Quest® Recovery Manager for Active Directory
Version 7.10.1
Release Notes
September 10, 2009
Welcome to Quest Recovery Manager for Active Directory
Resolved Issues and Enhancements
Quest Recovery Manager for Active Directory enables fast, online recovery. Comparison reports highlight what objects and attributes have been changed and deleted in Active Directory enabling efficient, focused recovery at the object or attribute level. Accurate backups and a quicker recovery enable you to reduce the time and costs associated with AD outages and reduce the impact on users throughout your organization.
Recovery Manager for Active Directory 7.10 includes the following new features:
The following is a list of issues addressed and enhancements
implemented in this release of Recovery Manager for Active Directory. Please
note that supplements to this list may be published after the product
release. For the latest supplements, please search Quest Knowledgebase
at http://support.quest.com.
TF00037425,
TF00037427,
TF00069534,
TF00069530
Enhancement: The new functionality implemented in the "Deleted Objects"
container provided by Recovery Manager helps you to more easily locate
specific deleted objects in a domain. When viewing the contents of the
"Deleted Objects" container, you can now use the Recovery Manager console
and ADUC to sort, group, or filter the objects by such criteria as name,
type, deletion date, tombstone lifetime, or deleted object lifetime.
TF00069531,
TF00069532,
TF00098907,
TF00098908, TF00069536
Enhancement: This version of Recovery Manager supports Microsoft's Active
Directory Recycle Bin feature. In an environment where Microsoft's Active
Directory Recycle Bin is enabled, Recovery Manager can restore deleted
Active Directory objects with all their attributes, links, and group
memberships existed at the moment of deletion, without using any backup. In
this restore scenario, you can select a target Active Directory container to
restore the deleted objects to. This version of Recovery Manager also allows
you to selectively recycle deleted Active Directory objects.
TF00070652
Enhancement: The setup package has been optimized to exclude the Adobe
Reader Setup program.
TF00095531, TF00094554
Enhancement: The Password and SIDHistory Recoverability Tool now can detect
whether or not Microsoft's Active Directory Recycle Bin is enabled in your
environment. If it is, the Password and SIDHistory Recoverability Tool
displays a warning message stating that the tool is incompatible with
Microsoft's Active Directory Recycle Bin.
TF00050656
Fixed: Unexpected behavior: When restoring deleted Active Directory objects
from the Active Directory Users and Computers (ADUC) tool, if you select a
backup that is older than some of the deleted objects' tombstone lifetime,
no warning message displays. The expected behavior in such a situation is
that a warning message should inform you that with currently selected backup
you cannot restore some of the deleted objects.
TF00055433
Fixed: When attempting to view a Recovery Manager report by using the Start-RMReportViewer
cmdlet, you may encounter the following problem: The report fails to open
and an uninformative error message displays. This problem occurs if all of
the following conditions are true:
- Recovery Manager is configured to use SQL Server Reporting Services (SSRS)
to display reports.
- The SQL Server that hosts SSRS (this is the SQL Server you specified when
installing Recovery Manager) is unavailable.
TF00063350
Fixed: After you select the "Deleted Objects" node in the Active Directory
Users and Computers (ADUC) tool on the Recovery Manager computer, the column
heading names in the right pane may appear truncated.
TF00063454
Fixed: The deleted objects filter may unexpectedly become unavailable in the
Active Directory Users and Computers (ADUC) tool: The check boxes through
which you can access the filter may be missing from the column headings in
the right pane of ADUC. This problem occurs if you close ADUC while it is
displaying the "Getting deleted objects" status message, and then start the
tool again.
TF00064323, TF00064234
Fixed: Your attempt to perform a restore or compare operation using the
agent-based method may fail with the following error message being displayed
in the Recovery Manager console: "Failed to create a remote object. Class
not registered."
This problem occurs if all of the following conditions are true:
- You are using the Recovery Manager console under a 32-bit edition of
Windows Server 2003.
- The backup you attempt to restore or compare is created for a domain
controller based on a 64-bit edition of Windows Server 2008.
TF00065740, TF00059179,
TF00070095
Fixed: A backup creation operation may fail with the following error message
being displayed in the Recovery Manager console: "Unable to execute request
(111). Unable to gather Volume Shadow Copy Service information. Access is
denied." You may observe this problem if the account that Recovery Manager
uses to create backups has no Read access to any GPO in the SYSVOL folder on
the domain controller being backed up.
