Comprehensive data protection for all workloads
Post Reply
Steven Bricklayer
Influencer
Posts: 23
Liked: 2 times
Joined: Apr 04, 2017 8:42 am
Full Name: Steven Bricklayer
Contact:

Feature Request - AD Restore Requierement

Post by Steven Bricklayer »

Hello,

We can't restore AD object directly with Veeam. We need to restore the account as an LDIF file and to that procedure

https://technet.microsoft.com/fr-fr/lib ... s.10).aspx

The problem is Veeam check that the account used for the restore is member of the group Exchange Organization Administrators

I think you need to be realistic on your pre-requesties, in big companies their are no way that the guy in charge of accounts restore is a member of a so powerfull group.

And you really don't need to be in that group to perform an account creation / modification


Thanks
Andreas Neufert
VP, Product Management
Posts: 6707
Liked: 1401 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Feature Request - AD Restore Requierement

Post by Andreas Neufert »

Hi Steven,

without this role, we can not connect an restored AD user to his mailbox, which will be in the end lead into lot´s of trouble. How do you handle such situations today?
Andreas Neufert
VP, Product Management
Posts: 6707
Liked: 1401 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Feature Request - AD Restore Requierement

Post by Andreas Neufert »

Steven Bricklayer
Influencer
Posts: 23
Liked: 2 times
Joined: Apr 04, 2017 8:42 am
Full Name: Steven Bricklayer
Contact:

Re: Feature Request - AD Restore Requierement

Post by Steven Bricklayer »

Andreas Neufert wrote:How do you handle such situations today?
Like I said on my first post, we restore files as LDIF.

And like I said :
you really don't need to be in that group to perform an account creation / modification
Any news / update?

FYI we were able to restore AD account without problem with NetBackup. (+ it didn't took 45 minutes to load the AD database...)
foggy
Veeam Software
Posts: 21069
Liked: 2115 times
Joined: Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson
Contact:

Re: Feature Request - AD Restore Requierement

Post by foggy »

No updates, if the object has a mailbox or at least some mail attributes, it cannot be restored without that permission.
Steven Bricklayer
Influencer
Posts: 23
Liked: 2 times
Joined: Apr 04, 2017 8:42 am
Full Name: Steven Bricklayer
Contact:

Re: Feature Request - AD Restore Requierement

Post by Steven Bricklayer »

Quick Update.

Thanks to the support team, a solution has been found.

https://helpcenter.veeam.com/docs/backu ... tml?ver=95

Just use the "restore to" option, and follow the wizard.

You have a popup telling you that the mailbox wouldn't be able to be reconnect, but you can press "next".

All Sid, Guid, was successfully restored.

And the exchange mailbox was automaticly reconnected.
Andreas Neufert
VP, Product Management
Posts: 6707
Liked: 1401 times
Joined: May 04, 2011 8:36 am
Full Name: Andreas Neufert
Location: Germany
Contact:

Re: Feature Request - AD Restore Requierement

Post by Andreas Neufert »

Thanks for sharing this valuable feedback... I have created a feature request around this.
Post Reply

Who is online

Users browsing this forum: Bing [Bot], Max93, Semrush [Bot] and 157 guests