Restore Entire VM

[perjonsson1960]

Folks,

When doing a restore of an entire VM that is an Active Directory member, we have noticed that sometimes the VM loses the trust of the domain, which means that domain users can no longer log in to that VM. We have solved this problem by removing the VM from the domain to Workgroup, and then rejoin the domain again.

What if we first do a restore of the AD computer object from the same date as the VM backup that we want to restore? And after that, we restore the entire VM and start it up. Will that reduce the risk of this problem occuring?

Kind regards,
PJ

[perjonsson1960]

Hello!

It seems that no one has an answer to this.
We will just have to test this scenario whenever we need to restore an entire VM from an older date again.

Kind regards,
PJ

[PetrM]

Hello,

I did not see this topic. I've moved it to the appropriate forum branch.

What if we first do a restore of the AD computer object from the same date as the VM backup that we want to restore? And after that, we restore the entire VM and start it up.

That sounds like a valid approach. I assume you’re going to use Veeam Explorer for Active Directory to do that? Please give me some time to work on it and ensure there are no pitfalls.

Thanks!

[perjonsson1960]

We have already done the test. Yes, we used Veeam Explorer for AD.
We restored an entire VM from December 15, and restored the corresponding AD computer object from the same date, but it didn't help. When we had started the VM, we still could not login with domain accounts. So the only solution right now is to remove the VM from the domain, and then rejoin.
We have no idea why this doesn't work. But it seems that somewhere, either in the AD computer object or in the VM itself, there is some information that the domain controller is not happy about. I guess this is for security reasons.