Veeam Explorer for Active Directory Beta released
March 17, 2014 Leave a comment
Veeam just released a beta version of Veeam Explorer for Active Directory. This nice piece of software allows a simple restore of Active Directory objects without having to restore a complete Active Directory server. Just do a file level recovery of a domain controller. The guest filesystem will be mounted locally on the backup server to C:\veeamflr folder. After that, browse into that folder with Explorer for Active Directory and open ntds.dit . Use the Explorer for Active Directory to restore objects directly into the operational AD. It is also possible to export to a LDIF file.
Supported are Windows Server 2003, 2008 and 2012. When restoring objects of a Windows Server 2012 domain controller make sure Veeam Explorer for Active Directory is installed on the same version OS (2012) or on Windows 8.
The info below was taken from the Veeam forum:
VEAD supports search and restore of all AD objects types, including users, groups, computer accounts and contacts. It can restore individual object’s attributes, the entire objects, and even the whole organizational units (along with the hierarchy). Of course, the deleted objects do not have to be present in the Recycle Bin, as we will obtain all the data from backup where the objects are still present in AD. More importantly, unlike many other Active Directory recovery solutions, we do not require that the tombstone of the deleted object is still present in AD. VEAD is also fully Microsoft Exchange aware, so when restoring the user account, we will restore all Exchange-related attributes and reconnect the mailbox. As you will see, this is a very comprehensive solution.
But, there is one more thing. VEAD also has the unique ability to recover passwords! Imagine accidentally deleting the entire OU with all your users. Without this feature, each user will be prompted to set the new password upon first logon, which is very disruptive and insecure. But this feature will come even more handy if you lose an OU with computer accounts! If you simply restore those back, computers will not be able to logon to the domain because of computer account password mismatch. Now, just imagine the nightmare of going to each computer, switching it into workgroup, and then joining it back into the domain… hundreds of times! This is when you will really appreciate this feature.
The beta can be downloaded here. (requires B&R 7.0)
Andrea Mauro of vinfrastructure.it wrote a great post about Veeam Explorer for Active Directory