[BETA] Veeam Explorer for Active Directory

Availability for the Always-On Enterprise

[BETA] Veeam Explorer for Active Directory

Veeam Logoby Gostev » Sun Mar 16, 2014 9:40 pm

Please welcome the new addition to our Explorer family, Veeam Explorer for Active Directory (VEAD). Just like other Veeam Explorers, VEAD performs exports and in-place recoveries of AD objects by drilling directly into the AD database (ntds.dit file), without the use of Virtual Lab.

VEAD supports search and restore of all AD objects types, including users, groups, computer accounts and contacts. It can restore individual object's attributes, the entire objects, and even the whole organizational units (along with the hierarchy). Of course, the deleted objects do not have to be present in the Recycle Bin, as we will obtain all the data from backup where the objects are still present in AD. More importantly, unlike many other Active Directory recovery solutions, we do not require that the tombstone of the deleted object is still present in AD. VEAD is also fully Microsoft Exchange aware, so when restoring the user account, we will restore all Exchange-related attributes and reconnect the mailbox. As you will see, this is a very comprehensive solution.

But, there is one more thing. VEAD also has the unique ability to recover passwords! Imagine accidentally deleting the entire OU with all your users. Without this feature, each user will be prompted to set the new password upon first logon, which is very disruptive and insecure. But this feature will come even more handy if you lose an OU with computer accounts! If you simply restore those back, computers will not be able to logon to the domain because of computer account password mismatch. Now, just imagine the nightmare of going to each computer, switching it into workgroup, and then joining it back into the domain... hundreds of times! This is when you will really appreciate this feature.

Interested? Download beta now (requires B&R 7.0), and post your feedback in this thread!

[UPDATE] Cumulative patch that addresses all issues reported on the beta code as of May 5th > ftp://vead:gBs4953r@supportftp.veeam.com/
Gostev
Veeam Software
 
Posts: 21166
Liked: 2304 times
Joined: Sun Jan 01, 2006 1:01 am
Full Name: Anton Gostev

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby lp@albersdruck.de » Sun Mar 16, 2014 10:00 pm

Installed the beta.

I can only start the standalone application, I did not find a way to use it from B&R Console when selecting a backup of an AD controller.
Do I have to extract ntds.dit and logs manually to explore them, or is there another way?
lp@albersdruck.de
Enthusiast
 
Posts: 81
Liked: 31 times
Joined: Mon Mar 25, 2013 7:37 pm
Full Name: Lars Pisanec

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Gostev » Mon Mar 17, 2014 12:19 am

You are quick!

There is no need to extract AD database file. Instead, just initiate file level recovery for a domain controller backup, and the guest file system will be mounted locally on the backup server to C:\veeamflr folder. After that, browse into that folder with VEAD and open ntds.dit .

Of course, once this becomes generally available as a part of v8, you will not perform these manual steps. It will "just work" as with other existing Explorers.
Gostev
Veeam Software
 
Posts: 21166
Liked: 2304 times
Joined: Sun Jan 01, 2006 1:01 am
Full Name: Anton Gostev

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby scott.anderson » Mon Mar 17, 2014 12:40 am

Looks like the Windows version is going to be important.

I've tried the AD Explorer and its working nicely where

Our Veeam server is a 2008R2.

AD is 2008R2, and the DC that I'm running the recovery for is also 2008R2.

However we also have a 2012R2 DC as well. Recovery from this DC fails.

"The specified database cannot be opened on this OS version"

Does this mean that you need to match your Veeam server to the OS of your DC's?
What happens in a mixed OS DC setup?
scott.anderson
Enthusiast
 
Posts: 57
Liked: 8 times
Joined: Wed Sep 14, 2011 6:48 am
Full Name: Scott Anderson

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby lp@albersdruck.de » Mon Mar 17, 2014 6:45 am

Gostev wrote:You are quick!

There is no need to extract AD database file. Instead, just initiate file level recovery for a domain controller backup, and the guest file system will be mounted locally on the backup server to C:\veeamflr folder. After that, browse into that folder with VEAD and open ntds.dit .

Of course, once this becomes generally available as a part of v8, you will not perform these manual steps. It will "just work" as with other existing Explorers.


Just FYI: if you searched where to find this, take a look at registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters on your AD controller- the path to ntds.dit is there.

It seems to work so far. One small thingie: double clicking the top left icon of the window to close it does not work, it just maximizes/restores the window.
lp@albersdruck.de
Enthusiast
 
Posts: 81
Liked: 31 times
Joined: Mon Mar 25, 2013 7:37 pm
Full Name: Lars Pisanec

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby gkennedy » Mon Mar 17, 2014 7:20 am 3 people like this post

I have just used this to restore a user to AD right now, which is insanely good timing. :)

Worked perfectly - what an awesome tool.