TF00065874
Fixed: Selecting a significant (500+) number of deleted objects in the
Active Directory Users and Computers (ADUC) tool on the Recovery Manager
computer may cause the system to become non-responsive for a certain period
of time.
TF00068380
Fixed: The Setup program may fail to install Recovery Manager on a computer
running a non-English version of Windows, returning the following message:
"An error occurred while installing system components for Quest Recovery
Manager for Active Directory Forest Edition (x86). Setup cannot continue
until all system components have been successfully installed." When you view
the message details, they indicate that Microsoft Management Console 3.0
failed to install.
Your attempt to manually install Management Console 3.0 also fails with the
following error message: "Setup cannot update your Windows Server 2003 files
because the language installed on your system is different from the update
language."
TF00069480
Fixed: The "Preparing for Working with AD and AD LDS (ADAM) Backups" section
in the User Guide provides incorrect information about the Esent.dll file
location on a Windows Server 2008-based computer.
TF00069539
Fixed: A Recovery Manager scheduled task may fail to start if Recovery
Manager is installed on a computer running the Japanese-language version of
Windows. This is because the command line in the task properties includes an
unsupported double-byte character (a colon).
TF00069721
Fixed: The Recovery Manager Setup program may fail to install .NET Framework
3.5 SP1, returning an uninformative error message.
TF00069725
Fixed: The Recovery Manager Setup program may fail to install Windows
PowerShell 1.0, returning the following error message: "Component Windows
PowerShell 1.0 has failed to install."
TF00069729
Fixed: Recovery Manager for Active Directory may fail to find the UNIX user
attributes included in Active Directory schema by Quest Vintela
Authentication Services. For example, you may encounter this problem while
using the Online Restore Wizard to find and select UNIX user attributes.
TF00070664
Fixed: Your attempt to modify the properties of a Computer Collection by
using a cmdlet provided by the Recovery Manager Management Shell may fail
with the following error message: "To collect forest recovery metadata, you
must install Recovery Manager for Active Directory Forest Edition."
TF00078885
Fixed: Recovery Manager fails to integrate with recently-released Quest
ChangeAuditor versions 4.8 and 4.9.
TF00081418
Fixed: When using Recovery Manager, you may observe these problems:
- After you click the "Test Settings" button on the E-mail tab in the
Settings dialog box, you receive the following error message: "Failed to
send the test message. The server threw an exception".
- Some or all backup creation sessions for Computer Collections finish with
the Abandoned status.
TF00088489
Fixed: The Reporting feature may fail to work as expected. For example, your
attempt to generate a report in the Recovery Manager console may permanently
fail.
This problem results from the fact that the Setup program may fail to create
the Recovery Manager reporting database during the installation of the
product.
TF00091883
Fixed: The word "Windows" is misspelled as "Widows" in the check box name on
the "Configure Windows Firewall" page in the Setup Wizard.
TF00091972
Fixed: The Recovery Manager console (MMC snap-in) may crash while you are
using the Online Restore Wizard to compare objects with the agent-based
method.
TF00092382
Fixed: The Online Restore Wizard may crash in the following situation: You
attempt to restore an object to a container that is different from the
original home container of the object. This problem only occurs if you are
using the agent-based restore method.
TF00095081
Fixed: You may encounter misleading information when using the Recovery
Manager functionality in the Active Directory Users and Computers tool to
restore an object whose organizational unit (OU) is deleted: The "Operation
status" page in the Restore Wizard erroneously reports that the restore
operation completed successfully, whereas the object is not actually
installed.
TF00096947, TF00096348
Fixed: Your attempt to restore security settings on a Group Policy object
(GPO) by selecting the "Restore security settings on Group Policy Object"
check box on the GPO Restore Options page in the Group Policy Restore Wizard
may have the following unexpected result:
Some of the target GPO files located in the SYSVOL folder on the target DC
may be deleted or modified.
This problem occurs because during the recovery operation the wizard deletes
the target GPO files located in SYSVOL and then restores these files from
the backup you selected. The expected behavior in the described scenario is
that the wizard should only restore security settings on the target GPO
without making any other changes to that object and its files.
TF00097117
Fixed: Recovery Manager may not create any differential backups in a
situation where it is configured to create them:
- The Recovery Manager console is properly configured (the "Create
differential backups" check box is selected on the "Differential Backups"
tab in the "Computer Collection Properties" dialog box for the target
Collection).
- The system registry is appropriately modified on each target domain
controller to allow for the creation of differential backups.
This problem only occurs when the "Save backups on the Recovery Manager
computer or UNC share" check box is cleared on the "Console Storage" tab in
the "Computer Collection Properties" dialog box for the target Collection.
