Professional, or Windows Server 2003/2008 In preparing for a disaster recovery, you need to gather the following information for each original computer: Disk subsystem Drive letters and partitions (for example, D: and E:) Partition size for each Partition file system format (for example, NTFS or FAT) Whether or not the computer is a Primary or Backup Domain Controller Whether or not Active Directory is installed Active Directory structure, including portion/subtree names Hardware configuration Whether or not dual NICs are configured Computer Name Video Card and Video Bus NOTE You cannot recover a computer with a AGP card to a computer with a PCI-based card, and vice-versa. Applications All installed applications Verification that all database and application functions work Whether or not Internet Information Services (IIS) components installed Local Administrator s password Domain Administrator s password Original Installation media information. For example, if a computer was installed with HP disks, a disaster recovery to a Dell computer can fail. Location of systemroot when the system state backup was taken. By default this is C:\Windows. LiveVault Disaster Recovery Guide 19

Chapter 1 Prepare for Disaster Recovery This location can sometimes be different than the default, for example, when a user upgrades a computer from Windows 2000 to Windows 2003. Refer to the following article to recover a computer with a nonstandard location for systemroot: Recovering from failed system drive with nondefault %SystemRoot% folder. Microsoft Cluster Server (MSCS) Cluster Node Disaster recovery for cluster nodes is not supported. For a cluster node, rebuild the computer, and then submit a restore request for the computer's data. Disaster Recovery with EFS (Encrypting File System) If you use EFS on your Windows 2003 servers, refer to the following article for best practices to ensure successful data recovery: Encrypting File System in Windows XP and Windows Server 2003. Recover a VMware Computer If your VMware host fails, recover your VMware host before you recover the guest operating systems. Select the Correct Disaster Recovery Procedure Although the general preparation above applies to almost any disaster recovery scenarios, specific disaster recovery procedures can differ, depending on the following conditions: The operating system on the original computer. The backup policy you used to back up the original computer. The applications you are recovering. The type of server are you backing up. 20 LiveVault Disaster Recovery Guide

Select the Correct Disaster Recovery Procedure Chapters 2-5 each provide a different type of disaster recovery procedure, depending on which operating system you are using and what type of server you are recovering. To recover a specific server, print out only the chapter you need, and use it as a checklist. LiveVault Disaster Recovery Guide 21

Chapter 1 Prepare for Disaster Recovery 22 LiveVault Disaster Recovery Guide

CHAPTER 2 Recover a Windows Server with DSRM This chapter explains how to perform a disaster recovery for a Windows 2000 Server, Windows 2000 Advanced Server, Windows Server 2003 server, or Windows 2008 server. Use this chapter to recover file and print servers, as well as database servers such as an Exchange 2000 Server or SQL server. You can recover both Active Directory domain controllers and member servers with this procedure. Perform a disaster recovery in the event of a computer failure or disaster such as: Hard disk failure or corruption, requiring the system drive (usually c:) to be rebuilt Windows cannot start or has been corrupted Physical computer loss LiveVault Disaster Recovery Guide 23

Chapter 2 Recover a Windows Server with DSRM Summary of steps To recover your computer from a disaster, complete the following procedures: 1. Submit a media restore device request 2. Suspend backups on the recovering computer 3. Disable NIC on the recovering computer 4. Verify the keyboard and mouse type 5. Install the operating system on the recovering computer 6. Install the same service packs as on the original computer 7. Verify the computer name of the recovering computer 8. Restart the computer 9. Configure the local drives 10. Remove IIS Components from recovering computer 11. On Windows 2000/2003 computers, copy the boot.ini file 12. Disable the screen saver 13. Install the agent software on the recovering computer 14. Restart Recovering Computer in DSRM 15. Log on to recovering computer with local administrator rights 16. Define and run a restore policy 17. On Windows 2000/2003, compare boot.ini files 18. Restart the recovering computer in normal mode 19. Resolve short name issues 20. Determine whether this is a domain controller 21. Enable the NIC 22. Test the recovered computer 23. Update or repair the agent software 24. Resume backups on the recovered computer Detailed steps Autonomy recommends that you print out this chapter, and use it as a checklist for your disaster recovery process. 24 LiveVault Disaster Recovery Guide

Detailed steps Complete the following procedures to recover your computer. 1 Submit a media restore device request If you request a restore device, it takes at least 24 hours to ship the device. However, you can proceed with these instructions while you wait for your restore device to arrive. If you are restoring over the Internet, skip this step. 2 Suspend backups on the recovering computer To suspend backups, complete the following steps: 1. In the left pane of the Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select the Suspend backup check box. 5. Click Save. 3 Disable NIC on the recovering computer If the recovering computer contains two Network Interface Cards (NICs), disable one of them: If the NIC is a separate card that you can remove, remove it. If it is an onboard NIC, disable the NIC using the BIOS interface. For more information, see the hardware vendor s documentation. Otherwise, disable the NIC through the Windows Device Manager after you install the Windows operating system (in step 6). You do not need to restart the computer after you disable the NIC. 4 Verify the keyboard and mouse type If possible, use the same type of keyboard and mouse on the target computer as those on the original computer, that is, USB or PS/2. LiveVault Disaster Recovery Guide 25

Chapter 2 Recover a Windows Server with DSRM 5 Install the operating system on the recovering computer Install the Windows operating system on the recovering computer, according to the following requirements. If possible, use the same media used to install the operating system on the failed computer. Install the same operating system version of Windows that existed on the original computer. Name the computer to the same name as the original computer. The Windows setup program provides a suggested computer name by default; for example w2008xr1fan. If the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Install Windows to the same directory on the recovering computer as on the original computer. For example, if the original computer's installation directory was c:\windows, then install Windows to c:\windows on the recovering computer. Install only Accessories and Utilities when prompted to specify the Windows components to install. Clear the check boxes for all components except Accessories and Utilities. NOTE Do not install the other Windows components (for example, Active Directory, Certificate Services, or Internet Information Services). The disaster recovery will restore all other components. If you install them, the restore and the disaster recovery can fail. If you install the IIS components now, the IIS components that the LiveVault service restores will not work. However, if you must install the IIS components now (for example, because you use a system imaging solution that includes these components), you will remove them later in the process. 6 Install the same service packs as on the original computer Install the same service packs that you had on the original computer. 7 Verify the computer name of the recovering computer Ensure that recovering computer has the same computer name as that of the original computer. For example, if the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. IMPORTANT Assign the correct computer name to the recovering computer in order to run the system state restore. Otherwise, the recovering computer will not start correctly and the disaster recovery procedure will fail. 8 Restart the computer Restart the recovering computer. 26 LiveVault Disaster Recovery Guide

Detailed steps 9 Configure the local drives Configure the disk drive letters and partitions on the recovering computer to match those that existed on the original computer: Use the same partitions. If the original computer had partitions D: and E:, create the recovering computer partitions on D: and E:. Otherwise, data restores will fail. Use adequately sized partitions. Ensure that the new partitions have adequate size to handle the restored data. For example, the recovering computer's C: drive must be at least as large as the original computer's C: drive. Format the recovering computer's partitions to be the same file system format as the original computer's partitions (NTFS, FAT, etc.). 10 Remove IIS Components from recovering computer Determine whether any Internet Information Services (IIS) components were installed during the Windows installation. To remove any that were installed, complete the following steps: 1. Open Control Panel. 2. Select Add/Remove Programs. The Add/Remove Program page opens. 3. Click Add/Remove Windows Components. The Windows Components Wizard opens. 4. In the Windows Components Wizard, locate the Internet Information Services item. If the IIS check box is selected, IIS components are installed. 5. If the IIS check box is selected, clear the check box and then follow the instructions in the wizard to remove the IIS services components. You do not need to restart the system. NOTE If IIS components are installed and you do not perform this step, the IIS components that the LiveVault service restores may not work. LiveVault Disaster Recovery Guide 27

Chapter 2 Recover a Windows Server with DSRM 11 On Windows 2000/2003 computers, copy the boot.ini file To copy the boot.ini file, complete the following steps: 1. Copy the boot.ini file. The boot.ini is located in the recovering computer s root directory. 2. Name the copy something similar to BootFromCD_101504.ini (where 101504 represents the current date) to ensure no confusion exists between the copy and the restored boot.ini file, and to differentiate this copy from any other copies. 3. Take note of the name of the boot.ini copy. The copy will be referenced later during the disaster recovery process. 12 Disable the screen saver Complete the following steps: 1. Disable the screen saver. You cannot disable the screen saver after entering DSRM. 2. In the Power Options, disable the password protect. The password might change due to the restore. 28 LiveVault Disaster Recovery Guide

Detailed steps 13 Install the agent software on the recovering computer To install the agent software, complete the following steps: 1. Log into the LiveVault Web Management Portal. 2. Select New Computer from the navigation pane. 3. Select the appropriate Agent for your operating system, and click Download. 4. Do not select Run on Download. 5. Save the file to a location on the recovering computer, and then run it with Administrator rights. 6. To run the install wizard, select Run. 7. To install the software in the appropriate destination folders, follow the instructions in the installation wizard. 8. Install the agent software to the same location on the recovering computer as it was on the original computer. Also, install the LiveVaultData directory to the same location as the original computer. After you click Finish and then Configure, the computer lets you configure your software. The configuration wizard opens. 9. To validate your account, provide your user name and password combination in the configuration wizard. 10.Click Next. 11.Select Recovering a complete system. 12.Select the name of the original computer you are recovering from the list of computer names. 13.Click Next. 14.Provide the encryption key password. This is the encryption key password that you entered when you first installed the software on the original computer. The configuration wizard generates the key. LiveVault Disaster Recovery Guide 29

Chapter 2 Recover a Windows Server with DSRM 14 Restart Recovering Computer in DSRM Restart Windows 2008 in safe mode To use the BCDEDIT utility on Microsoft Windows 2008 recovering computers, complete the following steps: 1. In Windows, click Start, and then click Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /set safeboot dsrepair 4. Restart the computer. The computer restarts in safe mode. Restart Windows 2000/2003 in DSRM mode On Windows 2000 and 2003 computers, use Directory Services Restore Mode (DSRM) even if the computer is not a domain controller. For more information about Directory Services Restore Mode, see your Windows documentation. To restart the computer in DSRM mode, complete the following steps: 1. Restart the computer. 2. During the normal start-up process, look for the Windows start-up options message at the bottom of the window, for example: For troubleshooting and advanced startup options for Windows 2003, press F8 3. When you see this message, press F8. You will only see this message for a few seconds. Press F8 while you can see it. 4. From the Windows Advanced Options Menu, select Directory Services Restore Mode and press Enter. To restart in Directory Services Restore Mode if you did not press F8, complete the following steps: 1. Open the boot.ini file in the recovering computer's root directory. 2. Go to the [operating systems] section and add the following switch to the end of the line that specifies the start path: /safeboot:dsrepair /sos For example: [operating systems] multi(0)disk(0)rdisk(0)partition(1)\ WINNT=;Microsoft Windows 2000 Server; /fastdetect /safeboot:dsrepair / sos 3. Restart the recovering computer. IMPORTANT Stay in DSRM mode until you are instructed to restart into normal mode. 30 LiveVault Disaster Recovery Guide

Detailed steps 15 Log on to recovering computer with local administrator rights After the computer restarts, log on to Windows with local Administrator rights. IMPORTANT After you log on, do not log off or lock the computer for the remainder of this procedure. 16 Define and run a restore policy Define and run a restore job that restores all of your files, directories, and the system state. IMPORTANT You must restore the system state when you restore your files and directories. To create the restore job, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. 4. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The Selection tab opens. 5. Name the Restore policy. 6. Select the version and time of the backup to restore. 7. To select all files and directories that you want to restore, use the Selection tab. 8. Select the System State check box. 9. Select the Options tab. The Options tab opens. 10.Select the check box Overwrite open files when the computer is restarted. 11.To perform the restore, click Next. The Restore job is submitted, and you return to the Restore summary tab. 12.Ensure that this restore has completed correctly before you go to the next step. 13.Do not restart the recovering computer before you go to the next step. IMPORTANT You can perform a System State restore only once without a restart. If you cancel the restore, or it restarts, you must restart the recovering computer before you try again. LiveVault Disaster Recovery Guide 31

Chapter 2 Recover a Windows Server with DSRM 17 On Windows 2000/2003, compare boot.ini files To compare the restored boot.ini file and the copy of the boot.ini file, complete the following steps: 1. Go to the computer's root directory, and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101504.ini) that you made earlier in this procedure. 2. Compare the boot drive value (that is, the number of the partition from which the computer will start, for example: partition(1)). 3. If the boot drive values in these files match, then skip to Restart the computer. If the boot drive values in these files do not match, continue with this procedure. The restored boot.ini file's (for example, boot.ini) read-only attribute is set. 4. To clear the read-only attribute, complete the following steps: a. In Windows Explorer, go to and select the file. b. Right-click the file and select Properties on the short-cut menu. c. In the Properties dialog box, on the General tab, in the Attributes group, clear the Read-only check box. Then click OK. 5. Change the value in the restored boot.ini file (for example, boot.ini) to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101504.ini). Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. 32 LiveVault Disaster Recovery Guide

Detailed steps 18 Restart the recovering computer in normal mode Resume normal startup: Windows 2008 only To resume normal startup, complete the following steps: 1. In Windows, click Start, and then Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /deletevalue safeboot Restart Windows 2000 and 2003 computers in normal mode Restart the recovering computer in normal mode. If you receive a Windows message that indicates that you must restart the computer because the computer has found new devices, restart the computer again as specified. For example, if you are running Windows 2000 Service Pack 4 or followed the procedure in Microsoft Knowledge Base article 810161, at restart, Windows finds all devices as new hardware. Some services might not restart. You receive a prompt to restart the computer again (possibly multiple times) as the computer finds new devices. In this case, do not restart the computer each time you receive a prompt. After Windows finds all devices, restart the computer. LiveVault Disaster Recovery Guide 33

Chapter 2 Recover a Windows Server with DSRM 19 Resolve short name issues If the SQL service fails to restart following a restore, there might be a short-name discrepancy. To determine if a short-name discrepancy is the cause of the problem, complete the following steps: 1. In Windows, click Start, and then Settings>Control Panel>Administrative Tools>Services. 2. In the list of services on the right of the panel, right-click mssqlserver and choose properties. 3. Note the path and folder that Windows is looking in for the program. 4. In Windows or at a command prompt, navigate to the folder above, and note whether the program exists in that folder. If the program is there, the failure of SQL to launch is not due to a short-name discrepancy. For more information, consult your SQL documentation. If the program is not there, you have a short-name discrepancy. Continue with this procedure. 5. Complete the steps below to open a command prompt. a. In Windows, click Start, and then Run. The Run window opens. b. Type cmd and press Enter. The Command Prompt window opens. c. Enter the following command to change directory to Program Files: cd \Program Files d. Enter the following command: dir/x micro* e. Press Enter. 6. Browse to each folder until you locate the SQL program. Temporarily rename the folder that contains the SQL program. For example, if the folder containing the SQL program is Micros~1, rename Micros~1 to Temp_Micros~1. This forces Windows to reassign a new short name to that folder. 34 LiveVault Disaster Recovery Guide

