PowerProtect Data Manager 19.17 Virtual Machine User Guide

Performing file-level restores as a domain user on Windows

Perform the following configuration steps before configuring a file-level restore on supported Windows platforms as a domain user. Completing this configuration will allow you the domain user to perform file-level restores of files and folders belonging to any domain user from any Windows virtual machine backup copy.

1. Go to Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > User Rights Management, and ensure that the group policy setting in your domain controller has the following four user rights added for the file-level restore domain user or domain group being used to perform the restore:
   • Back up files and directories
   • Modify an object label
   • Restore files and directories
   • Take ownership of files or other objects.

   

2. In the domain's group policy setting, ensure that the user group created for members belonging to the required file-level restore domain user or domain group has the group name set to Administrators (built-in).
3. Go to Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups, and ensure that the Action for the Local Group is set to Update so that subsequent settings are updated instead of overwriting any existing group settings.
4. Once the group policy has been created, apply the above group policy by opening a command prompt and using the command line gpupdate /force inside the domain controller.
5. On the target virtual machine for the file-level restore, go to Computer Management > System Tools > Local Users and Groups > Groups, and verify that the required FLR domain user or domain group displays as a member of the Administrators group.