TF00098205
Fixed: Although the Windows 2000 Server operating system is not supported by
Recovery Manager, the Recovery Manager Setup fails to display any error or
warning when it is run on a Windows 2000 Server-based computer.
TF00100076
Fixed: The "DC Storage" tab may be unexpectedly missing from the "Collection
Defaults" dialog box.
The following is a list of issues known to exist at the time of Recovery Manager
for Active Directory release.
Please note that supplements to this list may be published after the
product release. For the latest supplements, please search Quest Knowledgebase
at http://support.quest.com.
TF00046306
You may observe the following problem after you select a session in the console
tree to view its details in the right pane: The Domain column in the right pane
is empty, although it should provide information about the domains that include
the computers on which you ran the backup operation.
WORKAROUND
To view information about the domains, refresh the session details:
- Right-click the session in the console tree, and then click Refresh on the
shortcut menu.
TF00055758
In certain rare conditions, you may experience long delays when using the Active
Directory Users and Computers tool on the Recovery Manager computer.
WORKAROUND
Uninstall the Windows Administrative Tools Extension feature of Recovery
Manager:
1. Click Start, then click Run.
2. Type appwiz.cpl, and click OK.
3. In the list of installed programs, select the entry representing Recovery
Manager for Active Directory (or Recovery Manager for Active Directory Forest
Edition), and click Change.
4. Step through the Setup Wizard until you are on the "Change, repair, or remove
the installation" page.
5. Click Change, and then step though the wizard to uninstall the Windows
Administrative Tools Extension feature.
TF00057137
Your attempt to back up a domain controller may fail with the following error
message being displayed: "Unable to execute request (109). Unable to connect to
LDAP server. Target server: <Name>. Port: <Number>. Unable to connect to LDAP
server. Server Down." This problem occurs if all of the following conditions are
true:
- The domain controller you attempt to back up has AD LDS (ADAM) installed on
it.
- AD LDS (ADAM) installed on the domain controller is disabled or damaged.
WORKAROUND 1
Remove AD LDS (ADAM), and then retry the backup operation.
WORKAROUND 2
1. If necessary, repair AD LDS (ADAM).
2. Activate AD LDS (ADAM), and then retry the backup operation.
TF00057273
When using the Online Restore Wizard, in a situation where you choose the
agent-based restore method, and then specify invalid credentials to access the
target domain controller, you may encounter the following error message that
incorrectly describes the problem: "Unable to install Online Restore Agent.
Error description: Failed to create a remote object. Access is denied."
In fact, the error message should read that you have specified invalid
credentials to access the target domain controller.
WORKAROUND
Disregard the error message in question. Rather, specify valid credentials to
access the domain controller:
1. Click the Back button until you are on the "Domain Access Options" page.
2. Click the Change button, and then specify valid credentials to access the
domain controller. When finished, click OK.
3. Step through the wizard to complete the restore operation.
TF00058108, TF00058213, TF00058414, TF00058450, TF00058491, TF00058532,
TF00058587, TF00058668, TF00058751, TF00058863, TF00058977,
TF00059061, TF00059427, TF00059435, TF00059795, TF00060099, TF00060171,
TF00060215, TF00060279
When using the Recovery Manager Management Shell, you may encounter any of the
following problems:
- Some cmdlets or cmdlet parameters may not work as expected or fail to work at
all.
- Cmdlet Help mentions the following nonexistent cmdlet parameter: "-DayOfWeek".
The cmdlet parameter that exists is named "-DaysOfWeek".
- Cmdlet Help erroneously mentions the following value for the "-Week" cmdlet
parameter: None. In fact, this value is not supported.
- Cmdlet Help fails to provide the values that the "-BackupComponents" parameter
can take.
- Some cmdlet usage examples provided in Cmdlet Help for the Add-RMBackup,
Compare-RMActiveDirectoryObject, and Get-RMBackupContent cmdlets may be
incorrect.
WORKAROUND
Use the Recovery Manager console to perform the tasks you cannot complete in the
Management Shell due to these problems.
TF00061637
You may encounter the following problem when viewing the progress of a restore
operation on the Restore Progress page in the Repair Wizard: The progress bar
fails to show any progress, so you have no way of knowing when you can proceed
with the wizard.
This problem shows up when you are restoring data from an encrypted backup.
WORKAROUND
To proceed with the wizard, wait until the Next button becomes available. Click
the button, and proceed with the steps in the wizard.