Detailed steps 7. Temporarily rename the folder that Windows associates with the SQL program. For example, if the service is looking in Micros~4 to launch the program, rename Micros~4 to Temp_Micros~4. This forces Windows to reassign a new short name to that folder, which reestablishes the proper sequence of short names, so that SQL can find the correct folder and execute. You might have to temporarily rename other short-name folders as well, until the correct folder shuffles to the correct place in the numbering sequence. For example, when you rename Micros~1, the old Micros~2 becomes Micros~1 and the old Micros~3 becomes Micros~2. Keep track of the folders to avoid creating other discrepancies. 8. Rename the folder that contains the program to its original name. Windows dynamically reassigns the proper short name to this folder. Rename the other folder to its original name. Windows dynamically reassigns another short name to this folder. 20 Determine whether this is a domain controller If this computer is not a domain controller, go to Enable the NIC. If the computer is a domain controller, complete the following steps: 1. Click the Start menu. 2. Select Administrative Tools>Active Directory Users and Computers. A list of domain controllers opens. If only one Domain Controller is listed, skip to the step Enable the NIC. If other domain controllers are present and running, go to Enable the NIC. If the recovering computer is the first domain controller of a multi-domain environment, see Restore a domain controller. 21 Enable the NIC If you had to disable a NIC for the disaster recovery, complete the following steps to enable that NIC: If the NIC is a separate card that was removed, insert the card. If it is an onboard NIC, use the BIOS interface to enable the NIC. For more information, see the hardware vendor s documentation. If you disabled the NIC through the Windows Device Manager, it might be enabled for you. Verify the NIC's status in Device Manager and enable it if necessary. After you enable the NIC, you might need to restart the recovered computer, and then configure the NIC. LiveVault Disaster Recovery Guide 35

Chapter 2 Recover a Windows Server with DSRM 22 Test the recovered computer If the recovered computer fails to appear on the network, verify the following indicators: Analyze the ipconfig output for errors. Analyze Device Manager for errors. Analyze the system logs for errors. If necessary, refer to your Windows documentation to perform these tasks. 23 Update or repair the agent software It is possible that the restore might have caused older files to be installed on the recovering system, which can cause an Agent software conflict. To ensure that you have no conflict, complete the following steps: 1. Upgrade your computer to the most recent version of Agent software. 2. If you receive an option to Repair, choose the option. 3. When you are prompted to restart, restart the computer. 24 Resume backups on the recovered computer To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. 36 LiveVault Disaster Recovery Guide

CHAPTER 3 Recover an Exchange Server on Windows 2003 Computers This procedure explains how to perform a disaster recovery for a Microsoft Exchange 2003/2007 Server on Windows 2003 computers. Backup and recovery of Exchange 2003 is only supported on Windows 2003, SP1 or higher. Backup and recovery of Exchange 2007 is supported on all operating systems on which Exchange 2007 runs. To recover Exchange 2007 on Windows 2008 computers, see the chapter Recover an Exchange Server on Windows 2008 computers. Perform a disaster recovery in the event of a computer failure or disaster such as: Hard disk failure or corruption, requiring you to rebuild the system drive Windows cannot start or has been corrupted Physical computer loss Assumptions The following assumptions are made in these procedures: You configured your backup to protect the full computer (including its general files and directories, its databases and applications, and its system state) and LiveVault Disaster Recovery Guide 37

Chapter 3 Recover an Exchange Server on Windows 2003 Computers that the initial synchronization completed for the computer. The LiveVault service can restore only files, directories, system state, and metadata that you have backed up with the LiveVault Service. You configured an Exchange backup policy to protect your Exchange data in a transactionally-safe manner. For more information on backing up Exchange with an Exchange backup policy, refer to the LiveVault Web Management Help system. All Windows functions worked before the disaster occurred. All databases and applications functions worked before the disaster occurred. Summary of steps To recover your computer from a disaster, complete the following procedures: 1. Submit a media restore device request 2. Suspend backups on the original computer 3. Disable NIC on the recovering computer 4. Verify the keyboard and mouse type 5. Install the operating system on the recovering computer 6. Install the same service packs as on the original computer 7. Verify the computer name of the recovering computer 8. Restart the computer 9. Configure the local drives 10. Remove IIS Components from recovering computer 11. Copy the boot.ini file 12. Disable the screen saver 13. Install the agent software on the recovering computer 14. Restart Recovering Computer in DSRM 15. Log on to recovering computer with local administrator rights 16. Define and run a file restore policy 17. Define and run an Exchange restore policy 18. Compare boot.ini files 19. Restart the recovered computer in normal mode 38 LiveVault Disaster Recovery Guide

Detailed steps 20. Enable the NIC 21. Test the recovered computer 22. Update or repair the agent software 23. Resume backups on the recovered computer 24. Complete the Recovery on Exchange 2007 CCR Configurations Detailed steps Complete the following procedures to recover your computer Autonomy recommends that you print out this chapter, and use it as a checklist for your disaster recovery process. Complete the following procedures to recover your computer. 1 Submit a media restore device request If you request a restore device, it takes at least 24 hours to ship the device. However, you can proceed with these instructions while you wait for your restore device to arrive. If you are restoring over the Internet, skip this step. 2 Suspend backups on the original computer To suspend backups, complete the following steps: 1. In the LiveVault Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select Suspend backup. 5. Click Save. LiveVault Disaster Recovery Guide 39

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 3 Disable NIC on the recovering computer If the recovering computer contains two Network Interface Cards (NICs), disable one of them: If the NIC is a separate card that you can remove, remove it. If it is an onboard NIC, disable the NIC using the BIOS interface. For more information, see the hardware vendor s documentation. Otherwise, disable the NIC through the Windows Device Manager after you install the Windows operating system (in step 6). You do not need to restart the computer after you disable the NIC. 4 Verify the keyboard and mouse type If possible, use the same type of keyboard and mouse on the target computer as those on the original computer, that is, USB or PS/2. 5 Install the operating system on the recovering computer Install the Windows operating system on the recovering computer, according to the following requirements. If possible, use the same media used to install the operating system on the failed computer. Install the same operating system version of Windows that existed on the original computer. Name the computer to the same name as the original computer. The Windows setup program provides a suggested computer name by default; for example w2008xr1fan. If the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Install Windows to the same directory on the recovering computer as on the original computer. For example, if the original computer's installation directory was c:\windows, then install Windows to c:\windows on the recovering computer. Install only Accessories and Utilities when prompted to specify the Windows components to install. Clear the check boxes for all components except Accessories and Utilities. Do not install the other Windows components (for example, Active Directory, Certificate Services, or Internet Information Services). The disaster recovery will restore all other components. If you install them, the restore and the disaster recovery can fail. If you install the IIS components now, the IIS components that the LiveVault service restores will not work. However, if you must install the IIS components now (for example, because you use a system imaging solution that includes these components), you will remove them later in the process. 40 LiveVault Disaster Recovery Guide

Detailed steps 6 Install the same service packs as on the original computer Install the same service packs that you had on the original computer. 7 Verify the computer name of the recovering computer Ensure that recovering computer has the same computer name as that of the original computer. For example, if the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. IMPORTANT Assign the correct computer name to the recovering computer in order to run the system state restore. Otherwise, the recovering computer might not start correctly and the disaster recovery procedure will fail. 8 Restart the computer Restart the recovering computer. 9 Configure the local drives Configure the disk drive letters and partitions on the recovering computer to match those that existed on the original computer: Use the same partitions. If the original computer had partitions D: and E:, configure the recovering computer partitions on D: and E:. Otherwise, data restores may fail. Use adequately sized partitions. Ensure that the new partitions have adequate size to handle the restored data. For example, the recovering computer's C: drive must be at least as large as the original computer's C: drive. Format the recovering computer's partitions to be the same file system format as the original computer's partitions (NTFS, FAT, etc.). LiveVault Disaster Recovery Guide 41

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 10 Remove IIS Components from recovering computer Determine whether any Internet Information Services (IIS) components were installed during the Windows installation. To remove any that were installed, complete the following steps: 1. Open Control Panel. 2. Select Add/Remove Programs. The Add/Remove Program page opens. 3. Click Add/Remove Windows Components. The Windows Components Wizard opens. 4. In the Windows Components Wizard, locate the Internet Information Services item. If the IIS check box is selected, IIS components are installed. 5. If the IIS check box is selected, clear the check box and then follow the instructions in the wizard to remove the IIS services components. You do not need to restart the system. NOTE If IIS components are installed and you do not perform this step, the IIS components that the LiveVault service restores may not work. 11 Copy the boot.ini file To copy the boot.ini file, complete the following steps: 1. Copy the boot.ini file (in the recovering computer's root directory). 2. Name the copy something similar to BootFromCD_101504.ini (where 101504 represents the current date) to ensure no confusion exists between the copy and the restored boot.ini file, and to differentiate this copy from any other copies. This copy will be referenced later during the disaster recovery, so note the name of the file. 12 Disable the screen saver Complete the following steps: 1. Disable the screen saver. You cannot disable the screen saver in DSRM. 2. In the Power Options, disable the password protect. The password might change due to the restore. 42 LiveVault Disaster Recovery Guide

Detailed steps 13 Install the agent software on the recovering computer To install the agent, complete the following steps: 1. From the Web Management Portal, select New Computer from the navigation pane. 2. Select the appropriate Agent for your operating system, and click Download. 3. Do not select Run on Download. 4. Save the file to a location on the recovering computer, and then run it with Administrator rights. 5. To run the install wizard, select Run. 6. To install the software in the appropriate destination folders, follow the instructions in the installation wizard. 7. Install the agent software to the same location on the recovering computer as it was on the original computer. Also, install the LiveVaultData directory to the same location as the original computer. After you click Finish and then Configure, the computer lets you configure your software. The configuration wizard opens. 8. To validate your account, provide your user name and password combination in the configuration wizard. 9. Click Next. 10.Select Recovering a complete system. 11.Select the name of the original computer you are recovering from the list of computer names. 12.Click Next. 13.Provide the encryption key password. This is the encryption key password that you entered when you first installed the software on the original computer. The configuration wizard generates the key. LiveVault Disaster Recovery Guide 43

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 14 Restart Recovering Computer in DSRM To restart the computer in Directory Services Restore Mode (DSRM), complete the following steps: 1. Restart the computer. 2. During the normal start-up process, look for the Windows start-up options message at the bottom of the window, for example: For troubleshooting and advanced startup options for Windows 2003, press F8 3. When you see this message, press F8. You will only see this message for a few seconds. Press F8 while you can see it. 4. From the Windows Advanced Options Menu, select Directory Services Restore Mode and press Enter. To restart in Directory Services Restore Mode if you did not press F8, complete the following steps: 1. Open the boot.ini file in the recovering computer's root directory. 2. Go to the [operating systems] section and add the following switch to the end of the line that specifies the start path: /safeboot:dsrepair /sos For example: [operating systems] multi(0)disk(0)rdisk(0)partition(1)\ WINNT=;Microsoft Windows 2000 Server; /fastdetect /safeboot:dsrepair / sos 3. Restart the recovering computer. IMPORTANT Stay in DSRM mode until you are instructed to restart into normal mode. 15 Log on to recovering computer with local administrator rights After the computer restarts, log on to Windows with local Administrator rights. IMPORTANT After you log on, do not log off or lock the computer for the remainder of this procedure. 44 LiveVault Disaster Recovery Guide

Detailed steps 16 Define and run a file restore policy Define and run a restore job that restores all of your files, directories, and the system state. IMPORTANT You must restore the system state when you restore your files and directories. To create the restore job, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The Selection tab opens. 4. Name the Restore policy. 5. Select the version and time of the backup version to restore. 6. To select all files and directories that you want to restore, use the Selection tab. 7. Select the System State check box. 8. Select the Options tab. The Options tab opens. 9. Select the check box Overwrite open files when the computer is restarted. 10.To perform the restore, click Next. The Restore job is submitted, and you return to the Restore summary tab. 11.Ensure that this restore has completed correctly before you go to the next step. 12.Do not restart the recovering computer before you go to the next step. IMPORTANT You can perform a System State restore only once without a restart. If you cancel the restore, or it restarts, you must restart the recovering computer before you try again. LiveVault Disaster Recovery Guide 45

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 17 Define and run an Exchange restore policy To restore an Exchange policy, complete the following steps: 1. In the LiveVault Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard page opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The What would you like to restore page opens. 4. Select Exchange Server, and then click Next. 5. In the Name to use for this restore request box, enter a name for the restore job. 6. Select Policy filter, and then select Exchange. 7. From the Version menu, select the backup version from which you want to restore the Mailbox and Public Folder stores. The most recent version is the default. 8. Select the top-level object in the object view of your Exchange Server's backed-up file structure. This ensures that you will restore all the files on the server. 9. In the Restore Request form, select the Options tab. 10.Select File Restore. 11.Select Overwrite existing files even if restored file is older. 12.Select Overwrite open files when the computer is rebooted. 13.Select Restore the Original Backup Security Attributes, and then click Next. The Restore Summary page opens. 14.Review your selections. 15.Perform one of the following actions: To make changes to the restore request, click Previous. To accept the restore request and start the restore process, click Done. After you click Done, the LiveVault service starts to process of the restore request. 16.Review the restore job log on the Exchange Server computer to which you restored the files. Verify that the Mailbox and/or Public Folder Store was restored as expected. To restore a different version, perform this procedure again and choose an older version. 46 LiveVault Disaster Recovery Guide

Detailed steps 18 Compare boot.ini files To compare the restored boot.ini file and the copy of the boot.ini file, complete the following steps: 1. Go to the computer's root directory, and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101504.ini) that you made earlier in this procedure. 2. Compare the boot drive value (that is, the number of the partition from which the computer will start, for example: partition(1)). 3. If the boot drive values in these files match, then skip to Restart the computer. If the boot drive values in these files do not match, continue with this procedure. The restored boot.ini file's (for example, boot.ini) read-only attribute is set. 4. To clear the read-only attribute, complete the following steps: a. In Windows Explorer, go to and select the file. b. Right-click the file and select Properties on the short-cut menu. c. In the Properties dialog box, on the General tab, in the Attributes group, clear the Read-only check box. Then click OK. 5. Change the value in the restored boot.ini file (for example, boot.ini) to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101504.ini). Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. 19 Restart the recovered computer in normal mode Restart Windows 2003 computers in normal mode Restart the recovering computer in normal mode. If you receive a Windows message that indicates that you must restart the computer because the computer has found new devices, restart the computer again as specified. After Windows finds all devices, restart the computer. LiveVault Disaster Recovery Guide 47

