Specify additional recovery option settings for the Recover AD to clean VM database only option.
This recovery method is available only when using the Recover AD forest to new domain controllers recovery type. It provisions a new VM using a clean image provided by Commvault or one that you supply. Once the VM is provisioned and promoted to a domain controller, only the AD database is restored-eliminating the risk of recovering malware-infected files. Use this method when you want to provision a new VM with a clean image and only restore the AD database.
Note
With the Recover AD to clean VM database only option, if the software cache is hosted on a machine that's not the recovery node, that machine must be accessible from the recovery network. For more information on ports and network requirements, see System requirements for Active Directory forest recovery.
Go to the runbook
-
From the Command Center navigation pane, go to Protect > Active Directory.
The Overview page appears.
-
On the Forests tab, click the forest.
The forest page appears.
-
On the Runbooks tab, click the runbook.
The runbook page appears.
Start the configure recovery options wizard
-
On the Runbook settings tab, in the Recover AD to clean VM database only tile, select the domain controllers to configure.
-
Click Configure recovery options.
The Configure recovery options dialog box appears.
-
For Target, select the host recovery target on which you want to create the recovered domain controllers.
-
For Name prefix, enter a prefix to append to the display name of the recovered VMs.
-
Select the Overwrite if VM already exists check box if a VM with the specified name already exists. All the data and configuration of the existing VM will be overwritten by the backup data and configuration of the client.
-
Click Next.
CommCell configuration page
-
For Associate with server groups, select the server groups to associate the recovered domain controllers with.
The server groups are used to configure network communication between the recovered DCs and the rest of the Commvault infrastructure.
-
For Network gateway, enter the server name of the target gateway you configured with the default port of 8403.
Note
-
The server name must match the Host Name of the gateway as provided under Manage > Servers. For example, enter networkgateway:8403.
-
Ensure that the gateway name is resolvable within the recovery network using its short name.
-
-
If backups exist in multiple locations, use the Copy precedence setting to choose which location to restore from.
-
Click Next.
Machine configuration page
Important
-
The Machine Configuration page does not apply to AWS or Microsoft Azure recovery targets.
-
Since VMs are recovered to the network that you select below, select a network that's isolated from both the production Active Directory environment and the internet.
-
For Network, select the network switch that is associated with the isolated recovery network.
-
For Subnet mask, enter the subnet mask to apply to the recovered VMs.
-
For Default gateway, enter the IP address of the default gateway to apply to the recovered VMs.
-
For IP address, enter the IP address or the range of IP addresses to apply to the recovered VMs.
-
Click Next.
Credentials page
Note
Use passwords that meet the password complexity rules for the Windows Server version that you are creating to prevent VM provisioning failures. For more information, see Password must meet complexity requirements.
-
For Administrative account, enter a credential. This credential will be created on the recovered VM as an account with administrative privileges. It must not be a built-in account such as administrator.
-
For New DSRM password for the domain controller, enter a credential. This credential will be used to set the directory services restore mode password on the domain controller. Only the password supplied in the credential is used – the account name is ignored.
-
Click Save.