TF00061714
If you start the Recovery Manager Management Shell under an account that has no
local administrator rights on the Recovery Manager computer, you may not be able
to perform any operations in the Management Shell: Your attempt to perform an
operation using a Recovery Manager cmdlet may end up with a non-informative error message.
WORKAROUND
Start the Recovery Manager Management Shell under an account that has local
administrator rights on the Recovery Manager computer.
TF00061824
You may encounter the following unexpected behavior while using the "Console
Storage" tab in the Properties dialog box for a Computer Collection or the
Defaults dialog box (default properties for Computer Collections): When you
click the Browse button, and then specify a nonexistent location in the Folder
box, no warning message appears to inform you that the location does not exist.
WORKAROUND
Make sure the location you specify in the Folder box exists.
TF00062518
The Group Policy Object Selection page in the Group Policy Restore Wizard may
provide incorrect information about Group Policy objects: The "State in AD"
column may display "Different" for the Group Policy objects that actually are
identical.
WORKAROUND
To display correct information about Group Policy objects:
1. On the Group Policy Object Selection page, click "View Report" and wait until
the report opens.
2. Close the report, and then click the "Compare All" button on the "Group
Policy Object Selection" page.
Upon its refreshing, the page will display correct information about Group
Policy objects.
TF00063291
The Start-RMBackup and Get-RMSession cmdlets fail to provide any means for you
to get the details of an unsuccessful backup operation or session.
WORKAROUND
To view detailed information about a failed backup operation or session, use the
Recovery Manager console.
TF00065697
You may encounter the following unexpected behavior in the Online Restore
Wizard: The wizard fails to display any warning message if you select a
read-only domain controller (RODC) as a target for online restore operation.
This is unexpected behavior, because Recovery Manager is not capable of
restoring any objects on RODCs.
WORKAROUND
Do not select a RODC as a target for online restore operation.
TF00078270
You may encounter the following misleading error message when attempting to
recover a deleted object whose tombstone has expired: "An error occurred when
attempting to undelete the object: Directory object not found."
In fact, the message should state that the object cannot be undeleted because
its tombstone has expired.
WORKAROUND
Disregard the misleading error message that displays in the described scenario.
TF00100290
When using the Online Restore Wizard to restore an object with the agentless
method, you may encounter the following problem: The restore operation report
generated in the wizard may erroneously state that some attributes of the object
were not restored with the following error:
"The attribute cannot be modified because it is owned by the system."
In fact, all attributes of the object are restored successfully.
WORKAROUND
Disregard the described error message in the restore operation report.
TF00100462
No Help topic opens when you do the following:
1. In the Active Directory Users and Computers tool on the Recovery Manager
computer, select the "Deleted Objects" container.
2. From the main menu, select "Help | Help on - Deleted Objects".
WORKAROUND
To view information about the "Deleted Objects" container, use the Search tab in
Recovery Manager Help to find and open the following topic:
"Recovering Deleted Objects"
TF00100696, TF00100704,
TF00100712, TF00100714, TF00100715, TF00100716
The related Help topic may fail to open after you click the Help button or the
question mark button on some elements of the Recovery Manager user interface.
WORKAROUND
Use the Search tab in Recovery Manager Help to find the related Help topic.
TF00100915
The Active Directory Users and Computers (ADUC) tool may crash when you are
attempting to recycle an Active Directory object by using the Recovery Manager
functionality provided in ADUC.
WORKAROUND
To recycle the object, use a cmdlet supplied with the Recovery Manager
Management Shell.
TF00100997
You may encounter the following error message that incorrectly describes the
problem in a situation where you are using an account that has insufficient
permissions to perform the restore from backup operation: "Caught exception in
PSExecuteFunc :Backup registration database error occurred: Operation must use
an updateable query."
WORKAROUND
When the error message in question displays, make sure the account you are using
has sufficient permissions to perform the restore from backup operation.
Recovery Manager for Active Directory version 7.10.1 is upgradeable from version 7.7.x or later. To upgrade, install Recovery Manager on the computer where an upgradeable product version is installed. During the upgrade process, setup transfers the product configuration to the new installation of Recovery Manager.
For your scheduled backup tasks to work properly after the upgrade, install the new version of Recovery Manager to the folder where the earlier version is installed. This assures seamless operation of all backup creation tasks scheduled in the earlier version. If you install the new version of Recovery Manager to a different folder, the backup creation tasks will still refer to the old installation folder. In this case, you will need to re-configure the tasks using Windows Task Scheduler.