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 20 Enable the NIC If you had to disable a NIC for the disaster recovery, complete the following steps to enable that NIC: If the NIC is a separate card that was removed, insert the card. If it is an onboard NIC, use the BIOS interface to enable the NIC. For more information, see the hardware vendor s documentation. If you disabled the NIC through the Windows Device Manager, it might be enabled for you. Verify the NIC's status in Device Manager and enable it if necessary. After you enable the NIC, you might need to restart the recovered computer, and then configure the NIC. 21 Test the recovered computer If the recovered computer fails to appear on the network, verify the following indicators: Analyze the ipconfig output for errors. Analyze Device Manager for errors. Analyze the system log for errors. Analyze the restore agent reports for errors. Verify that the Databases are mounted correctly. Look for errors in the Windows Event Viewer related to MSExchange, MSExchangeRepl or VSS, after the Reboot. If this is a CCR configuration, take the following extra precautions: Let the Exchange CCR replication finish copying the log files to the passive node. During this time, the replication status might be displayed as "Initializing". Verify that the replication status is shown as "Healthy" on Active and Passive nodes. If necessary, refer to your Windows documentation to perform these tasks. 22 Update or repair the agent software It is possible that the restore might have caused older files to be installed on the recovering system, which can cause an Agent software conflict. To ensure that you have no conflict, complete the following steps: 1. Upgrade your computer to the most recent version of Agent software. 2. If you receive an option to Repair, choose the option. 3. When you are prompted to restart, restart the computer. 48 LiveVault Disaster Recovery Guide

Configurations Complete the Recovery on Exchange 2007 CCR 23 Resume backups on the recovered computer To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. Complete the Recovery on Exchange 2007 CCR Configurations If you are recovering a node in an Exchange 2007 CCR configuration, you may need to take additional steps to get the node back up and running. Verify the cluster s status After your restore, open the Exchange Failover Cluster Manager console, and verify the following conditions: That all Storage resources (disks) are online. That all network interfaces (public and private) are online. That Services and Applications for Exchange is online. That both nodes of the configuration are online. Verify databases and replication After performing the Exchange restore, verify that all appropriate databases are mounted, and replication is in a state that allows the agent to resume backups. Backups can take place successfully when replication is in the following states, depending on which node the agent is installed on: LiveVault Disaster Recovery Guide 49

Chapter 3 Recover an Exchange Server on Windows 2003 Computers Active state Healthy ServiceDown Failed Unknown Passive state Healthy Manually Copy Exchange Files If you perform a redirected restore to a different folder on the same computer, you may have to manually copy Exchange files to make Exchange functional again after the restore. Refer to your Microsoft Exchange documentation for instructions on manually dismounting the databases, copying Exchange files from one location to another, and remounting the databases. Seed the Exchange Database If Exchange CCR replication is not synchronized after a successful restore, and has a Failed status, update the storage group copy to reseed the databases. Update the storage group copy status and delete the existing files. If the state is Initializing, you must wait until the logs are copied over from the Active node to the Passive node before replication is functional. Consult your Microsoft Exchange documentation for instructions on updating the storage group status and seeding the Exchange database. Remount the Public Store Database If the public store database is down after a successful restore, and replication status is Unknown or ServiceDown, remount the public store database to resume backups. For more information, refer to the Microsoft articles on planning for Cluster Continuous Replication and Cluster Continuous Replication and Public Folder Databases. Search for Replication Event Errors After performing a disaster recovery, the replication status might not have a Healthy status. This occurs when the passive node is unable to perform an incremental re-seed of the passive node, or if logs are missing. Analyze the Windows Event viewer to look for the following events: 50 LiveVault Disaster Recovery Guide

Configurations Complete the Recovery on Exchange 2007 CCR MSExchangeRepl 2056: The Exchange Replication service could not perform an incremental reseed of the passive node because the logs on the active node have diverged too widely from the logs on the passive node. MSExchangeRepl 2057: The Exchange Replication service could not perform an incremental reseed of the passive database copy because replication was suspended for the storage group specified in the event description. This event is caused when an incremental reseed must be initiated but the storage group copy is currently suspended. MSExchangeRepl 2058: The Exchange Replication service could not perform an incremental reseed of the passive node because the service encountered an error as specified by the error code in the event description. MSExchangeRepl 2081: The Exchange Replication service could not perform an incremental reseed of the storage group on the passive node because the service could not compare a required log file that is located on the active node with the log file of the same generation ID that is located on the passive node. If any of these events occur, you might need to manually re-seed the database. For more information about seeding the database, refer to the MSDN article The Microsoft Exchange Replication Service was unable to perform an incremental re-seed of the passive node. LiveVault Disaster Recovery Guide 51

Chapter 3 Recover an Exchange Server on Windows 2003 Computers 52 LiveVault Disaster Recovery Guide

CHAPTER 4 Recover an Exchange Server on Windows 2008 computers This procedure explains how to perform a disaster recovery for a Microsoft Exchange 2007/2010 Server on all versions of Windows 2008 that support Exchange 2007 and 2010. Perform a disaster recovery in the event of a computer failure or disaster such as: Hard disk failure or corruption, requiring you to rebuild the system drive Windows cannot start or has been corrupted Physical computer loss Assumptions The following assumptions are made in these procedures: You configured your backup to protect the full computer (including its general files and directories, its databases and applications, and its system state) and that the initial synchronization completed for the computer. The LiveVault service can restore only files, directories, system state, and metadata that you have backed up with the LiveVault Service. You configured one or more Exchange backup policies to protect your Exchange data in a transactionally-safe manner. LiveVault Disaster Recovery Guide 53

Chapter 4 Recover an Exchange Server on Windows 2008 computers For more information on backing up Exchange with an Exchange backup policy, refer to the LiveVault Web Management Help system. All Windows functions worked before the disaster occurred. All databases and applications functions worked before the disaster occurred. Summary of steps To recover your computer from a disaster, complete the following tasks: 1. Submit a media restore device request 2. Suspend backups on the original computer 3. Disable NIC on the recovering computer 4. Verify the keyboard and mouse type 5. Install the operating system on the recovering computer 6. Install the same service packs as on the original computer 7. Verify the computer name of the recovering computer 8. Restart the computer 9. Configure the local drives 10. Remove Roles from the recovering computer 11. Disable the screen saver 12. Install the agent software on the recovering computer 13. Restart Windows in safe mode 14. Log on to recovering computer with local administrator rights 15. Define and run an Exchange file restore policy 16. Restart the recovering computer in normal mode 17. Enable the NIC 18. Test the recovered computer 19. Update or repair the agent software 20. Resume backups on the recovered computer 21. Complete the Recovery on Standalone Exchange Configurations 22. Complete the Recovery on Exchange 2010 DAG Configurations 23. Complete the Recovery on Exchange 2007 CCR Configurations 54 LiveVault Disaster Recovery Guide

Detailed steps Detailed steps Complete the following procedures to recover your computer Autonomy recommends that you print out this chapter, and use it as a checklist for your disaster recovery process. Complete the following procedures to recover your computer. 1 Submit a media restore device request If you request a restore device, it takes at least 24 hours to ship the device. However, you can proceed with these instructions while you wait for your restore device to arrive. If you are restoring over the Internet, skip this step. 2 Suspend backups on the original computer To suspend backups, complete the following steps: 1. In Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select Suspend backup. 1. Click Save. 3 Disable NIC on the recovering computer If the recovering computer contains two Network Interface Cards (NICs), disable one of them: If the NIC is a separate card that you can remove, remove it. If it is an onboard NIC, disable the NIC using the BIOS interface. For more information, see the hardware vendor s documentation. Otherwise, disable the NIC through the Windows Device Manager after you install the Windows operating system (in step 6). You do not need to restart the computer after you disable the NIC. LiveVault Disaster Recovery Guide 55

Chapter 4 Recover an Exchange Server on Windows 2008 computers 4 Verify the keyboard and mouse type If possible, use the same type of keyboard and mouse on the target computer as those on the original computer, that is, USB or PS/2. 5 Install the operating system on the recovering computer Install the Windows operating system on the recovering computer, according to the following requirements. If possible, use the same media used to install the operating system on the failed computer. Install the same operating system version of Windows that existed on the original computer. Name the computer to the same name as the original computer. The Windows setup program provides a suggested computer name by default; for example w2008xr1fan. If the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Install Windows to the same directory on the recovering computer as on the original computer. For example, if the original computer's installation directory was c:\windows, then install Windows to c:\windows on the recovering computer. Install only Accessories and Utilities when prompted to specify the Windows components to install. Clear the check boxes for all components except Accessories and Utilities. Do not install the other Windows components (for example, Active Directory, Certificate Services, or Internet Information Services). The disaster recovery restores all other components. If you install them, the restore and the disaster recovery can fail. If you install the IIS components now, the IIS components that the LiveVault service restores will not work. However, if you must install the IIS components now (for example, because you use a system imaging solution that includes these components), you will remove them later in the process. 6 Install the same service packs as on the original computer Install the same service packs that you had on the original computer. 56 LiveVault Disaster Recovery Guide

Detailed steps 7 Verify the computer name of the recovering computer Ensure that the recovering computer has the same computer name as that of the original computer. For example, if the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Assign the correct computer name to the recovering computer in order to run the system state restore. Otherwise, the recovering computer might not start correctly and the disaster recovery procedure will fail. 8 Restart the computer Restart the recovering computer. 9 Configure the local drives Configure the disk drive letters and partitions on the recovering computer to match those that existed on the original computer: Use the same partitions. If the original computer had partitions D: and E:, configure the recovering computer partitions on D: and E:. Otherwise, data restores can fail. Use adequately sized partitions. Ensure that the new partitions have adequate size to handle the restored data. For example, the recovering computer's C: drive must be at least as large as the original computer's C: drive. Format the recovering computer's partitions to be the same file system format as the original computer's partitions (NTFS, FAT, etc.). 10 Remove Roles from the recovering computer To remove roles, complete the following steps: 1. Click Start > All Programs > Administrative Tools > Server Manager. 2. In the Server Manager window, scroll down to Roles Summary, and then click Remove Roles. 3. Deselect Web Server (IIS) on the remove role wizard. 4. Click Remove Dependent Features and click Next. 5. Click Remove. LiveVault Disaster Recovery Guide 57

Chapter 4 Recover an Exchange Server on Windows 2008 computers 11 Disable the screen saver Complete the following steps: 1. Disable the screen saver. You cannot disable the screen saver after entering DSRM. 2. In the Power Options, disable the password protect. The password might change due to the restore. 12 Install the agent software on the recovering computer To install the agent software, complete the following steps: 1. From the Web Management Portal, select New Computer from the navigation pane. 2. Select the appropriate Agent for your operating system, and click Download. 3. Do not select Run on Download. 4. Save the file to a location on the recovering computer, and then run it with Administrator rights. 5. To run the install wizard, select Run. 6. To install the software in the appropriate destination folders, follow the instructions in the installation wizard. 7. Install the agent software to the same location on the recovering computer as it was on the original computer. Also, install the LiveVaultData directory to the same location as the original computer. After you click Finish and then Configure, the computer lets you configure your software. The configuration wizard opens. 8. To validate your account, provide your user name and password combination in the configuration wizard. 9. Click Next. 10.Select Recovering a complete system. 11.Select the name of the original computer you are recovering from the list of computer names. 12.Click Next. 13.Provide the encryption key password. This is the encryption key password that you entered when you first installed the software on the original computer. The configuration wizard generates the key. 58 LiveVault Disaster Recovery Guide

Detailed steps 13 Restart Windows in safe mode To use the BCDEDIT utility on the Microsoft Windows 2008 recovering computer, complete the following steps: 1. In Windows, click Start, and then click Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /set safeboot dsrepair 4. Restart the computer. The computer starts in safe mode. 14 Log on to recovering computer with local administrator rights After the computer restarts, log on to Windows with local Administrator rights. After you log on, do not log off or lock the computer for the remainder of this procedure. LiveVault Disaster Recovery Guide 59

Chapter 4 Recover an Exchange Server on Windows 2008 computers 15 Define and run a file restore policy Define and run a restore job that restores all of your files, directories, and the system state. IMPORTANT You must restore the system state when you restore your files and directories. To create the restore job, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The Selection tab opens. 4. Name the Restore policy. 5. Select the version and time of the backup to restore. 6. To select all files and directories that you want to restore, use the Selection tab. 7. Select the System State check box. 8. Select the Options tab. The Options tab opens. 9. Select the check box Overwrite open files when the computer is restarted. 10.To perform the restore, click Next. The Restore job is submitted, and you return to the Restore summary tab. 11.Ensure that this restore has completed correctly before you go to the next step. 12.Do not restart the recovering computer before you go to the next step. NOTE You can perform a System State restore only once without a restart. If you cancel the restore, or it restarts, you must restart before you try again. 60 LiveVault Disaster Recovery Guide

Detailed steps 16 Define and run an Exchange file restore policy To restore an Exchange policy, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The What would you like to restore page opens. 4. Select Exchange Server, and then click Next. 5. In the Name to use for this restore request box, enter a name for the restore job. 6. Select Policy filter, and then select Exchange. 7. From the Version menu, select the backup version from which you want to restore the Mailbox and Public Folder stores. The most recent version is the default. 8. Select the top-level object in the object view of your Exchange Server's backed-up file structure. This ensures that you will restore all the files on the server. 9. In the Restore Request form, select the Options tab. 10.Select File Restore. 11.Select Overwrite existing files even if restored file is older. 12.Select Overwrite open files when the computer is rebooted. 13.Select Restore the Original Backup Security Attributes, and then click Next. The Restore Summary page opens. 14.Review your selections. LiveVault Disaster Recovery Guide 61

Chapter 4 Recover an Exchange Server on Windows 2008 computers 15.Perform one of the following actions: To make changes to the restore request, click Previous. To accept the restore request and start the restore process, click Done. After you click Done, the LiveVault service starts to process of the restore request. 16.Review the restore job log on the Exchange Server computer to which you restored the files. Verify that the Mailbox and/or Public Folder Store was restored as expected. To restore a different version, perform this procedure again and choose an older version. 17 Restart the recovering computer in normal mode To resume normal startup, complete the following steps: 1. In Windows, click Start, and then Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /deletevalue safeboot 18 Enable the NIC If you had to disable a NIC for the disaster recovery, complete the following steps to enable that NIC: If the NIC is a separate card that was removed, insert the card. If it is an onboard NIC, use the BIOS interface to enable the NIC. For more information, see the hardware vendor s documentation. If you disabled the NIC through the Windows Device Manager, it might be enabled for you. Verify the NIC's status in Device Manager and enable it if necessary. After you enable the NIC, you might need to restart the recovered computer, and then configure the NIC. 62 LiveVault Disaster Recovery Guide

Detailed steps 19 Test the recovered computer If the recovered computer fails to appear on the network, verify the following indicators: Analyze the ipconfig output for errors. Analyze Device Manager for errors. Analyze the system log for errors. Analyze the restore agent reports for errors. Verify that the Databases are mounted correctly. Look for errors in the Windows Event Viewer related to MSExchange, MSExchangeRepl or VSS, after the Reboot. If this is a DAG configuration, take the following extra precautions: Let the Exchange DAG replication finish copying the log files to the passive databases. During this time, the replication status might be displayed as "Initializing". Verify that the replication status is shown as "Healthy" on Active and Passive nodes. If necessary, refer to your Windows documentation to perform these tasks. 20 Update or repair the agent software It is possible that the restore might have caused older files to be installed on the recovering system, which can cause an Agent software conflict. To ensure that you have no conflict, complete the following steps: 1. Upgrade your computer to the most recent version of Agent software. 2. If you receive an option to Repair, select it. 3. When you are prompted to restart, restart the computer. LiveVault Disaster Recovery Guide 63