Cheers,
Gavin
gkennedy
Influencer
 
Posts: 10
Liked: 10 times
Joined: Thu Aug 01, 2013 3:48 am
Full Name: Gavin Kennedy

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Andreas Neufert » Mon Mar 17, 2014 8:04 am

Is Win2003 SP2 in Win 2003 AD mode supported?
Is Win2012 R2 in Win2012R2 AD mode supported?
Andreas Neufert
Veeam Software
 
Posts: 2097
Liked: 337 times
Joined: Wed May 04, 2011 8:36 am
Location: Germany
Full Name: @AndyandtheVMs Veeam PM

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Templaar » Mon Mar 17, 2014 8:32 am 2 people like this post

Works perfect on Windows 2012 AD.

Great job guys.
Templaar
Lurker
 
Posts: 1
Liked: 2 times
Joined: Mon Mar 17, 2014 7:46 am
Full Name: Tomasz Czyz

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Vitaliy S. » Mon Mar 17, 2014 9:01 am

scott.anderson wrote:Does this mean that you need to match your Veeam server to the OS of your DC's?
What happens in a mixed OS DC setup?

Not exactly, currently if you need to open a Windows 2012 R2 DC, then Explorer should be launched either on Windows 8.x or Windows 2012 R2 machine.

Andreas Neufert wrote:Is Win2003 SP2 in Win 2003 AD mode supported?
Is Win2012 R2 in Win2012R2 AD mode supported?

Both of these configurations should work fine.
Vitaliy S.
Veeam Software
 
Posts: 19240
Liked: 1071 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Battlestorm » Mon Mar 17, 2014 9:02 am

Just opened a backup an ntds.dit from a Win2012R2 DFL/FFL domain on another box running 2012R2 so it opens 2012 R2
Battlestorm
Veeam ProPartner
 
Posts: 20
Liked: 2 times
Joined: Fri Feb 21, 2014 10:49 am
Location: London, UK
Full Name: Daniel Ely

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby Kostya » Mon Mar 17, 2014 9:04 am 1 person likes this post

scott.anderson wrote:Looks like the Windows version is going to be important.
...
However we also have a 2012R2 DC as well. Recovery from this DC fails.
"The specified database cannot be opened on this OS version"

Does this mean that you need to match your Veeam server to the OS of your DC's?
What happens in a mixed OS DC setup?

If you want to open Windows 2012 or Windows 2012 R2 AD database, you have to have Explorer for Active Directory installed on Windows 2012/8 or later.
Kostya
Veeam Software
 
Posts: 90
Liked: 23 times
Joined: Mon Jun 18, 2012 9:38 am
Full Name: Kostya Yasyuk

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby TommyB » Mon Mar 17, 2014 9:12 am

Very nice feature - already downloaded and try this sometimes this week...

Is there already any list of other features and enhancements for Veeam 8?

I'm especially interested in improvements regarding media handling for tape backup (e.g. more granular email notifications, eject on full tape)
TommyB
Expert
 
Posts: 115
Liked: 15 times
Joined: Wed Aug 28, 2013 9:46 am
Location: Germany.Europe.Terra.Sol.Milkyway.Localgroup.Virgo
Full Name: Thomas Braun

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby v.Eremin » Mon Mar 17, 2014 9:16 am

No, there is no such a list at the moment.

As to your feature requests, you can post them in the corresponding tape subforum or in the existing topics regarding similar questions.

Thanks.
v.Eremin
Veeam Software
 
Posts: 12703
Liked: 920 times
Joined: Fri Oct 26, 2012 3:28 pm
Full Name: Vladimir Eremin

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby tdewin » Mon Mar 17, 2014 10:24 am

lp@albersdruck.de wrote:Just FYI: if you searched where to find this, take a look at registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters on your AD controller- the path to ntds.dit is there.


Thanks for that , here is a powershell script to connect to your core instance :)
Code: Select all
$server = "ad02"
Invoke-Command -computer $server { Get-ItemProperty -path "Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\" }
tdewin
Veeam Software
 
Posts: 1001
Liked: 345 times
Joined: Fri Mar 02, 2012 1:40 pm
Full Name: Timothy Dewin

Re: [BETA] Veeam Explorer for Active Directory

Veeam Logoby DaveBristolIT » Mon Mar 17, 2014 11:09 am

Hi Gostev,
This is possibly about to save our bacon. One of our technicians has deleted the entire tree: Configuration/Services/Microsoft Exchange instead of one of the sub trees. (http://www.msexchange.org/img/upl/image ... 813890.jpg)
I've installed VEAD, started a FLR and have mounted the database file successfully - but we can't see the "Configuration" section as it is hidden by default and there is no way of typing in what you'd like to open!
do you have a fix for this that we can apply in the next couple of hours, or should I return to the old UAIR wizard?

Many thanks;
Dave
DaveBristolIT
Influencer
 
Posts: 13
Liked: 1 time
Joined: Mon Mar 17, 2014 11:06 am
Full Name: Dave Hamer

Next

Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Google [Bot] and 25 guests