Quest Backup Agent for Active Directory preinstalled on domain controllers is not upgraded automatically during the Recovery Manager upgrade. To upgrade Backup Agent, manually install Backup Agent version 7.10.1 on every domain controller where the earlier version is preinstalled.
Recovery Manager for Active Directory 7.10.1 is incompatible with comparison and restore reports generated with version 7.8.0, therefore these reports will be lost upon the product's upgrade from version 7.8.0 to 7.10.1. For instructions on how to keep these reports, see Quest Knowledgebase solution SOL48486 at http://support.quest.com.
Before installing Recovery Manager for Active Directory, ensure your system meets the following minimum hardware and software requirements:
| Processor | 450 MHz or higher Intel Pentium-compatible CPU |
| Memory | 128 MB (256 MB recommended) plus 0.5 MB per 1000 objects selected in the wizard, due to the requirements of the Microsoft Extensible Database Engine (ESE). This requirement also applies when you open a directory folder in the wizard. |
| Hard Disk Space | 20 MB or more. Additional storage space is required for a backup repository, at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40 MB for the transaction log files. |
| Monitor | SVGA at 1024 x 768 or higher. |
| Operating System | You can install Recovery Manager on a computer running
one of the following operating systems (both x86 and x64 platforms are supported):
You can use Recovery Manager to perform backup, restore, compare, and clone operations on computers running any of the following operating systems (both x86 and x64 platforms are supported):
Note On a computer running Microsoft Windows 2000 Server, you can only perform backup, restore, and compare operations. |
| Additional Software |
|
| Password and SIDHistory Recoverability Tool | This tool can only be used in an environment where Microsoft's Active Directory Recycle Bin feature is not enabled. |
This section contains information about installing and operating this product in non-English configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation.
This release is Unicode-enabled and supports any character set. In this release, all product components should be configured to use the same or compatible character encodings and should be installed to use the same locale and regional options. This release is targeted to support operations in the following regions: North America, Western Europe and Latin America, Central and Eastern Europe, Far-East Asia, Japan.
The release is localized to the following languages: Japanese, French, and German.
The Recovery Manager for Active Directory release package contains the following:
Refer to the Quick Start Guide for installation instructions.
| info@quest.com | |
| Quest Software, Inc. World Headquarters 5 Polaris Way Aliso Viejo, CA 92656 USA |
|
| Web |
Refer to our Web site for regional and international office information.
Quest Support is available to customers who have a trial version of a Quest product or who have purchased a commercial version and have a valid maintenance contract.
Quest Support provides around the clock coverage with SupportLink, our web self-service. Visit SupportLink at http://support.quest.com.
From SupportLink, you can do the following:
View the Global Support Guide for a detailed explanation of support programs, online services, contact information, and policy and procedures.
The guide is available at: http://support.quest.com/pdfs/Global Support Guide.pdf.
Note: This
document is only available in English.
This document contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser’s personal use without the written permission of Quest Software, Inc.
© 2009 Quest Software, Inc. ALL RIGHTS RESERVED.
Quest, Quest Software, the Quest Software logo, Aelita, Akonix, Akonix, AppAssure, Benchmark Factory, Big Brother, ChangeAuditor, DataFactory, DeployDirector, ERDisk, Foglight, Funnel Web, GPOAdmin, I/Watch, Imceda, InLook, IntelliProfile, InTrust, Invertus, IT Dad, I/Watch, JClass, Jint, JProbe, LeccoTech, LiteSpeed, LiveReorg, MessageStats, NBSpool, NetBase, Npulse, NetPro, PassGo, PerformaSure, Quest Central, SharePlex, Sitraka, SmartAlarm, Spotlight, SQL LiteSpeed, SQL Navigator, SQL Watch, SQLab, Stat, StealthCollect, Tag and Follow, Toad, T.O.A.D., Toad World, vAnalyzer, vAutomator, vControl, vConverter, vEssentials, vFoglight, vMigrator, vOptimizer Pro, vPackager, vRanger, vRanger Pro, vReplicator, vSpotlight, vToad, Vintela, Virtual DBA, VizionCore, Vizioncore vAutomation Suite, Vizioncore vEssentials, Xaffire, and XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of America and other countries. Other trademarks and registered trademarks used in this guide are property of their respective owners.
If you have any questions regarding your potential use of this material, contact:
|
Quest Software World Headquarters
LEGAL Dept 5 Polaris Way Aliso Viejo, CA 92656 Email: legal@quest.com |
The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document.