Chapter 4 Recover an Exchange Server on Windows 2008 computers 21 Resume backups on the recovered computer To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. Complete the Recovery on Standalone Exchange Configurations If you are recovering a single standalone Exchange database, the mailbox database status should be Mounted. If the mailbox database status is Dismounted, try to mount the database manually. Verify the mounting failure logs in the Windows event viewer. Complete the Recovery on Exchange 2010 DAG Configurations Verify the group s status If you are recovering an Exchange server in a DAG configuration, you may need to take additional steps to get the server back up and running. After your restore, open the Exchange Failover Cluster Manager console, and verify the following conditions: All Storage resources (disks) are online. All network interfaces (public and private) are online. 64 LiveVault Disaster Recovery Guide

Configurations Complete the Recovery on Exchange 2010 DAG Services and Applications for Exchange are online. All databases of the configuration are online. Verify Databases and Replication After performing the Exchange restore, verify that all appropriate databases are mounted, and replication is in a state that allows the agent to resume backups. Backups can take place successfully when replication is in the following states, depending on which node the agent is installed on: Active state Mounted Passive state Healthy Manually Copy Exchange Files If you perform a redirected restore to a different folder on the same computer, you may have to manually copy Exchange files to make Exchange functional again after the restore. Refer to your Microsoft Exchange documentation for instructions on manually dismounting the databases, copying Exchange files from one location to another, and remounting the databases. Seed the Exchange Database If Exchange replication is not synchronized after a successful restore, and has a Failed status, update the storage group copy to reseed the nodes or databases. Update the storage group copy status and delete the existing files. If the state is Initializing, you must wait until the logs are copied over from the Active to the Passive nodes/databases before replication is functional. Refer to your Microsoft Exchange documentation for instructions on updating the storage group status and seeding the Exchange database. Remount the Public Store Database If the mailbox database has a Failed or Suspended status, update the mailbox database copy using the Update Database Copy option for reseeding to display the mailbox database status as Healthy. LiveVault Disaster Recovery Guide 65

Chapter 4 Recover an Exchange Server on Windows 2008 computers Search for Replication Event Errors After performing a disaster recovery, the replication status might not have a Healthy status. This occurs when the passive database is unable to perform an incremental reseed of a passive database, or if logs are missing. Analyze the Windows Event viewer to look for related events. You might need to manually re-seed the database. For more information about seeding the database, refer to the MSDN article The Microsoft Exchange Replication Service was unable to perform an incremental re-seed of the passive node. Complete the Recovery on Exchange 2007 CCR Configurations Verify the Cluster s Status If you are recovering an Exchange 2007 server in a CCR configuration, you may need to take additional steps to get the node back up and running. After your restore, open the Exchange Failover Cluster Manager console, and verify the following conditions: That all Storage resources (disks) are online. That all network interfaces (public and private) are online. That Services and Applications for Exchange is online. That both nodes of the configuration are online. Verify Databases and Replication After performing the Exchange restore, verify that all appropriate databases are mounted, and replication is in a state that allows the agent to resume backups. Backups can take place successfully when replication is in the following states, depending on which node the agent is installed on: Active state Healthy ServiceDown Failed Unknown 66 LiveVault Disaster Recovery Guide

Configurations Complete the Recovery on Exchange 2007 CCR Passive state Healthy Manually Copy Exchange Files If you perform a redirected restore to a different folder on the same computer, you may have to manually copy Exchange files to make Exchange functional again after the restore. Refer to Microsoft Exchange documentation for instructions on manually dismounting the databases, copying Exchange files from one location to another, and remounting the databases. Seed the Exchange Database If Exchange CCR replication is not synchronized after a successful restore, and has a Failed status, update the storage group copy to reseed the databases. Update the storage group copy status and delete the existing files. If the state is Initializing, you must wait until the logs are copied over from the Active node to the Passive node before replication is functional. Refer to Microsoft Exchange documentation for instructions on updating the storage group status and seeding the Exchange database. Remount the Public Store Database If the public store database is down after a successful restore, and replication status is Unknown or ServiceDown, remount the public store database to resume backups. For more information, refer to the Microsoft article Planning for Cluster Continuous Replication, and browse to the section "Cluster Continuous Replication and Public Folder Databases". Search for Replication Event Errors After performing a disaster recovery, the replication status might not have a Healthy status. This occurs when the passive node is unable to perform an incremental re-seed of the passive node, or if logs are missing. Analyze the Windows Event viewer to look for the following events: MSExchangeRepl 2056: The Exchange Replication service could not perform an incremental reseed of the passive node because the logs on the active node have diverged too widely from the logs on the passive node. MSExchangeRepl 2057: The Exchange Replication service could not perform an incremental reseed of the passive database copy because replication was suspended for the storage group specified in the event description. This event LiveVault Disaster Recovery Guide 67

Chapter 4 Recover an Exchange Server on Windows 2008 computers is caused when an incremental reseed must be initiated but the storage group copy is currently suspended. MSExchangeRepl 2058: The Exchange Replication service could not perform an incremental reseed of the passive node because the service encountered an error as specified by the error code in the event description. MSExchangeRepl 2081: The Exchange Replication service could not perform an incremental reseed of the storage group on the passive node because the service could not compare a required log file that is located on the active node with the log file of the same generation ID that is located on the passive node. If any of these events occur, you might need to manually re-seed the database. For more information about seeding the database, refer to the MSDN article The Microsoft Exchange Replication Service was unable to perform an incremental re-seed of the passive node. 68 LiveVault Disaster Recovery Guide

CHAPTER 5 Recover a SQL Server with a SQL-aware policy This procedure explains how to perform a disaster recovery for a Microsoft SQL server that was backed up with an SQL policy. Failures or disasters include the following types of events: Hard disk failure or corruption, which requires you to rebuild the system drive Windows cannot start or is corrupted Physical computer loss Assumptions The following assumptions are made in these procedures: You configured your backup to protect the full computer (including its general files and directories, its databases and applications, and its system state) and that the initial synchronization completed for the computer. The LiveVault service can restore only files, directories, system state, and metadata that you have backed up with the LiveVault Service. You configured one or more SQL Backup Policies to protect your SQL data in a transactionally-safe manner. LiveVault Disaster Recovery Guide 69

Chapter 5 Recover a SQL Server with a SQL-aware policy For more information on backing up SQL with SQL backup policies, refer to the LiveVault Web Management Help system. All Windows functions worked before the disaster occurred. All databases and applications functions worked before the disaster occurred. Summary of steps To recover your computer from a disaster, complete the following tasks: 1. Submit a media restore device request 2. Suspend backups on the original computer 3. Disable NIC on the recovering computer 4. Verify the keyboard and mouse type 5. Install the operating system on the recovering computer 6. Install the same service packs as on the original computer 7. Verify the computer name of the recovering computer 8. Restart the computer 9. Configure the local drives 10. Remove IIS Components from recovering computer 11. On Windows 2003 computers, copy the boot.ini file 12. Disable the screen saver 13. Install the agent software on the recovering computer 14. Restart Recovering Computer in DSRM 15. Log on to recovering computer with local administrator rights 16. Define and run a file restore policy 17. Define and run a SQL file restore policy 18. On Windows 2000/2003, compare boot.ini files 19. Restart the recovering computer in normal mode 20. Enable the NIC 21. Test the recovered computer 22. Update or repair the agent software 23. Resume backups on the recovered computer<xref_italic> 70 LiveVault Disaster Recovery Guide

Detailed steps Detailed steps Before you recover your computer, print this chapter, and use it as a checklist for your disaster recovery process. 1 Submit a media restore device request If you request a restore device, it takes at least 24 hours to ship the device. However, you can proceed with these instructions while you wait for your restore device to arrive. If you are restoring over the Internet, skip this step. 2 Suspend backups on the original computer To suspend backups, complete the following steps: 1. In the LiveVault Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select Suspend backup. 1. Click Save. 3 Disable NIC on the recovering computer If the recovering computer contains two Network Interface Cards (NICs), disable one of them: If the NIC is a separate card that you can remove, remove it. If it is an onboard NIC, disable the NIC using the BIOS interface. For more information, see the hardware vendor s documentation. Otherwise, disable the NIC through the Windows Device Manager after you install the Windows operating system (in step 6). You do not need to restart the computer after you disable the NIC. 4 Verify the keyboard and mouse type If possible, use the same type of keyboard and mouse on the target computer as those on the original computer, that is, USB or PS/2. LiveVault Disaster Recovery Guide 71

Chapter 5 Recover a SQL Server with a SQL-aware policy 5 Install the operating system on the recovering computer Install the Windows operating system on the recovering computer, according to the following requirements. If possible, use the same media used to install the operating system on the failed computer. Install the same operating system version of Windows that existed on the original computer. Name the computer to the same name as the original computer. The Windows setup program provides a suggested computer name by default; for example w2008xr1fan. If the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Install Windows to the same directory on the recovering computer as on the original computer. For example, if the original computer's installation directory was c:\windows, then install Windows to c:\windows on the recovering computer. Install only Accessories and Utilities when prompted to specify the Windows components to install. Clear the check boxes for all components except Accessories and Utilities. Do not install the other Windows components (for example, Active Directory, Certificate Services, or Internet Information Services). The disaster recovery will restore all other components. If you install them, the restore and the disaster recovery can fail. If you install the IIS components now, the IIS components that the LiveVault service restores will not work. However, if you must install the IIS components now (for example, because you use a system imaging solution that includes these components), you will remove them later in the process. 6 Install the same service packs as on the original computer Install the same service packs that you had on the original computer. 7 Verify the computer name of the recovering computer Ensure that the recovering computer has the same computer name as that of the original computer. For example, if the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. IMPORTANT Assign the correct computer name to the recovering computer in order to run the system state restore. Otherwise, the recovering computer might not start correctly and the disaster recovery procedure will fail. 8 Restart the computer Restart the recovering computer. 72 LiveVault Disaster Recovery Guide

Detailed steps 9 Configure the local drives Configure the disk drive letters and partitions on the recovering computer to match those that existed on the original computer: Use the same partitions. If the original computer had partitions D: and E:, give the recovering computer partitions on D: and E:. Otherwise, data restores can fail. Use adequately sized partitions. Ensure that the new partitions have adequate size to handle the restored data. For example, the recovering computer's C: drive must be at least as large as the original computer's C: drive. Format the recovering computer's partitions to be the same file system format as the original computer's partitions (NTFS, FAT, etc.). 10 Remove IIS Components from recovering computer Determine whether any Internet Information Services (IIS) components were installed during the Windows installation. To remove any that were installed, complete the following steps: 1. Open Control Panel. 2. Double-click the Add/Remove Programs icon. The Add/Remove list opens. 3. On the left side of the control panel, click the Add/Remove Windows Components icon. The Windows Components Wizard opens. 4. In the Windows Components Wizard, locate the Internet Information Services item. If the IIS check box is selected, IIS components are installed. 5. If the IIS check box is selected, clear the check box and then follow the instructions in the wizard to remove the IIS services components. You do not need to restart. NOTE If IIS components are installed and you do not perform this step, the IIS components that the LiveVault service restores may not work. 11 On Windows 2003 computers, copy the boot.ini file To copy the boot.ini file, complete the following steps: 1. Make a copy of the boot.ini file (in the recovering computer's root directory). 2. Name the copy something similar to BootFromCD_101504.ini (where 101504 represents the current date) to ensure no confusion exists between the copy and the restored boot.ini file, and to differentiate this copy from any other copies. 3. This copy will be referenced later during the disaster recovery, so note the copy's name. LiveVault Disaster Recovery Guide 73

Chapter 5 Recover a SQL Server with a SQL-aware policy 12 Disable the screen saver Disable the screen saver. You cannot disable the screen saver after going into DSRM. In the Power Options, disable the password protect. The password might change due to the restore. 13 Install the agent software on the recovering computer To install the agent software, complete the following steps: 1. From the Web Management Portal, select New Computer from the navigation pane. 2. Select the appropriate Agent for your operating system, and click Download. 3. Do not select Run on Download. 4. Save the file to a location on the recovering computer, and then run it with Administrator rights. 5. To run the install wizard, select Run. 6. To install the software in the appropriate destination folders, follow the instructions in the installation wizard. 7. Install the agent software to the same location on the recovering computer as it was on the original computer. Also, install the LiveVaultData directory to the same location as the original computer. After you click Finish and then Configure, the computer lets you configure your software. The configuration wizard opens. 8. To validate your account, provide your user name and password combination in the configuration wizard. 9. Click Next. 10.Select Recovering a complete system. 11.Select the name of the original computer you are recovering from the list of computer names. 12.Click Next. 13.Provide the encryption key password. This is the encryption key password that you entered when you first installed the software on the original computer. The configuration wizard generates the key. 74 LiveVault Disaster Recovery Guide

Detailed steps 14 Restart Recovering Computer in DSRM Restart Windows 2003 in DSRM mode On Windows 2003 computers, use Directory Services Restore Mode (DSRM) even if the computer is not a domain controller. For more information about Directory Services Restore Mode, refer to the Windows documentation. To restart the computer in DSRM mode, complete the following steps: 1. Restart the computer. 2. During the normal start-up process, look for the Windows start-up options message at the bottom of the window, for example: For troubleshooting and advanced startup options for Windows 2003, press F8 3. When you see this message, press F8. You will only see this message for a few seconds. Press F8 while you can see it. 4. From the Windows Advanced Options Menu, select Directory Services Restore Mode and press Enter. To restart in Directory Services Restore Mode if you did not press F8, complete the following steps: 1. Open the boot.ini file in the recovering computer's root directory. 2. Go to the [operating systems] section and add the following switch to the end of the line that specifies the start path: /safeboot:dsrepair /sos For example: [operating systems] multi(0)disk(0)rdisk(0)partition(1)\ WINNT=;Microsoft Windows 2000 Server; /fastdetect /safeboot:dsrepair / sos 3. Restart the recovering computer. IMPORTANT Stay in DSRM mode until you are instructed to restart into normal mode. Restart Windows 2008 in safe mode To use the BCDEDIT utility on Microsoft Windows 2008 recovering computers, complete the following steps: 1. In Windows, click Start, and then click Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /set safeboot dsrepair 4. Restart the computer. The computer restarts in safe mode. LiveVault Disaster Recovery Guide 75

Chapter 5 Recover a SQL Server with a SQL-aware policy 15 Log on to recovering computer with local administrator rights After the computer restarts, log on to Windows with local Administrator rights. After you log on, do not log off or lock the computer during this procedure. 16 Define and run a file restore policy Define and run a restore job that restores all of your files, directories, and the system state. IMPORTANT You must restore the system state when you restore your files and directories. To create the restore job, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The Selection tab opens. 4. Name the Restore policy. 5. Select the version and time of the backup to restore. 6. To select all files and directories that you want to restore, use the Selection tab. 7. Select the System State check box. 8. Select the Options tab. The Options tab opens. 9. Select the check box Overwrite open files when the computer is restarted. 10.To perform the restore, click Next. The Restore job is submitted, and you return to the Restore summary tab. 11.Ensure that this restore has completed correctly before you go to the next step. 12.Do not restart the recovering computer before you go to the next step. IMPORTANT You can perform a System State restore only once without a restart. If you cancel the restore, or it restarts, you must restart the recovering computer before you try again. 76 LiveVault Disaster Recovery Guide

