Installation and User's Guide

Related reference“Query Adobjects” on page 580“Restore Adobjects” on page 620Restrictions and limitations when restoring Active DirectoryobjectsThere are some restrictions and limitations to be aware of when restoring ActiveDirectory objects.Understand the following restrictions before restoring objects:v Do not restore the Active Directory as part of a system-state restore operation,unless it is intended to be used for a disaster recovery-level restore operation ofthe full Active Directory. This type of restore operation requires the ActiveDirectory Server to be stopped and restarted.v You cannot perform a point-in-time restore of tombstone objects. You canperform a point-in-time restore of Active Directory objects that are backed up tothe server.v You cannot restore Active Directory objects from backup sets.Understand the following limitations before restoring objects:v Restoring Active Directory objects from the Tivoli Storage Manager serverrequires temporary space on your local hard disk drive. You can use thestagingdirectory option to specify a directory on your local hard disk for storingtemporary data from the server. Depending on the size of the temporary data,network bandwidth, and both client and server performance, this operation cantake anywhere from 20 seconds to over an hour. There might be a delay inrefreshing the Restore window when displaying the Active Directory tree.v User passwords cannot be restored by default. A restored user object is disableduntil the administrator resets the password and re-enables the account. Also, ifan account was deleted from the domain and is then restored by Tivoli StorageManager, it must be manually joined to the domain after the restore operation.Otherwise, users on the target computer cannot log on to the domain.In order to have a user or a computer object fully operational after restore, youmust modify schema attribute Unicode-Pwd as described in Preserve attributes intombstone objects.v The Active Directory schema is not recreated when the Active Directory object isrestored. If the schema was modified after the backup, the restored object mightno longer be compatible with the new schema, and some Active Directory objectattributes might no longer be valid. Tivoli Storage Manager issues a warningmessage if some attributes cannot be restored.v Group Policy Objects and their links to organizational units (OU) cannot berestored.v Local policies for restored Active Directory objects are not restored.v When you restore an object from the Tivoli Storage Manager server, if the targetobject already exists in the Active Directory and you replace it with its backupversion, the object is not deleted and recreated. The existing object is used as abase, and its attributes are overwritten by the backup version. Some attributes,such as the GUID and the SID, stay with the existing object and are notoverwritten by the backup version.v If there are multiple tombstone objects for the same container, reanimate themfrom the Tivoli Storage Manager command line using the object GUID, in whichChapter 5. Restoring your data 197