Manual disaster recovery of a local Windows computer (includes non-authoritative and authoritative restore of Active Directory for a domain controller)

This procedure will restore your computer's operating system to a pre-disaster state and will restore your data files, except those protected by one of the Backup Exec database agents, such as the Exchange Agent or SQL Agent. If any of your data is protected by Backup Exec agents, refer to the section on restoring the data protected by the agent before beginning disaster recovery.

If your system is protected by Backup Exec for Windows Servers Intelligent Disaster Recovery (IDR), you should use IDR for disaster recovery.

See About the Intelligent Disaster Recovery Option.

The procedure described in the following section allows you to manually recover a computer not protected by IDR.

A media drive must be attached to the computer that is being recovered.

You will also need the following items:

Note:

If you recover a Windows Server 2008 computer that has BitLocker encryption enabled, you must re-enable BitLocker encryption following the restore.

See Microsoft's documentation for more information on BitLocker drive encryption.

To manually recover a local Windows computer

  1. Install the original version of Windows.

    This basic Windows installation is necessary to provide Backup Exec with a target to which it can restore the system. The computer name, Windows directory, and the file system (such as NTFS) must be the same as the previous Windows installation. This installation will be overwritten by the backed up version, which will restore your original system configuration, application settings, and security settings.

    If you are recovering from an entire hard disk failure, use Windows setup to partition and format the new disk during installation.

    Format the partitions with the same file system as before the failure, as follows:

    • If the system was in a specific domain or workgroup, do not join the domain or workgroup at this time.

    • If you are recovering a domain controller, do not perform the domain controller installation process at this time.

  2. Install Backup Exec for Windows Servers to a directory other than where it was originally installed (this is a temporary installation).

    Always log on to Windows using the Administrator account or its equivalent during this procedure.

  3. Using the Device Configuration Wizard, install the appropriate device driver for the attached media drive.

  4. Start Backup Exec for Windows Servers.

  5. From the navigation bar, click Devices.

  6. Inventory the media containing the latest full backup of the computer to be recovered.

    See Inventorying media.

  7. Catalog the media containing the latest full backup of the computer to be recovered. If the subsequent differential/incremental backups are on separate media, catalog those also.

    See Cataloging media while reviewing devices or media.

  8. From the navigation bar, click Restore.

  9. Select all sets from the full and incremental backups that contain logical drives on the hard disk. If differential backup sets are to be restored, select only the last differential set. Make sure you include System State or Shadow Copy components as part of the restore selections.

  10. On the Properties pane, under Settings, click General, and then select the following options:

    • Restore over existing files

    • Restore security

    • Preserve tree

  11. On the Properties pane, under Settings, click Advanced, and then select the appropriate options.

    See Advanced options for restore jobs.

    If you are restoring a computer that is the only domain controller in the domain or the entire domain is being rebuilt and this is the first domain controller, select the option Mark this server as the primary arbitrator for replication when restoring folders managed by the File Replication Service, or when restoring SYSVOL in System State.

  12. Click Run Now.

  13. If you are restoring a computer that is the only domain controller in the domain or the entire domain is being rebuilt and this is the first domain controller, reboot the computer after the restore job successfully completes.

    Your computer's operating system is now restored to a pre-disaster state. Your data files have been restored, except those protected by Backup Exec database agents.

  14. Continue with one of the following:

    If you are performing an authoritative restore

    go to step 15.

    If you are not performing an authoritative restore

    the recovery is complete.

  15. Do the following to change the Backup Exec services to the local system account.

    • Right-click My Computer and then select Manage.

    • From the left pane of the Computer Management utility, double-click Services and Applications.

    • Click Services.

    • In the right pane, double-click each Backup Exec service, and from the Log On tab, change Log on as to use Local System account.

    • Close the Computer Management utility.

  16. Restart the computer.

  17. Press <F8> during startup.

    A menu appears that allows you to diagnose and fix system startup problems.

  18. Select Directory Services Restore Mode.

  19. Launch Backup Exec.

  20. From the navigation bar, click Restore.

  21. Select System State (Windows 2000/XP) or Shadow Copy (Windows 2003/2008) components as the restore selections. Run the Restore job.

  22. At this point, you can either choose to restore the entire Active Directory, or specific objects from the Active Directory.

    Restore the entire Windows 2000 or Windows 2003 Active Directory by performing the following:

    • Open a command prompt.

    • Type NTDSUTIL and press Enter.

    • Type Authoritative Restore and press Enter.

    • Type Restore Database, press Enter, click OK and then click Yes.

    See Microsoft's documentation for running NTDSUTIL for Windows 2008.

    Restore specific objects from the Active Directory by performing the following:

    • Open a command prompt.

    • Type NTDSUTIL and press Enter.

    • Type Authoritative Restore and press Enter.

    • Type Restore Subtree "ou=<OU Name>.dc=<domain name>,dc=<xxx> (without the quotation marks), and then press Enter, where <OU Name> is the name of the organizational unit you want to restore, <domain name> is the domain name the OU resides in, and <xxx> is the top level domain name of the domain controller, such as com, org, or net. You can do this as many times for as many objects you need to restore.

  23. Once you have finished restoring Active Directory information, exit NTDSUTIL.

  24. Restart the computer.

More Information

Restoring data by setting job properties

Disaster recovery of a remote Windows computer (includes non-authoritative and authoritative restore of Active Directory for a domain controller)

Manual disaster recovery of Windows computers