Detailed steps 17 Define and run a SQL file restore policy To restore a SQL policy, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The What would you like to restore page opens. 4. Select SQL Server, and then click Next. 5. In the Name to use for this restore request box, enter a name for the restore job. 6. Select Policy filter, and then select All Policies. 7. From the Version menu, select the backup version that contains the version of the database(s) you want to restore. The most recent version is the default. 8. Select the top-level objects in the object view of your SQL Server's backed-up file structure. This ensures that you will restore all the files on the server. 9. In the Restore Request form, select the Options tab. 10.Select File Restore. 11.Select Overwrite existing files even if restored file is older. 12.Select Overwrite open files when the computer is rebooted. 13.Select Restore the Original Backup Security Attributes, and then click Next. The Restore Summary page opens. 14.Review your selections. 15.Perform one of the following actions: To make changes to the restore request, click Previous. To accept the restore request and start the restore process, click Done. After you click Done, the LiveVault service starts to process of the restore request. 16.Review the restore job log on the SQL Server computer to which you restored the files. Verify that SQL server was restored as expected. To restore a different version, perform this procedure again and choose an older version. LiveVault Disaster Recovery Guide 77

Chapter 5 Recover a SQL Server with a SQL-aware policy 18 On Windows 2000/2003, compare boot.ini files To compare the restored boot.ini file and the copy of the boot.ini file, complete the following steps: 1. Go to the computer's root directory, and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101504.ini) that you made earlier in this procedure. 2. Compare the boot drive value (that is, the number of the partition from which the computer will start, for example: partition(1)). 3. If the boot drive values in these files match, then skip to Restart the computer. If the boot drive values in these files do not match, continue with this procedure. The restored boot.ini file's (for example, boot.ini) read-only attribute is set. 4. To clear the read-only attribute, complete the following steps: a. In Windows Explorer, go to and select the file. b. Right-click the file and select Properties on the short-cut menu. c. In the Properties dialog box, on the General tab, in the Attributes group, clear the Read-only check box. Then click OK. 5. Change the value in the restored boot.ini file (for example, boot.ini) to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101504.ini). Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. 19 Restart the recovering computer in normal mode Resume normal startup: Windows 2008 only To resume normal startup, complete the following steps: 1. In Windows, click Start, and then Run. The Run window opens. 2. Type cmd and press Enter. The Command Prompt window opens. 3. Enter the following command: BCDEDIT /deletevalue safeboot Restart Windows 2003 computers in normal mode Restart the recovering computer in normal mode. If you receive a Windows message that indicates that you must restart the computer because the computer has found new devices, restart the computer again as specified. After Windows finds all devices, restart the computer. 78 LiveVault Disaster Recovery Guide

Detailed steps 20 Enable the NIC If you had to disable a NIC for the disaster recovery, complete the following steps to enable that NIC: If the NIC is a separate card that was removed, insert the card. If it is an onboard NIC, use the BIOS interface to enable the NIC. For more information, see the hardware vendor s documentation. If you disabled the NIC through the Windows Device Manager, it might be enabled for you. Verify the NIC's status in Device Manager and enable it if necessary. After you enable the NIC, you might need to restart the recovered computer, and then configure the NIC. 21 Test the recovered computer If the recovered computer fails to appear on the network, verify the following indicators: Analyze the ipconfig output for errors. Analyze Device Manager for errors. Analyze the system log for errors. Analyze the restore agent reports for errors. Verify that the databases are mounted correctly. Look for SQL-related errors in the Windows Event log. If necessary, refer to your Windows documentation to perform these tasks. 22 Update or repair the agent software It is possible that the restore might have caused older files to be installed on the recovering system, which can cause an Agent software conflict. To ensure that you have no conflict, complete the following steps: 1. Upgrade your computer to the most recent version of Agent software. 2. If you receive an option to Repair, choose the option. 3. When you are prompted to restart, restart the computer. LiveVault Disaster Recovery Guide 79

Chapter 5 Recover a SQL Server with a SQL-aware policy 23 Resume backups on the recovered computer To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. Post-restore considerations If you made changes to any of the SQL databases you restored after they were backed up, there may be discrepancies in the restored databases. After restoring your SQL databases, consider the following factors as you determine the status of your SQL environment: Any database created after the backup policy that you restored must be manually attached, or restored separately. Any user login changes made after the backup was created are lost. You must redo these changes in the restored databases. On rare occasions, some databases might be stuck in a "restoring..." state. You must manually detach these databases and reattach them, or restore them again. To manually detach a database, run the following stored procedure: sp_detach_db @dbname='[database_name]' 80 LiveVault Disaster Recovery Guide

Post-restore considerations LiveVault Disaster Recovery Guide 81

Chapter 5 Recover a SQL Server with a SQL-aware policy 82 LiveVault Disaster Recovery Guide

CHAPTER 6 Recover a Windows 2003 Small Business Server This procedure explains how to perform a disaster recovery for a Windows 2003 Small Business Server. Perform a disaster recovery in the event of a computer failure or disaster such as: Hard disk failure or corruption, requiring you to rebuild the system drive Windows cannot start or has been corrupted Physical computer loss Assumptions The following assumptions are made in these procedures: You configured your backup to protect the full computer (including its general files and directories, its databases and applications, and its system state) and that the initial synchronization completed for the computer. The LiveVault service can restore only files, directories, system state, and metadata that you have backed up with the LiveVault Service. You optionally configured an Exchange backup policy to protect your Exchange data in a transactionally-safe manner. LiveVault Disaster Recovery Guide 83

Chapter 6 Recover a Windows 2003 Small Business Server You optionally configured SQL backup policies to protect your SQL data in a transactionally-safe manner. All Windows functions worked before the disaster occurred. All databases and applications functions worked before the disaster occurred. Summary of steps To recover your computer from a disaster, complete the following tasks: 1. Submit a Media Restore device request 2. Suspend backups on the original computer 3. Disable NIC on the recovering computer 4. Verify the keyboard and mouse type 5. Install the operating system on the recovering system 6. Remove IIS Components from recovering computer 7. Verify the computer name of the recovering computer 8. Disable the screen saver 9. Install the same service packs as original computer 10. Configure the local drives on the recovering computer 11. Copy the boot.ini file 12. Install the agent software on the recovering computer 13. Restart Recovering Computer in DSRM 14. Log on to recovering computer with local administrator rights 15. Define and run a restore policy 16. Compare boot.ini files on the recovering computer 17. Define and run an Exchange file restore (optional) 18. Define and run a SQL file restore (optional) 19. Restart the recovering computer in normal mode 20. Determine whether you need an authoritative System State restore 21. Enable the NIC 22. Resolve short name issues 23. Test the recovered computer 24. Perform tests for an Exchange 2003 server 25. Update or repair the agent software 26. Resume backups on the recovered computer 84 LiveVault Disaster Recovery Guide

Detailed steps Detailed steps Follow these steps exactly to perform the disaster recovery. It is helpful to print this topic and check off each step as you complete it. 1 Submit a Media Restore device request If you request a restore device, it takes at least 24 hours to ship the device. However, you can proceed with these instructions while you wait for your restore device to arrive. If you are restoring over the Internet, skip this step. LiveVault Disaster Recovery Guide 85

Chapter 6 Recover a Windows 2003 Small Business Server 2 Suspend backups on the original computer To suspend backups, complete the following steps: 1. In the left pane of the LiveVault Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select the Suspend backup check box. Click Save. 3 Disable NIC on the recovering computer If the recovering computer contains two Network Interface Cards (NICs), disable one of them: If the NIC is a separate card that you can remove, remove it. If it is an onboard NIC, disable the NIC using the BIOS interface. For more information, see the hardware vendor s documentation. Otherwise, disable the NIC through the Windows Device Manager after you install the Windows operating system (in step 6). You do not need to restart the computer after you disable the NIC. 4 Verify the keyboard and mouse type If possible, use the same type of keyboard and mouse on the target computer as those on the original computer, that is, USB or PS/2. 86 LiveVault Disaster Recovery Guide

Detailed steps 5 Install the operating system on the recovering system Install the Windows operating system on the recovering computer, according to the following requirements. If possible, use the same media used to install the operating system on the failed computer. Install the same operating system version of Windows that existed on the original computer. Name the computer to the same name as the original computer. The Windows setup program provides a suggested computer name by default; for example w2008xr1fan. If the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Install Windows to the same directory on the recovering computer as on the original computer. For example, if the original computer's installation directory was c:\windows, then install Windows to c:\windows on the recovering computer. When the installation restarts after the initial part of the installation, the system displays a Continuing Microsoft Windows Small Business Server Setup window. Click Cancel. IMPORTANT You must cancel out of the installation at this time. Otherwise, you will have to repeat this disaster recovery process. Verify that the system meets the following criteria at this point: It is not a domain controller. Exchange is not installed. It is not a DNS or DHCP server. SQL is not installed. LiveVault Disaster Recovery Guide 87

Chapter 6 Recover a Windows 2003 Small Business Server 6 Remove IIS Components from recovering computer Determine whether any Internet Information Services (IIS) components were installed during the Windows installation. To remove any that were installed, complete the following steps: 1. Open Control Panel. 2. Select Add/Remove Programs. The Add/Remove Program page opens. 3. Click Add/Remove Windows Components. The Windows Components Wizard opens. 4. In the Windows Components Wizard, locate the Internet Information Services item. If the IIS check box is selected, IIS components are installed. If the IIS check box is selected, clear the check box and then follow the instructions in the wizard to remove the IIS services components. You do not need to restart the system. 7 Verify the computer name of the recovering computer Ensure that recovering computer has the same computer name as that of the original computer. For example, if the original computer was named corporate.megacompany.com, then you must assign the computer name corporate to the recovering computer. Assign the correct computer name to the recovering computer in order to run the system state restore. Otherwise, the recovering computer might not start correctly and the disaster recovery procedure will fail. 8 Disable the screen saver Complete the following steps: 1. Disable the screen saver. You cannot disable the screen saver after entering DSRM. 2. In the Power Options, disable the password protect. The password might change due to the restore. 9 Install the same service packs as original computer Install the same service packs that you had on the original failed computer. 88 LiveVault Disaster Recovery Guide

Detailed steps 10 Configure the local drives on the recovering computer Configure the disk drive letters and partitions on the recovering computer to match those that existed on the original computer: Create the same partitions. If the original computer had partitions D: and E:, create the recovering computer partitions as D: and E:. Otherwise, data restores can fail. Use adequately sized partitions. Ensure that the new partitions have adequate size to handle the restored data. For example, the recovering computer's C: drive must be at least as large as the original computer's C: drive. Format the recovering computer's partitions to be the same file system format as the original computer's partitions (NTFS, FAT, etc.). 11 Copy the boot.ini file To copy the boot.ini file, complete the following steps: 1. Copy the boot.ini file (in the recovering computer's root directory). 2. Name the copy something similar to BootFromCD_101504.ini (where 101504 represents the current date) to ensure no confusion exists between the copy and the restored boot.ini file, and to differentiate this copy from any other copies. This copy will be referenced later during the disaster recovery, so note the name of the file. LiveVault Disaster Recovery Guide 89

Chapter 6 Recover a Windows 2003 Small Business Server 12 Install the agent software on the recovering computer To install the agent software onto the recovering computer, complete the following steps: 1. From the Web Management Portal, select New Computer from the navigation pane. 2. Select the appropriate Agent for your operating system, and click Download. 3. Do not select Run on Download. 4. Save the file to a location on the recovering computer, and then run it with Administrator rights. 5. To run the install wizard, select Run. 6. To install the software in the appropriate destination folders, follow the instructions in the installation wizard. 7. Install the agent software to the same location on the recovering computer as it was on the original computer. Also, install the LiveVaultData directory to the same location as the original computer. After you click Finish and then Configure, the computer lets you configure your software. The configuration wizard opens. 8. To validate your account, provide your user name and password combination in the configuration wizard. 9. Click Next. 10.Select Recovering a complete system. 11.Select the name of the original computer you are recovering from the list of computer names. 12.Click Next. 13.Provide the encryption key password. This is the encryption key password that you entered when you first installed the software on the original computer. The configuration wizard generates the key. 90 LiveVault Disaster Recovery Guide

Detailed steps 13 Restart Recovering Computer in DSRM On Windows 2000 and 2003 computers, use Directory Services Restore Mode (DSRM) even if the computer is not a domain controller. For more information about Directory Services Restore Mode, see your Windows documentation. To restart the computer in DSRM mode, complete the following steps: 1. Restart the computer. 2. During the normal start-up process, look for the Windows start-up options message at the bottom of the window, for example: For troubleshooting and advanced startup options for Windows 2003, press F8 3. When you see this message, press F8. You will only see this message for a few seconds. Press F8 while you can see it. 4. From the Windows Advanced Options Menu, select Directory Services Restore Mode and press Enter. To restart in Directory Services Restore Mode if you did not press F8, complete the following steps: 1. Open the boot.ini file in the recovering computer's root directory. 2. Go to the [operating systems] section and add the following switch to the end of the line that specifies the start path: /safeboot:dsrepair /sos For example: [operating systems] multi(0)disk(0)rdisk(0)partition(1)\ WINNT=;Microsoft Windows 2000 Server; /fastdetect / safeboot:dsrepair /sos 3. Restart the recovering computer. IMPORTANT Stay in DSRM mode until you are instructed to restart into normal mode. 14 Log on to recovering computer with local administrator rights After the computer restarts, log on to Windows with local Administrator rights. After you log on, do not log off or lock the computer for the remainder of this procedure. LiveVault Disaster Recovery Guide 91

Chapter 6 Recover a Windows 2003 Small Business Server 15 Define and run a restore policy Define and run a restore job that restores all of your files, directories, and the system state. IMPORTANT You must restore the system state when you restore your files and directories. To create the restore job, complete the following steps: 1. In the Web Management Portal, select the recovering computer. The Summary tab opens. 2. Select the Restore tab. 3. Click New Restore. The Restore wizard opens. 4. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. The Selection tab opens. 5. Name the Restore policy. 6. Select the version and time of the backup to restore. 7. To select all files and directories that you want to restore, use the Selection tab. 8. Select the System State check box. 9. Select the Options tab. The Options tab opens. 10.Select the check box Overwrite open files when the computer is restarted. 11.To perform the restore, click Next. The Restore job is submitted, and you return to the Restore summary tab. 12.Ensure that this restore has completed correctly before you go to the next step. 13.Do not restart the recovering computer before you go to the next step. IMPORTANT You can perform a System State restore only once without a restart. If you cancel the restore, or it restarts, you must restart before you try again. 92 LiveVault Disaster Recovery Guide

Detailed steps 16 Compare boot.ini files on the recovering computer To compare the restored boot.ini file and the copy of the boot.ini file, complete the following steps: 1. Go to the computer's root directory, and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101504.ini) that you made earlier in this procedure. 2. Compare the boot drive value (that is, the number of the partition from which the computer will start, for example: partition(1)). 3. If the boot drive values in these files match, then skip to Restart the computer. If the boot drive values in these files do not match, continue with this procedure. The restored boot.ini file's (for example, boot.ini) read-only attribute is set. 4. To clear the read-only attribute, complete the following steps: a. In Windows Explorer, go to and select the file. b. Right-click the file and select Properties on the short-cut menu. c. In the Properties dialog box, on the General tab, in the Attributes group, clear the Read-only check box. Then click OK. 5. Change the value in the restored boot.ini file (for example, boot.ini) to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101504.ini). Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. LiveVault Disaster Recovery Guide 93

