使用Recovery Services Vault在Azure中进行Active Directory林还原 [英] Active Directory Forest Restore in Azure Using Recovery Services Vault

问题描述

很抱歉，如果在此发布错误的位置，但找不到更合适的地方.

Sorry if this is the wrong place to post this but couldn't find anything more suitable.

我将Active Directory林托管在Azure VM上，并且正在使用Recovery Services Vault对其进行备份.我需要为新的Exchange 2016安装进行架构升级，我的老板问我是否可以成功还原目录林.正在恢复 Services Vault可以备份Active Directory，并且如果我必须在Azure中恢复DC，在USN回滚等方面是否存在任何风险?

I have my Active Directory Forest hosted on Azure VM's and they're being backed up using Recovery Services Vault. I need to do a Schema upgrade for a new Exchange 2016 install and my boss has asked me if I can successfully restore the forest. Are Recovery Services Vault backups Active Directory aware and is there any risk in terms of USN roll backs etc if I had to recover my DC's in Azure?

推荐答案

Backup of domain controller (DC) VMs is a supported scenario with Backup. However, you must be careful during the restore process. The correct restore process depends on the structure of the domain. In the simplest case, you have a single DC in a single domain. More commonly for production loads, you have a single domain with multiple DCs, perhaps with some DCs on-premises. Finally, you might have a forest with multiple domains.

从Active Directory角度来看， Azure VM与现代支持的虚拟机管理程序上的任何其他VM一样.本地虚拟机管理程序的主要区别 在Azure中没有可用的VM控制台.在某些情况下(例如，通过使用裸机恢复(BMR)类型的备份进行恢复)，需要一个控制台.但是，从备份保管库还原VM可以完全替代BMR.目录服务 还提供了还原模式(DSRM)，因此所有Active Directory恢复方案都是可行的.有关更多信息，请参见 备份和还原虚拟化域控制器的注意事项 和 规划Active Directory林恢复 .

From an Active Directory perspective, the Azure VM is like any other VM on a modern supported hypervisor. The major difference with on-premises hypervisors is that there's no VM console available in Azure. A console is required for certain scenarios, such as recovering by using a bare-metal recovery (BMR)-type backup. However, VM restore from the backup vault is a full replacement for BMR. Directory Services Restore Mode (DSRM) is also available, so all Active Directory recovery scenarios are viable. For more information, see Backup and restore considerations for virtualized domain controllers and Planning for Active Directory forest recovery.

When other DCs of the same domain can be reached over the network, the DC can be restored like any VM. If it's the last remaining DC in the domain, or a recovery in an isolated network is performed, a forest recovery procedure must be followed.

这篇关于使用Recovery Services Vault在Azure中进行Active Directory林还原的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！