Cannot get a granular backup of Active Directory

Hello Alex,

The client should be placed on a non-snapshot group.

Can you please share some screenshots of all the tabs for the client configuration?

Thank you,

Carlos

Please follow my document here:

How to Configure Active Directory Backup

First Check if the Active Directory Server and NetWorker Server is able to communicate each other bi-directionally using ping & nslookup, provided they are not having firewall between. If there are firewall in between then required ports needs to be open.

1. Install the NetWorker Client Software in the Client (Client : Active Directory Server)
2. Install NMM in the Client, do not required to check and Application while running the config checker before installing NMM.
   
3. Add GLR Option while asked during next step of installation
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114018/2.jpg
4. It will ask for restart once completes the installation, it is always recommended to restart the server once possible, else GLR recovery may fail.
5. Go To NetWorker Server > Open NMC > Configuration Tab > Clients > Right Click > New Client Wizard > and Configure the Client as below..
   Remember not to select Deduplication, Deduplication will be selected as None
   Continue and complete the Wizard with a Specific Group to Backup Active Directory, Please Backup Selection can be any or nothing
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114019/3.pnghttps://community.emc.com/servlet/JiveServlet/showImage/38-11697-114021/5.pnghttps://community.emc.com/servlet/JiveServlet/showImage/38-11697-114020/4.png
6. In Client Properties > Go to General Tab and Define save set like shown in the Screen Shot below
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114022/6.png
7. Backup Command will be “nsradsave.exe and under Deduplication Tab, Data Domain backup check box will be “unchecked”
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114023/7.png
8. Save the Configuration and Run the Backup, Backup will run a bit slow but will be completed, Verify the save set defined is backed up successfully
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114024/8.png
9. To Restore : Login the Active Directory Server and Open “NetWorker User for Microsoft”. Verify the Console displaying the Backup of the Active Directory Objects
   https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114025/9.png
10. Create a test User and Run a Backup, here we have created a test user named “Deb-EMC” under Users
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114026/10.png
11. Verify the Group Membership of the User, here is the Example
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114027/11.png
12. Once the Backup is completed, Delete the User and go to > “NetWorker User for Microsoft”, Browse to Users Tab and Locate the deleted user as below, Select the User as shown
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114028/12.png
13. Click on the Start Recover Button below
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114029/13.png
14. Refer to “Monitor” Tab to monitor the restore Activity, It will show recover completed successfully
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114030/14.png
15. Close the NetWorker Window once done. Login to “Active Directory Users and Computers” and navigate to the Users directory, Deb-EMC Account will be showing back again which was deleted previously
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114031/15.png
16. Remember the recovered Account will be in Disabled mode, we need to enable it back, and please check the group membership also that is restored properly
    https://community.emc.com/servlet/JiveServlet/showImage/38-11697-114032/16.png

Please Note: NMM performs only Granular Level backup of AD, supporting the following objects:

1. Users
2. Groups
3. Organizational units
4. Computer
5. Contact
6. InetOrgPerson
7. Shared folder
8. MSMQ queue alias

Hi Carlos,

Should I put anything in the "Remote access:" field on the "Globals (2 of 2)" tab?

Thank you.

Hi Deb,

Thank you for this instruction.

On the step 8 I cannot get a backup - it finishing with an error.

I also created a client instance for a common backup with "All" save set. It is successful.

My Group config:

Thank you to Deb for some thoughts.

You have recommended to use Client Wizard and it works.

I used before the documentation for NMM:

" Configuring a client resource

This procedure describes the steps to configure a client resource from the NetWorker Administration GUI.

Procedure

1. Open the NetWorker Administration GUI.

2. Click Configuration.

3. In the expanded left pane, select Clients.

4. From the File menu, select New.

5. Click the General tab.

... "

- and it did not work.

Now I have additional question. It finishes as successful but in the Details I can see that index file in the "Completed Successfully:" but the save sets (DC=xxx,DC=xxx) in the "Failed:" part of the window without any messages.

Is it normal?

Thank you.

What is your Target Device? is it Data Domain Boost?

Yes, it is.

Try to put the whole command in the Backup command field, like this:

nsradsave.exe -i -s -b -l full DC= ,DC=

Thank you for the suggestion but the problem has been resolved.

This actually worked for me.

Thanks Alvaro, Lets share Ideas onlune my skype herebieokantey1

Please mark my answer as helpful answer. Great that it works for you.

I have found another problem... Using this command for backup does not take the GROUP identity from the job group, so if you have a Clone Job that uses the GROUP attribute to filter what to clone, there is not group identity associated with the saveset if you don't add it explicit in the command with -g .

So it should be:

nsradsave.exe -i -s -b -g -l full DC= ,DC=

That generates a problem if you use the same client in different groups.