Chapter 6 Recover a Windows 2003 Small Business Server 17 Define and run an Exchange file restore (optional) If you backed up Exchange data with a standard backup policy, skip to step 19. If you backed up Exchange data with an Exchange backup policy, you perform a file restore of Exchange data. To restore Exchange data backed up with an Exchange backup policy, complete the following steps: 1. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. 1. Click Next. 2. Select Exchange Server to restore data from the Exchange backup policies. 3. Name the Restore policy. 4. Select the version and time of the backup to restore. 5. Select all storage groups and mailbox databases. 6. Select the Options tab. The Restore Options tab opens. 7. Select File Restore. 8. Select the check box Overwrite open files when the computer is restarted. 9. Click Next. The Restore Summary page opens. 10.Click Done. The restore job is submitted, and you return to the Restore summary tab. Ensure that this restore has completed correctly before you continue. Do not restart the recovering computer before you go to Step 18. 94 LiveVault Disaster Recovery Guide

Detailed steps 18 Define and run a SQL file restore (optional) If you backed up SQL databases with a standard backup policy, skip to step 19. If you backed up SQL databases with a SQL backup policy, you perform a file restore of SQL data. To restore SQL data backed up with an SQL backup policy, complete the following steps: 1. Click New Restore. The Restore wizard opens. If you requested a restore device earlier, you must wait for your restore device to arrive. After it arrives, attach the device, and select Restore from device on network. If you are restoring over the Internet, select Restore data over the internet. 1. Click Next. 2. Select SQL Server to restore data from the SQL backup policies. 3. Name the Restore policy. 4. Select the version and time of the backup to restore. 5. Select all storage groups and mailbox databases. 6. Select the Options tab. The Restore Options tab opens. 7. Select File Restore. 8. Select the check box Overwrite open files when the computer is restarted. 9. Click Next. The Restore Summary page opens. 10.Click Done. The restore job is submitted, and you return to the Restore summary tab. Ensure that this restore has completed correctly before you continue. Do not restart the recovering computer before you go to Step 19. LiveVault Disaster Recovery Guide 95

Chapter 6 Recover a Windows 2003 Small Business Server 19 Restart the recovering computer in normal mode Restart the recovering computer in normal mode. If you receive a Windows message that indicates that you must restart the computer because the computer has found new devices, restart the computer again as specified. For example, if you are running Windows 2000 Service Pack 4 or followed the procedure in Microsoft Knowledge Base article 810161, at restart, Windows finds all devices as new hardware. Some services might not restart. You receive a prompt to restart the computer again (possibly multiple times) as the computer finds new devices. In this case, do not restart the computer each time you receive a prompt. After Windows finds all devices, restart the computer. 20 Determine whether you need an authoritative System State restore If the original computer is a Primary Domain Controller (PDC), determine if you need to perform an authoritative system state restore. If the original computer is not a Primary Domain Controller, skip this step and go to <xref_italic>enable the NIC. To determine if the computer is a PDC, complete the following steps: 1. Click the Start menu. 2. Select Administrative Tools>Active Directory Users and Computers. A list of computers opens. If only one Domain Controller is listed, this is the PDC. If multiple Domain Controllers are listed, contact your system administrator to determine is the recovering computer is the PDC. In most cases, you do not need to perform an authoritative system state restore. Performing an authoritative system state restore is complex and, if performed unnecessarily or incorrectly, can make your computer unusable. Use the following table to help you to determine whether an authoritative restore is necessary (if you have any questions, contact Customer Service for assistance): 96 LiveVault Disaster Recovery Guide

Detailed steps The original computer is... The Backup domain DB is... Is an authoritative restore needed? The only DC N/A No (no need to take over from another DC) A Backup DC; there is a Primary DC The Primary DC; there is a Backup DC The Primary DC; there is a Backup DC N/A Good Corrupted No (it would overwrite the PDC) No (the backup DC has the latest updates; after the PDC restarts, it will receive all the updates from the BDC) Yes; contact Customer Service and for more information, see <xref_italic>authoritative System State restore. 21 Enable the NIC If you had to disable a NIC for the disaster recovery, complete the following steps to enable that NIC: If the NIC is a separate card that was removed, insert the card. If it is an onboard NIC, use the BIOS interface to enable the NIC. For more information, see the hardware vendor s documentation. If you disabled the NIC through the Windows Device Manager, it might be enabled for you. Verify the NIC's status in Device Manager and enable it if necessary. After you enable the NIC, you might need to restart the recovered computer, and then configure the NIC. LiveVault Disaster Recovery Guide 97

Chapter 6 Recover a Windows 2003 Small Business Server 22 Resolve short name issues The following services might not start or be unable to report the correct messages in the event log without adjusting the short names or changing 8.3 short names to full names: SBSMonitoring SharePoint SQLCTR$SBSMonitoring SQLCTR$SharePoint To determine if a short-name discrepancy is the cause of the problem, complete the following steps: 1. In Windows, click Start, and then Settings>Control Panel>Administrative Tools>Services. 2. In the list of services on the right of the panel, right-click mssqlserver and choose properties. 3. Note the path and folder that Windows is looking in for the program. 4. In Windows or at a command prompt, navigate to the folder above, and note whether the program exists in that folder. If the program is there, the failure of SQL to launch is not due to a short-name discrepancy. For more information, consult your SQL documentation. If the program is not there, you have a short-name discrepancy. Continue with this procedure. 5. Complete the steps below to open a command prompt. a. In Windows, click Start, and then Run. The Run window opens. b. Type cmd and press Enter. The Command Prompt window opens. c. Enter the following command to change directory to Program Files: cd \Program Files d. Enter the following command: dir/x micro* Press Enter. 98 LiveVault Disaster Recovery Guide

Detailed steps 22 Resolve short name issues Browse to each folder until you locate the SQL program. Temporarily rename the folder that contains the SQL program. For example, if the folder containing the SQL program is Micros~1, rename Micros~1 to Temp_Micros~1. This forces Windows to reassign a new short name to that folder. 6. Temporarily rename the folder that Windows associates with the SQL program. For example, if the service is looking in Micros~4 to launch the program, rename Micros~4 to Temp_Micros~4. This forces Windows to reassign a new short name to that folder, which reestablishes the proper sequence of short names, so that SQL can find the correct folder and execute. You might have to temporarily rename other short-name folders as well, until the correct folder shuffles to the correct place in the numbering sequence. For example, when you rename Micros~1, the old Micros~2 becomes Micros~1 and the old Micros~3 becomes Micros~2. Keep track of the folders to avoid creating other discrepancies. 7. Rename the folder that contains the program to its original name. Windows dynamically reassigns the proper short name to this folder. Rename the other folder to its original name. Windows dynamically reassigns another short name to this folder. LiveVault Disaster Recovery Guide 99

Chapter 6 Recover a Windows 2003 Small Business Server 23 Test the recovered computer Perform the following tests to determine whether the recovered computer is working properly: Examine Windows Event Viewer logs. Ensure the recovered system is on the network. If the recovered system is not visible on the network, complete the following steps: a. Right-click My Network Places on your Windows Desktop. b. Select Properties. c. Right-click your Local Area Connection. d. Select Properties. e. Click OK. f. Repeat steps a-e for each configured Local Area Connection as required. Manually start those services, such as WINS, that depend on networking to start. If this is an Exchange 2003 Server, and the LiveVault service does not start, check your disks in Disk Manager. g. Go to Start > Settings > Control Panels > Administrative Tools. h. Open the Computer Management control panel. i. In the left-pane, select Disk Management. In the bottom-right pane, your disks are listed. If a disk is listed as Foreign, right-click the disk and import it. 100 LiveVault Disaster Recovery Guide

Detailed steps 24 Perform tests for an Exchange 2003 server this is an Exchange 2003 Server that was backed up with a standard backup policy, complete the following steps: 1. Start Exchange System Manger. 2. In Exchange System Manager, select the Exchange 2003 Server and verify that the Mailbox Stores and Public Folder Stores in each Information Storage group are mounted. 3. If a Mailbox or Public Folder Store in the Information Storage group is dismounted, mount it: a. Right-click on the Information Storage Group to expand the selection. b. Right-click on the Mailbox or Public Folder store that is dismounted. c. Select Mount on the shortcut menu. 4. To automatically mount a Mailbox or Public Folder Store in the Information Storage group, complete the following steps: a. Right-click on the Information Storage Group to expand the selection. b. Right-click on the Mailbox or Public Folder store. c. Select Properties on the short-cut menu. d. Select the Database tab, and clear the Do not mount this store at start-up option. If you run the Exchange Full-Text Indexing on this Exchange server, refer to the instructions in the Microsoft Knowledge Base article 295921 XADM: Disaster Recovery Does Not Correctly Setup Full-Text Indexing. You cannot rebuild the indexes without following this article. 25 Update or repair the agent software It is possible that the restore might have caused older files to be installed on the recovering system, which can cause an Agent software conflict. To ensure that you have no conflict, complete the following steps: 1. Upgrade your computer to the most recent version of Agent software. 2. If you receive an option to Repair, choose the option. When you are prompted to restart, restart the computer. LiveVault Disaster Recovery Guide 101

Chapter 6 Recover a Windows 2003 Small Business Server 26 Resume backups on the recovered computer To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. 102 LiveVault Disaster Recovery Guide

CHAPTER 7 Recover a DPM server This procedure explains how to recover a failed DPM server. The new DPM server is called the recovering server. To ensure that you can recover your Microsoft Data Protection Manager (DPM) server, you must have backed up all the data sources on the server, and the SQL database for the DPM server. This is the only way to ensure that your backup is configured to fully protect your servers and data. After recovering the server, you might need to take further steps to fully restore DPM. For more information, see the procedure Synchronize a restored database in a changed environment. Print this topic, and use the following steps as a checklist. LiveVault Disaster Recovery Guide 103

Chapter 7 Recover a DPM server Summary of Steps To recover your computer from a disaster, complete the following procedures: 1. Suspend backups on the computer 2. Install DPM on the recovering computer 3. Install the agent software 4. Configure the agent software 5. Restore the DPM Database 6. Synchronize the database 7. Restore missing data sources 8. Resume backups Recovering your DPM server To recover your DPM server, Complete the following procedures. 1 Suspend backups on the computer To suspend backups, complete the following steps: 1. In the Web Management Portal, select the server. The Computer Summary page opens. 2. In the right-pane, click Properties. The Computer Properties page opens. 3. Click Edit properties. The Edit Properties page opens. 4. Select the Suspend backup check box. 5. Click Save. This returns you to the Summary page. 2 Install DPM on the recovering computer On the recovering computer, install Microsoft Data Protection Manager (DPM) 2007, Service Pack 1 or Microsoft DPM 2010. For more information, refer to your Microsoft Windows documentation. 104 LiveVault Disaster Recovery Guide

Recovering your DPM server 3 Install the agent software To install the LiveVault agent software, complete the following steps: 1. Log in to the Web Management Portal. 2. From the Home page, select New Computer from the navigation pane. The Download page opens. 3. Select the option for your Windows DPM Server (2003 or 2008, 32- or 64-bit), and then click Download. 4. Click Run and follow the instructions in the install wizard to install the software in the appropriate destination folders. You must install the agent to the same location on the recovering DPM computer as it was on the original computer. You must also install the LiveVaultData directory to the same location as the original computer. 5. Click Finish. The Configuration Wizard opens. 4 Configure the agent software To configure the agent software, complete the following steps: 1. In the Configuration wizard, enter your user name and password combination to validate your account. 2. Select Reprovisioning a previously registered system. 3. From the list of computer names, select the name of the original computer you are recovering. 4. Provide the encryption key password. This is the encryption key password that you entered when you first installed software on the original computer. The configuration wizard will generate a key. 5. Restart the server. LiveVault Disaster Recovery Guide 105

Chapter 7 Recover a DPM server 5 Restore the DPM Database To restore the DPM database, complete the following steps: 1. Log in to the Web Management Portal. 2. In the left pane, select the Agent you installed on the recovering DPM server. 3. In the right pane, select the Restore tab. 4. Click New Restore. The Restore wizard opens. 5. Select one of the following options, based on how much data you are restoring, what bandwidth is available, and your budget. Restore data over the Internet. The Restore Request form opens, and lets you select the files you want to restore over the internet. Although there is a cost to having a media device shipped to you, it can take several days to restore data over the Internet. Have media device shipped to you. The Restore Decision page opens, where you can select the version of data to restore, and the shipping method. Click Next. The Restore Wizard Shipping Information page opens and requests the address for shipment of the appliance. When the restore device arrives, attach it to your network. You can then restore the backed-up files. 6. Select DPM SQL Database policy restore. The Selection page opens. 7. In the Name to use for this restore request field, specify the name for the restore. 8. From the Version field, specify the version to restore (optional). By default, the most recent version is restored, but consider carefully before accepting the default. If hardware problems led to the disaster, recent versions might be corrupted. You might want to select a version that occurred before any hardware problems became apparent. If possible, start up the failed computer in safe mode and check the logs, for example the System Application log. Verify if any input/output errors, permissions, or other disk errors are evident in the days preceding the disaster. If possible, select a version that was backed up before these errors started to occur. 9. Select Redirect restored file to a different location. 106 LiveVault Disaster Recovery Guide

Recovering your DPM server 10.Select Don t preserve directories. 11.Specify a path where the file will be restored. For example c:\restoreddb. 12.Click Next. The Confirmation page opens. 13.Confirm your selections, and click Done. The Restore Summary page opens. 14.Wait for the Restore job to complete before moving on to the next step. 6 Synchronize the database To synchronize the database, complete the following steps: 1. At the recovering DPM server, open the DPM Management shell. 2. In the DPM Management shell, enter the following command: Run DpmSync -RestoreDb -DbLoc [fully qualified path to the database you restored in step 4] For example: DpmSync -RestoreDb -DbLoc C:\RestoredDB\DPMDB2007RTM.mdf 3. In the DPM Management shell, enter the following command: Run DPMSync.exe sync 4. In the DPM Management shell, enter the following command: DPMSync.exe reallocatereplica This will reallocate any missing data source volumes. LiveVault Disaster Recovery Guide 107

