Installation and User's Guide

vcase the command-line client only reanimates the container object and not itschildren. In the Tivoli Storage Manager client GUI, the entire container can beselected to reanimate.When you restore an object from the Tivoli Storage Manager server, if the liveActive Directory object exists and has the prevent deletion bit on, Tivoli StorageManager can modify the attributes of the object. However, if there is atombstone object of the same name but a different object GUID, the DirectoryServices returns the access denied error.v When you restore an object from the Tivoli Storage Manager server and thecontainer of the object has been renamed, Tivoli Storage Manager recreates thecontainer using the original name at the time of the backup. When restoring atombstone object, Tivoli Storage Manager restores it to the renamed containerbecause the lastKnownParent attribute of the tombstone object has been updatedto reflect the new container name.Related concepts“Preserve attributes in tombstone objects”Chapter 5, “Restoring your data,” on page 163Related reference“Restore Adobjects” on page 620“Stagingdirectory” on page 481Preserve attributes in tombstone objectsTo specify an attribute to be preserved in the tombstone object, first locate thisattribute in the Active Directory schema, then update the searchFlags attribute ofthe schema object.There is vendor-acquired software (for example, ADSI Edit) that allows you toupdate the searchFlags attribute of the schema object.Usually none of the bits in the searchFlags bit mask are set (the value is 0). SetsearchFlags to 8 (0x00000008) if you want Active Directory to save the particularattribute in the tombstone object when the original object is deleted.Related conceptsChapter 5, “Restoring your data,” on page 163Related reference“Restore Adobjects” on page 620Modifying the client acceptor and agent services to use theWeb clientYou cannot restore individual Active Directory objects using the Web client bydefault. The Web client services (CAD and agent) run under the Local Systemaccount by default. The Local System account does not have enough privileges torestore Active Directory objects.To enable this restore operation in the Web client, follow these steps:1. Modify the client acceptor (CAD) and agent services to use an administrativeaccount such as Administrator when logging on to Windows.2. You can edit the properties for the CAD and agent services (typically calledTSM Client Acceptor and TSM Remote Client Agent) in the Control Panel.3. Modify the CAD and the agent services in the Login Options page of the TivoliStorage Manager configuration wizard when you set up the Web client198 IBM Tivoli Storage Manager for Windows Backup-Archive Clients: Installation and User's Guide