System State Method - Offline Database Restore

The Active Directory offline mining enables you to browse and recover directory server database objects and their attributes from an offline copy of the directory databases. This feature is useful when you want to restore specific objects or attributes from a live active directory database without restoring the entire database. You can browse multiple versions of the database to compare values of attributes and then recover the required version of the attribute.

The system state method of creating an offline copy of the directory server database consists of following steps:

Ensure that the source and destination computer satisfy the prerequisites.
Create an offline copy. For more information, see the "Creating an Offline Copy of the Database" section on this page.
Mine and restore the required attributes and objects from the offline database to the live active directory (source) database. For more information, see the "Mining and Restoring from the Offline Database" section on this page.

Prerequisites

Before creating the offline copy, ensure that the source and destination clients satisfy the following requirements:

Source Computer	Destination Computer
Ensure that the computer has one of the Windows operating systems listed in the System Requirements for Active Directory Agent.	Ensure that the Microsoft Windows operating system and Active Directory Agent are installed on the destination computer. Install Active Directory Lightweight Directory Services (AD LDS) role manually on the destination computer. Do not run the adLdapTool.exe utility on the destination computer. Do not turn off the AD LDS role on the destination computer.

Creating an Offline Copy of the Database

You can use the Windows File System iDataAgent to backup the system state on the Active Directory Server. The system state data includes the active directory component. You can use this component to create an offline copy of the directory server database. Follow the steps given below to create an offline copy on the destination computer.

Configuring System State Backup

By default, system state data is backed up along with file system data by the default subclient. You can also create a separate subclient to back up the system state. Within any backup set, however, only one subclient can back up the system state. Follow the steps given below to configure a subclient for system state backup:

From the CommCell Console, navigate to Client Computers | <Client> | File System | defaultBackupset.
Right-click default subclient and select Properties.
Click the Content tab.
Clear the Backup System State check box.
Click OK.
From the CommCell Console, navigate to Client Computers | <Client> | File System.
Right-click the defaultBackupset and then click All Tasks |New Subclient.
Enter the name of the new subclient.
Select Use VSS Options check box.
Click the Content tab.
Select the Backup System State check box.
Click OK.

This new subclient will be used to backup the system state.
Click the Storage Device tab.
In the Storage Policy box, select a Storage Policy name.
Click OK.
In the Backup Schedule dialog box, click Do Not Schedule.
1. If you do not have Storage Policy created, follow the step given below to create a storage policy. Click Create Storage Policy.
2. Follow the prompts displayed in the Storage Policy Wizard. The required options are mentioned below:
  1. Select the Storage Policy type as Data Protection and Archiving and click Next.
  2. Enter the name in the Storage Policy Name box and click Next.
  3. From the Library list, click the name of a disk library to which the primary copy should be associated and then click Next.
    
    Ensure that you select a library attached to a MediaAgent operating in the current release.
  4. From the MediaAgent list, click the name of a MediaAgent that will be used to create the primary copy and then click Next.
  5. For the device streams and the retention criteria information, click Next to accept default values.
  6. Select Yes to enable deduplication for the primary copy.
  7. From the MediaAgent list, click the name of the MediaAgent that will be used to host the Deduplication database (DDB).
    
    In the Location box, type the name of the folder in which the DDB must be located or click the Browse to select the folder, and then click Next.
3. Review the details and click Finish to create the Storage Policy.

Performing the System State Backup

Follow the steps given below to backup the system state data:

From the CommCell Console, navigate to <Client> | File System iDataAgent | defaultBackupSet.
Right-click the subclient which you have configured for the system state backup, and click Backup.
Select Full.
Select Immediate.
Click OK.
You can track the progress of the backup job from the Job Controller window. When the backup job has completed, the Job Controller displays the status as Completed.

Restoring the Active Directory Component

Follow the steps given below to create an offline copy of the directory server database on the destination computer:

From the CommCell Browser, navigate to Client Computers | <Client> | File System | defaultBackupSet
Right-click the subclient and then click Browse and Restore.
Click View Content.
Expand the defaultBackupSet and navigate to System State | Components
Select Active Directory component.
Click Recover All Selected.
Select the Destination client.
Ensure that the source client and the destination client are in the same CommCell and the destination computer has the Windows 2008 and Active Directory iDataAgent installed on it.
Clear the Restore to same folder check box.
Click Browse and select a folder on the destination client where you want to store the offline copy of the database.
Click OK.
Click OK to start the restore.
You can monitor the progress of the restore job in the Job Controller window of the CommCell Console.

Mining and Restoring from the Offline Database

You can browse the offline copy of directory server database on the destination computer and then restore the required attributes and objects to the source computer (live active directory server).

From the CommCell Browser, navigate to Client Computers| <Destination Client>.
Right-click Active Directory and select Properties.
Select the Enable Offline Mining check box.
Click OK.
From the CommCell Browser, navigate to Client Computers| <Destination Client>| Active Directory.
Right-click the defaultBackupSet and then click Browse and Restore.
Select the Browse/Restore Directory server data from Database (ntds.dit/admntds.dit) file check box.
Click Browse and navigate to the folder on the destination client where you have restored the Active Directory components.
Select the ntds.dit file and click OK.
Click View Content.
Click Yes to continue.
Select the required objects and attributes from the offline database.
Click Recover All Selected.
Select the client where you want to restore the selected objects and attributes from the Destination client list.
Click Edit and enter the username and password for a user account on the destination computer.
The user account must be the domain controller administrator account. Enter the username in the following format:

<domain_name>\<domain_controller_administrator_user_name>
Click OK.
Click OK to start the restore.