Chapter 7 Recover a DPM server 7 Restore missing data sources To restore missing data sources, complete the following steps: 1. Log in to the Web Management Portal. 2. In the left pane, select the Agent you installed on the recovering DPM server. 3. Select the Restore tab. 4. Click New Restore. The Restore wizard opens. 5. Select one of the following options, based on how much data you are restoring, and what bandwidth is available, and your budget. Restore data over the internet. The Restore Request form opens, and lets you select the files you want to restore over the internet. Although there is a cost to having a media device shipped to you, it can take several days to restore data over the Internet. Have media device shipped to you. The Restore Decision form opens where you can select the version of data to restore and the shipping method. Click Next. The Restore Wizard Shipping Information form opens and requests the address for shipment of the appliance. When the restore device arrives, attach it to your network. You can then restore the backed-up files. 6. Select DPM policy restore. The Choose DPM Restore type page opens. 7. Select DPM recovery. The Selection page opens. 8. In the Name to use for this restore request, enter a name. 9. In the object tree in the left pane, navigate to the failed DPM server that contains the data sources you want to restore. 10.In the selection pane on the right, select and clear the check boxes next to the data sources to specify what to restore. 11.Click Next. A confirmation page opens. 12.Confirm your selections, and then click Done. You are returned to the summary page. 108 LiveVault Disaster Recovery Guide

environment Synchronize a restored database in a changed 8 Resume backups To resume backups, complete the following steps: 1. In the Web Management Portal, select the recovering computer. 2. In the right-pane, click Properties. The Properties page opens. 1. Click Edit properties. The Edit Properties page opens. 3. Select the Resume backup check box. The Backup Configuration Confirmation page opens. 4. Click Save. The agent resumes backing up the computer according the schedule in the backup policy. 9 Synchronize the database To synchronize the database, complete the following steps: 1. At the recovering DPM server, open the DPM Management shell. 2. In the DPM Management shell, enter the following command: Run DpmSync -RestoreDb -DbLoc [fully qualified path to the database you restored in step 4] For example: DpmSync -RestoreDb -DbLoc C:\RestoredDB\DPMDB2007RTM.mdf 3. In the DPM Management shell, enter the following command: Run DPMSync.exe sync 4. In the DPM Management shell, enter the following command: DPMSync.exe reallocatereplica This will reallocate any missing data source volumes. Synchronize a restored database in a changed environment The LiveVault service can backup and restore the SQL database that contains the DPM metadata. If you need to restore a backed up DPM SQL database there are special considerations, described below. Two scenarios when you might restore DPM s SQL database are: LiveVault Disaster Recovery Guide 109

Chapter 7 Recover a DPM server Recovering a failed DPM server. In this case you restore the database and the data sources (replicas) from an earlier time. After the restore there are likely to be inconsistencies between the DPM server (database and data sources) and the current state of the DPM-protected servers. It is also possible that the restored data sources are not in sync with the restored database because the database and the data sources may have been backed up at slightly different times. To recover from a corruption or user error on the DPM server that affects the database. In this scenario, the database is restored and the data sources on the DPM server are left intact. It is possible that the data sources are not in sync with the restored database because the database was restored at an earlier time. This chapter covers various scenarios that might occur if a DPM environment changed after the last backup of the DPM database taken. These procedures address the following scenarios: Data sources and Agent are out of sync. Various parameters, such as schedule, recovery points, disk allocation, settings, and reports, are out of sync. Protected directories are out of sync. Data sources are out of sync This situation can occur if a DPM administrator adds or removes data sources after the date that the LiveVault service backed up the DPM SQL database you are restoring. After you restore the SQL database, you might see an error at the DPM Management console similar to "Volume missing" or " missing" for the data source that you removed, but the error would have no information about the data source that you added. To update the DM DB with the current environment 1. On the DPM management console, remove the data source you previously removed from protection, or add the data source you had previously added as a protected volume. 2. Run a consistency check. DPM Agents are out of sync This situation might occur if you deleted a DPM agent from protection after the had on the date of the SQL database that you restored. 110 LiveVault Disaster Recovery Guide

environment Synchronize a restored database in a changed After you restore the SQL database, the DPM management console shows the Agent status as "Error" with the following information: The agent operation failed because DPM could not communicate with the agent. The computer might be protected by another DPM server, or the protection agent might have been uninstalled on the protected computer. To reinstate the Agent 1. Run DpmAgentInstaller.exe with this DPM computer as a parameter, for example: DpmAgentInstaller.exe <dpm server name> 2. Install any service packs that were present before the restore. 3. For more information, see the DPM Deployment Guide. After you restart, the Agent should connect to the DPM server and show status as "OK." New DPM Agent added after DB backup This situation can occur if you install a new DPM agent after the date of the SQL database that you restored. After you restore the SQL database, the DPM management console does not show the new Agent, even though it exists on the Agent machine. To re-attach the Agent to DPM, complete steps 4 and 5 from the Microsoft Technet article Installing Protection Agents: Installing Protection Agents Manually. Parameters are out of sync The DPM Agent is now available for use. This situation can occur if you change the DPM environment after the date of the SQL database that you restored. It can occur if you changed the backup schedule, recovery points, volume data source size, performance optimization settings, and reports. After you restore the SQL database, you will see the following results: The schedule reverts back to the old values after the DB restore. Older recovery points at the DB backup time are available. The DPM restore can finish successfully. The new volume replica sizes are shown in the DPM management console. DPM adjusts the replica volume size based on the disk and not what can be stored in the DB (if any). LiveVault Disaster Recovery Guide 111

Chapter 7 Recover a DPM server You lose the changes made to the Optimize Performance dialog box after the DB backup. All reporting data is lost after the DB restore. Protected directories are different This situation can occur if you have different directories protected in the DPM environment than you had when the last SQL DB backup completed. After you restore the SQL database, directories that you had protected before DPM DB backup are present. Directories you added to protection after the DPM DB backup are missing. To update the DPM DB to the changed environment 1. In the DPM Management Console, modify the protection group to remove the deleted directories, and then add the new directories. 2. Run a consistency check. 112 LiveVault Disaster Recovery Guide

APPENDIX A In-place Upgrade of Windows 2000 Recommendations If your computer does not work properly after you complete the disaster recovery procedure, an in-place upgrade of Windows typically resolves most problems not specifically addressed in the disaster recovery procedures. Recommendations Issues to be aware of before doing an in-place upgrade. Perform an in-place upgrade Related Microsoft Knowledge Base Articles Correct switched drive letters In the case of a domain controller in a multi-domain environment, Microsoft does not recommend an in-place upgrade refer to the Microsoft Knowledge Base Article 263532. In the case of a Domain Controller in a multi-domain environment, Microsoft has documented that you might need to perform an in-place upgrade to restart the computer. For more information, refer to the Microsoft Knowledge Base Article 263532. LiveVault Disaster Recovery Guide 113

Appendix A In-place Upgrade of Windows 2000 Issues to be aware of before doing an in-place upgrade. An in-place upgrade can cause unexpected problems. Microsoft KB 306952 describes what is changed by an in-place upgrade and what is not. Note the following issues: The upgrade might switch the drive letters. As a result, the computer might not start. This problem is disk-specific. You might see the problem if you start the recovery console and examine each disk, looking for the disk with the Windows installation. This problem has two potential fixes, but you must perform them before you complete the in-place upgrade. Change the BIOS (Bit Input-Output System) setting for the startup location. Configure the in-place upgrade to keep the same volume letters before you do the restore. The upgrade might switch the drive letters, which will cause applications to fail. To fix this problem, change the drive letters back to the original configuration after the computer is able to start. The upgrade deletes the HKLM\Software\Microsoft\RPC\ ClientProtocols registry key, which causes problems for Exchange and many other applications. You can re-create this key and five values manually. For more information, refer to Microsoft KB 267573 or Microsoft KB 319133. The upgrade sets the permissions back to the default settings. The computer is no longer part of the domain. The upgrade rolls back all service packs and hotfixes. Computers that have two video cards might appear not to respond. The operating system can switch to using the other video card. With AGP video cards on multi-processor computers, the computer can stop responding during start up. This was fixed in Service Pack 4 of Windows 2000. Perform an in-place upgrade To perform an in-place upgrade 1. Insert the Windows 2000 installation CD-ROM and start the computer. 2. If needed, press F6 when prompted for SCSI and other devices. This sequence should be the same as when you originally installed the operating system. 3. To install Windows 2000, press Enter. 4. Click Accept on the license agreement. 114 LiveVault Disaster Recovery Guide

5. Select installation for upgrade. 6. Select R to Repair the selected Windows 2000 installation. 7. Wait for Windows to copy files to a temporary directory and modify the boot.ini file. The computer restarts and the upgrade begins. NOTE At this point, the upgrade has not started. The boot.ini and the temp files are the only changed files. If you select to start from the CD, you can go into the recovery console and modify the boot.ini file to back to its original state. 8. To continue setup click Next The computer might seem to have stopped responding, but it has not. If you turn off the computer during the upgrade, you have to start the upgrade from the beginning. 9. To bypass the regional settings click Next. You do not need to change the settings. 10. Enter the product key number. 11. To bypass the installed components click Next. These should be the installed components from the original computer. Wait while the program performs the following tasks: Installs start menus Registers components Saves settings Removes temporary files 12. To restart the computer click Finish. 13. When the computer starts normally, restore the drive letters to what they were on the failed computer. 14. Create the missing registry key and values in the registry path: HKLM\Software\Microsoft\RPC. 15. Refer to the Microsoft Knowledgebase articles 267573 or 319133 or the instructions below. 16. Rejoin the domain. 17. Correct any application or domain controller issues on the computer. 18. After the computer starts, reapply all service packs and hot fixes. LiveVault Disaster Recovery Guide 115

Appendix A In-place Upgrade of Windows 2000 19. Reapply all security settings. Related Microsoft Knowledge Base Articles In-place Upgrade 292175 How to perform an in-place upgrade of Windows 2000 306952 What an in-place Windows 2000 upgrade changes and what it does not change Different hardware 237556 How to Troubleshoot Windows 2000 Hardware Abstraction Layer issues 234558 How to add Multiple processor in Windows 2000 249694 How to Move a Windows Installation to different hardware 263532 How to perform a disaster recovery restoration of Active Directory to different hardware RPC config 267573 Exchange fails: error No Protocol sequences after an in-place upgrade 319133 SMTP fails due to missing RPC settings after an in-place upgrade Reference 265706 Using DCDIAG and NETDIAG to facilitate joining a domain 229716 Using the Recovery Console 234048 How W2k assigns drive letters. Correct switched drive letters The following procedure is a work-around for a computer that has switched drive letters making the computer unable to start. To correct switched drive letters 1. Build the computer again or just rebuild the boot volume. 2. Ensure that all volumes have the correct drive letters. 3. Make a copy of the boot.ini file. 116 LiveVault Disaster Recovery Guide

4. Start an in-place upgrade while the operating system is running by going to the CD and running d:\i386\winnt32. 5. Restart in the recovery console from the CD. At this point, the upgrade has only copied files and created a disk configuration file c:\$win_nt$.~bt\ migration.inf) with the disk volume letters. This configuration file only gets created if you start the upgrade with the operating system running. For more information, refer to MS KB 234048. 6. Copy the MIGRATE.INF file to a disk to use in step 9. 7. Replace the current boot.ini file with the old boot.ini file. 8. Restart into DSRM (Directory Services Recovery Mode) to restore the entire computer or the start volume. 9. Create a c:\$win_nt$.~bt directory and copy the MIGRATE.INF into it. 10. Perform another full disaster recovery or a partial disaster recovery of the start volume. 11. If the computer freezes, restart the computer. 12. Perform another in-place upgrade. LiveVault Disaster Recovery Guide 117

Appendix A In-place Upgrade of Windows 2000 118 LiveVault Disaster Recovery Guide

APPENDIX B Restore a domain controller This procedure is a guide to recover a single domain controller into a test environment when the original configuration contained multiple domain controllers. This procedure works for a specific configuration and might not work for your configuration. The procedure uses information from Microsoft documentation and KB articles on recovering Active Directory. Microsoft also can make changes at any time that will invalidate this procedure. This procedure was created with the possible steps needed to recover a domain controller. Consult a Microsoft support professional to determine if these steps are required for your configuration. To recover your computer from a disaster 1. Perform the disaster recovery procedure for this server. 2. Start the computer in normal mode. NOTE You might experience a 15-minute delay at Preparing Network connections for each server this computer replicates to/from. 3. Check and repair the IP settings for this computer. CAUTION Do not restart the computer before you complete step 7. If you restart the computer, it might never finish displaying the Windows splash screen with the message Preparing Network Connections. 4. If needed, check and repair DNS settings. Autonomy LiveVault Disaster Recovery Guide 119

Appendix B Restore a domain controller 5. Check if this computer is a Global Catalog server. 6. Check if any Global Catalog server exists. 7. If no other global catalog server exists and this server is a Global Catalog server, then repair the SysVol information to tell this computer to use its global catalog information. 8. You might have to specify that the restore was an Authoritative Restore and to seize the FSMO roles. a. Start the computer in DSRM. b. Using the ntdsutil utility, run Authoritative Restore and Restore database. c. Restart into normal mode Check if this computer is a Global Catalog server To check whether this computer is a Global Catalog server 1. In the Windows desktop, click Start and then select Administrative tools>active Directory Sites and Services. 2. Expand the domain, then expand this server s name and select properties of the NTDS Settings. 3. To check if this computer is a Global Catalog server, select the General tab. Check if a Global Catalog server exists To check whether a Global Catalog server can be found 1. Read the Directory Services Event Log entry that follows the most recent restart. 2. Look for an event that indicates a Global Catalog server was not found. In Windows 2000, this can look like the following example: Event ID: 1126 Repair the SYSVOL information Source: NTDS General Description: Unable to establish connection with Global Catalog. Perform this procedure if the following two errors are reported in the File Replication Service Event log. 120 Autonomy LiveVault Disaster Recovery Guide

Event ID: 13565 Source: NtFrs Description: File Replication Service is initializing the system volume with data from another domain controller. Computer LV-AD1 cannot become a domain controller until this process finishes. The system volume will then be shared as SYSVOL. To check for the SYSVOL share, enter the following command at the command prompt: net share When File Replication Service completes the initialization process, the SYSVOL share will appear. The initialization of the system volume can take some time. The time depends on the following factors: The amount of data in the system volume. The availability of other domain controllers. The replication interval between domain controllers. Event ID: 13520 Source: NtFrs Description: \NtFrs_PreExisting See_EventLog. Copying the files into c:\winnt\ sysvol\domain can lead to name conflicts if the files already exist on another replicating partner. In some cases, the File Replication Service might copy a file from c:\winnt\sysvol\ domain\ntfrs_preexisting See_EventLog into c:\winnt\sysvol\domain instead of replicating the file from another replicating partner. To recover space at any time 1. Delete the files in the following location: c:\winnt\sysvol\domain\ntfrs_preexisting See_EventLog. 2. Stop the NTFRS service with the following command: Net stop ntfrs 3. Open Windows Explorer. 4. Go to the \Windows\sysvol\domain directory. Autonomy LiveVault Disaster Recovery Guide 121

Appendix B Restore a domain controller 5. If a directory with a name similar to NtFrs PreExisting See_Eventlog exists, move the directories under this directory into the domain directory. 6. Delete the empty directory NtFrs PreExisting See_Eventlog. 7. At a command prompt type REGEDIT to open the REGEDIT utility. 8. Navigate to the following location: HKLM\System\CurrentControlSet\Services\NtFrs\Parameters\ Backup/Restore\Process at Startup 9. Set the key to the following value: BURFLAGS = 0xD4 10. Restart the NtFrs service. (> Net start ntfrs). 11. Examine the File Replication Event log for an event that indicates this computer can now run as a domain controller. In Windows 2000, search for the following event ID: Event ID: 13516 Source: NtFrs Description: The File Replication Service no longer prevents the computer LV-AD1 from becoming a domain controller. The system volume has been initialized, and the Netlogon service has been notified that the system volume now can be shared as SYSVOL. 12. To check for the SYSVOL share, type NET SHARE at a command prompt. 13. If Event ID 13516 exists, restart in DSRM mode, otherwise repeat steps 1-12. Perform an Authoritative Restore To perform an authoritative restore 1. Start the computer in DSRM mode. 2. Open a command window, and then enter the following command: ntdsutil 3. At the ntdsutil prompt, enter the following command: authoritative restore 4. At the authoritative restore prompt, enter the following command: restore database 5. At the authoritative restore prompt, enter the following command: 122 Autonomy LiveVault Disaster Recovery Guide

