PowerProtect Data Manager Appliance 5.16.0.0 File System User Guide

Self-service granular level restore of active directory objects

Perform self-service granular level restore of active directory objects using the Agentilr server.

1. Run the mount command to enter the MOUNT section of the Agentilr server.
2. Once you are in the MOUNT section, run the following command to mount the backup copy on the Agentilr server.

   MOUNT --ssid=<backup-id> --dd_host=<DD-IP-Address/Hostname> --dd_user=<DD-Username> --dd_device_path=<DD-Device-Path> --dd_password=<DD-Password> --username=<Username> --password=<Password> --client_name=<Backup-Host-FQDN>

   For example:

   MOUNT --ssid=1698906896 --dd_host=10.125.136.153 --dd_user=plc_121-e2e190-70c7d --dd_device_path=/plc_121-e2e190-70c7d/PLCTLP-06ba2865-7fea-486f-acf9-d25d862d28e9

   The backup is mounted on the Agentilr server and the following message is displayed. MOUNT successful with Mount Id <backup-id>.
3. Run the exit command to exit the MOUNT section as the backup is mounted.
4. Optionally, you can perform the following:
   • Run browse command to enter the BROWSE section to browse the contents of the mounted backup or a live database. See Self-service commands for ADGLR for more information about the BROWSE section.
   • Run search command to enter the SEARCH section to search particular objects based on their classes or types. See Self-service commands for ADGLR for more information about the SEARCH section.
   • Always run the exit command to exit the individual sections after performing the relevant tasks.
5. Run the restore command to enter the RESTORE section of the Agentilr server.
6. Before performing the restore operation, do one of the following as per the requirements:
   • For object level restore, create a text file that contains the distinguished names of all the objects that must be restored. The format of the text file must be dn followed by the distinguished names of the objects. For example:

     dn
     CN=user test 23,OU=Test OU,DC=pune,DC=myarvmtest16,DC=com
     CN=testcomp1,OU=Test OU,DC=pune,DC=myarvmtest16,DC=com

   • For attribute level restore, create a text file that contains the distinguished name of the object and all the attributes of the object. The format of the text file must be dn followed by the distinguished name of the object, and then attributes followed by the list of the attributes that must be restored. For example:

     dn
     CN=Test Group,CN=Computers,DC=pune,DC=myarvmtest16,DC=com
     attributes
     accountNameHistory
     adminCount
     adminDescription
     adminDisplayName
     altSecurityIdentities
     cn
     description
     desktopProfile
     displayName
     displayNamePrintable
     distinguishedName
     dSASignature
     dSCorePropagationData
     extensionName
     flags

7. Once you are in the RESTORE section, run the following command to restore the selected object from the mounted backup.

   RESTORE --data_file=<FILE_PATH> [--alt_location=<ALT_LOCATION>] [--default_user_pwd=<PASSWORD>] [--disable_user=<BOOL>] [--change_pwd_next=<BOOL>]

   Where

   • --data_file=<FILE_PATH> is the file path to the text file containing restore data
   • --alt_location=<ALT_LOCATION> is the alternate path to restore the contents of the restore data text file. This is an optional parameter.
   • --default_user_pwd=<PASSWORD> is to set a default password for the user accounts being restored. This is an optional parameter.
   • --disable_user=<BOOL> is to enable or disable the user account after restore. The default value is FALSE. This is an optional parameter.
   • --change_pwd_next=<BOOL> is to prompt for password change for the next login. The default value is FALSE. This is an optional parameter.
   For example:

   RESTORE --data_file=restore_items.txt

   For attribute level restores, create a text file that contains the distinguished name of the object, and all the attributes of the object. The format of the text file must be dn followed by the distinguished name of the object, and then attributes followed by the list of attributes that must be restored.
8. Run the exit command to exit the RESTORE section as the backup is mounted.
9. Run the unmount command to enter the UNMOUNT section.
10. Run the following command to unmount the backup copy.

    unmount --mount_id=<MOUNT_ID>

    where --mount_id=<MOUNT_ID> is the mount id of the mounted backup copy.
11. Run the exit command to exit the UNMOUNT section.