Seize the five FSMO roles quit 6. At the ntdsutil prompt, enter the following command: quit 7. Restart into normal mode. To seize the five FSMO roles 1. At a command prompt, enter the following command: Ntdsutil 2. At the ntdsutil prompt, enter the following command: roles 3. At the FSMO maintenance prompt, enter the following command: connections 4. At the server connections prompt, enter the following command: connect to server <This server s FQDN> 5. At the server connections prompt, enter the following command: quit 6. At the FSMO maintenance prompt, enter the following command: seize domain naming master 7. To verify the seizure select YES. 8. At the FSMO maintenance prompt, enter the following command: seize infrastructure master 9. To verify the seizure select YES. 10. At the FSMO maintenance prompt, enter the following command: seize pdc 11. To verify the seizure select YES. 12. At the FSMO maintenance prompt, enter the following command: seize rid master 13. To verify the seizure select YES. 14. At the FSMO maintenance prompt, enter the following command: seize schema master Autonomy LiveVault Disaster Recovery Guide 123

Appendix B Restore a domain controller 15. To verify the seizure select YES. 16. At the FSMO maintenance prompt, enter the following command: quit 17. At the ntdsutil prompt, enter the following command: quit Delete (DEMOTE) the other domain controller (ITSTORAGE) To delete the other domain controller 1. Select Start>Administrative tools>active Directory Sites and Services. The Active Directory Sites and Services control panel opens. 2. Under the ITSTORAGE object, right-click NTDS and then click Delete. Windows displays three options. One of which indicates ITSTORAGE is offline and will not come back. Select this option. 3. Restart the computer. Disaster recovery problems observed but not fully diagnosed If the computer crashes, check the following indicators: If any Network Interface Cards (NICs) are configured with a static IP address on a domain controller and DHCP is disabled, the computer might hang when you start it normally or when you start it in DSRM mode with networking at the Windows splash screen. You receive the following message window showing Preparing network connections. The computer successfully starts in DSRM mode. (plyad1) Work-around: Pull the network cable off the computer and then edit the registry to enable Dynamic Host Configuration Protocol (DHCP) on all Network Interface Cards (NICs). In certain configurations the computer hangs when you start it in normal or DSRM mode with networking immediately before or after the Windows splash screen opens. To work around this problem, perform an In-place Upgrade of Windows 2000. You can overwrite RAID drivers on the new computer with old drivers you have restored if they have the same names. To work around this problem, perform an In-place Upgrade of Windows 2000. Try manually replacing the RAID drivers needed. The issue is not replacing the drivers but knowing what to replace. 124 Autonomy LiveVault Disaster Recovery Guide

APPENDIX C Authoritative System State restore If you restore a computer's Windows 2000/2003 system state incorrectly, the computer might become unusable. As a result, you have to reinstall the operating system. Restore the system state only after you recover the entire computer as part of a disaster recovery. You typically do not need to perform an authoritative system state restore. However, there are scenarios where it is necessary. For example, if a user or application deletes or modifies your replicated Active Directory objects, or if your backup domain database is corrupt. The authoritative restore lets you repair the system state data (such as Active Directory Service) to your Primary Domain Controller, which can replicate it to your other domain controllers. You were directed to this appendix from one of the disaster recovery procedure in this guide. After you perform the authoritative restore steps in this procedure, return to your disaster recovery procedure and complete the recovery process. If your backup domain database is corrupt, you might need to perform these steps several times, restoring historical versions until you find a version that precedes the corruption. NOTE The Active Directory and Certificate Services must not be running on the domain controller during the restore process. LiveVault Disaster Recovery Guide 125

Appendix C Authoritative System State restore To restore using the internet, see Authoritative System State Restore on the Internet. To restore using a restore device, see Authoritative System State Restore from a Restore Device. Authoritative System State Restore on the Internet To restore a Windows Domain controller over the Internet 1. Restart the computer in DSRM mode. 2. Reinstall the agent software. 3. Copy the boot.ini file. 4. Restore the system state. 5. Use the ntdsutil utility to restore Active Directory. 6. Compare the restored and original boot.ini files. 7. Verify that Active Directory was restored successfully. Restart the computer in DSRM mode To restart the computer in DSRM mode 1. Restart the computer in DSRM mode. a. Restart the computer. b. During the normal start-up process, look for the following message at the bottom of the window: For troubleshooting and advanced startup options for Windows 2000, press F8 When you see this message, press F8. It is displayed for only a few seconds. You must press F8 while it is open. 2. From the Windows Advanced Options Menu, select Directory Services Restore Mode, and then press Enter. For more information about Directory Services Restore Mode, see your Windows documentation. 3. After the computer restarts, log on to Windows with local Administrator rights. Reinstall the agent software In this procedure you will install the LiveVault agent software that you downloaded and installed during the disaster recovery process. To install the Agent software and restart the computer 1. Download the Agent kit (a self-extracting service software program) to the computer. 2. Double-click the self-extracting service software program. 126 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore The program extracts the software files to an installation folder. If you are prompted for a path for the installation folder, use the existing installation folder and then click Continue. 3. The agent setup program starts to run. Follow the instructions in the setup program dialog boxes to install the software. Press F1 to view help for the installation program. For additional assistance, contact Support. 4. Restart the computer. 5. During the normal start-up process, look for the following message at the bottom of the window: For troubleshooting and advanced startup options, press F8 6. When you see this message, press F8. It is displayed for only a few seconds. You must press F8 while it is open. 7. From the Windows Advanced Options Menu, select Directory Services Restore Mode and then press Enter. Copy the boot.ini file If you are restoring the system state to a computer other than the original Agent, copy the boot.ini file (in the recovering computer's root directory). To ensure you do not confuse the copy with the restored boot.ini file, and to differentiate this copy from any others, name the copy something similar to BootFromCD_101503.ini, where 101503 NOTE This copy of the boot.ini file will be referenced later during the disaster recovery, so remember the name of the file and where you stored it. represents the current date. Restore the system state To restore the system state 1. Log in to the Web Management Portal. 2. In the Web Management Portal navigation pane, select the agent whose system state that you want to restore. 3. In the right pane, select the Restore tab. 4. Click New Restore. The Restore Wizard page opens. 5. Select Restore data over the Internet and click Next. The Restore Request page opens. 6. On the Restore Request form, in the Name to use for this restore request field, enter a name for the system state restore job. 127 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore 7. From the Policy filter menu, select the backup policy from which you want to restore the system state. System state must have been backed up on this policy. 8. From the Version menu, specify the version of the system state that you want to restore. 9. Select the Restore system state check box. 10. Click Next. 11. Review the information in the Computer Restore Confirmation form. 12. To accept and start the restore process, click Done. To change or cancel the restore request click Previous. 13. The computer starts to process the restore request. You can track its progress in the Web Management Portal. 14. After the restore job finishes, do not restart your computer. Use the ntdsutil utility to restore Active Directory To repair Active Directory 1. At a command prompt, enter the command ntdsutil and then press Enter. 2. At the ntdsutil prompt, enter authoritative restore and press Enter: 3. At the authoritative restore prompt, enter one of the following commands and press Enter: To restore the entire directory, enter Restore database. To restore a portion or subtree of the directory (for example, a specific organizational unit), enter Restore subtree <subtree distinguished name>. 4. To exit the ntdsutil, enter quit and press Enter. Next enter quit and press Enter. For additional help and options for ntdsutil, see your Windows documentation. Compare the restored and original boot.ini files If you restore the system state to a computer other than the original agent, compare the restored boot.ini file to the copy of the boot.ini file. To compare the restored boot.ini to the original boot.ini 1. Go to the computer's root directory and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101503.ini) that you made earlier in this procedure. 128 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore 2. Compare the boot drive value from each boot.ini file. This is the number of the partition that the computer starts from, for example partition(1). If the boot drive values in these files match, continue to the procedure <xref_italic>verify that Active Directory was restored successfully. If the boot drive values in these files do not match, continue with this procedure. 3. Clear the read-only attribute on the boot.ini file. 4. Change the value in the restored boot.ini to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101503.ini). 5. Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. 6. Restart the computer in normal mode. Verify that Active Directory was restored successfully To verify that you restored Active Directory successfully 1. Browse Active Directory and check that the expected objects such as user objects are available. For more information about Active Directory, see your Windows documentation. 2. In the Web Management Portal, resume backup for this computer. Authoritative System State Restore from a Restore Device To restore a Windows Domain controller from a Restore device 1. Restart the computer in DSRM mode 2. Reinstall the agent software 3. Copy the boot.ini file 4. Restore the system state 5. Use the ntdsutil utility to restore Active Directory 6. Compare the restored and original boot.ini files 7. Verify that Active Directory was restored successfully 129 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore Create a restore request To create a restore request 1. In the Web Management Portal navigation pane, select the agent computer on which you are restoring the system state. 2. In the right pane, select the Restore tab. 3. Click New Restore. The Restore Wizard New Restore Request page opens. 4. Select the Have a media device shipped to me option. 5. Click Next. 6. Select the backup version to restore. 7. Select the shipping method. 8. Click Next. 9. Provide the shipping information. 10. Click Done. It will take 1-3 days for the device to arrive. Shipping time is longer for larger restores, and if you make the request on a non-business day. 11. When the device arrives, follow the instructions below to restore your data. a. In the Web Management Portal Restore tab, click New Restore. The Restore Wizard form opens. The restore device attached to your network appears as the last option on the list. b. Select the restore device and click Next. The Restore Request form opens. The Restore Request form has two tabs: The Selection tab lets you select rules to select the files you want to restore. The Options tab lets you handle file overwrite situations, restore to a different computer than the files were backed up from, specify whether to restore the system state, and schedule the restore. c. After you select the files you want restore and the restore options, click Next. The Confirmation page opens. d. Review the information on the Restore Request Confirmation page. If the information is accurate, click Done. 130 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore Restart the computer in DSRM mode To restart the computer in DSRM mode 1. During the start-up process, look for the following message at the bottom of the window: For troubleshooting and advanced startup options for Windows 2000, press F8 2. While you see this message, press F8. This message will be displayed for only a few seconds. 3. From the Windows Advanced Options Menu, select Directory Services Restore Mode and then press Enter. 4. After the computer restarts, log on to Windows with local Administrator rights. Reinstall the agent software To install the Agent software and restart the computer 1. Load the agent kit (a self-extracting service software program) on to the computer. 2. Double-click the self-extracting service software program. You are prompted for a location to extract the files. 3. Click Continue to extract to the default installation folder. The program extracts the software files to the installation folder. The Agent Setup program starts to run. Follow the instructions in the Setup program dialog boxes to install the software. Accept the default options. For help during the installation process, press F1. If you require additional assistance, contact Support. 4. When prompted to restart the computer, restart it in Directory Services Restore Mode (DSRM). 5. During the normal start-up process, look for the following message at the bottom of the window: For troubleshooting and advanced startup options for Windows 2000, press F8 6. While you still see this message, press F8. This message will be displayed for only a few seconds. 7. From the Windows Advanced Options Menu, select Directory Services Restore Mode and press Enter. 131 LiveVault Disaster Recovery Guide

Appendix C Authoritative System State restore Copy the boot.ini file If you are restoring the system state to a computer other than the original computer, copy the boot.ini file (in the recovering computer's root directory). To ensure you do not confuse the copy with the restored boot.ini file, and to differentiate this copy from any others., name the copy something similar to BootFromCD_101503.ini, where 101503 represents the current date. NOTE This copy of the boot.ini file will be referenced later during the disaster recovery, so remember the name of the file, and where you stored it. Restore the system state Restore the system state from the media to your computer. The system state is restored to its original location, overwriting the existing system state data on the computer. To restore the system state 1. In the Web Management Portal left navigation pane, select the agent whose system state you want to restore. 2. In the right navigation pane, select the Restore tab and click New Restore. The Restore Wizard opens. 3. After you connect the restore device to your network, the option to Select the restore device becomes available on the Restore Wizard New Restore Request form. 4. Select the restore device and click Next. The Restore Request form opens. 5. On the Restore Request form, in the Name to use for this restore request box, enter a name for the system state restore job. 6. From the Policy filter menu, select the backup policy from which you want to restore the system state. System state must have been backed up on this policy. 7. From the Version menu, specify the version of the system state that you want to restore. 8. Select the Restore System State check box. 9. After you configure your restore request, click Next. The Confirmation form opens. 132 LiveVault Disaster Recovery Guide

10. Review the information in the Computer Restore summary form. To accept the restore request and start the restore process, click Done. To change or cancel the restore request, click Previous. The computer starts to process the restore request. You can track its progress on the Restore tab of the Web Management Portal. NOTE After the restore job completes, do not restart your computer. Use the ntdsutil utility to restore Active Directory To restore Active Directory 1. At a command prompt, type the command ntdsutil and then press Enter. 2. At the ntdsutil prompt, type the command authoritative restore and press Enter: 3. At the authoritative restore prompt, enter one of the following commands and press Enter: To restore the entire directory, enter Restore database. To restore a portion or subtree of the directory (for example, a specific organizational unit), enter Restore subtree <subtree distinguished name>. 4. To exit the ntdsutil utility, enter quit and press Enter. For additional help and options for ntdsutil, see your Windows documentation. If you restore the system state to a computer other than the original agent, compare the restored boot.ini file to the copy of the boot.ini file. To compare the restored boot.ini to the original boot.ini 1. Go to the computer's root directory and open both the restored boot.ini file (for example, boot.ini) and the copy of the boot.ini file (for example, BootFromCD_101503.ini) that you made earlier in this procedure. 2. Compare the boot drive value from each boot.ini file. This is the number of the partition that the computer starts from, for example partition(1): If the boot drive values in these files match, continue to the procedure Verify that Active Directory was restored successfully. If the boot drive values in these files do not match, continue with this procedure. LiveVault Disaster Recovery Guide 133

Appendix C Authoritative System State restore 3. Clear the read-only attribute on the boot.ini file. 4. Change the value in the restored boot.ini to match the value specified in the copy of the boot.ini file (for example, BootFromCD_101503.ini). 5. Your boot.ini configuration might require you to update the boot drive value for multiple lines in the restored boot.ini file. CAUTION If you fail to update the restored boot.ini file, you cannot restart the computer. 6. Restart the computer in normal mode. Verify that Active Directory was restored successfully To verify that you restored Active Directory successfully 1. Browse Active Directory and check that the expected objects such as user objects are available. For more information about Active Directory, see your Windows documentation. 2. In the Web Management Portal, resume backup for this computer. 134 LiveVault Disaster Recovery Guide