To back up Active Directory objects directly to cloud, complete the guided setup for Active Directory using cloud storage.
To back up Active Directory the user account configured in Active Directory connection settings must have the following permissions:
The account requires Read permissions to the Active Directory domain to backup users, groups, OUs, and other AD objects. Members of the Domain Users group have this permission by default. The account requires Read permissions to these additional objects which require higher privilege access:
-
DomainDNSZone
-
ForestDNSZone
-
Configuration/Sites
-
IP Security
-
Keys
-
NTDS Quotas
The account requires permissions to backup Group Policy Objects via PowerShell. Members of the Remote Management Users group have this permission by default.
The account requires Write permission on the \Program Files\Metallic\ContentStore\iDataAgent\JobResults\ folder that is located on server the agent is installed on. If any of these permissions are not present, the backup may fail.
To restore Active Directory objects the user account configured in Active Directory connection settings must have the following permissions:
The account requires Read, Change, and Create Child Objects permissions in Active Directory. By default, members of the Domain Admins, Enterprise Admins, and Administrators group have the required permissions.
Procedure
-
Go to https://login.metallic.io/ and log on.
The Service Catalog page appears.
-
On the Active Directory tile, click Configure.
The Select a Active Directory Application dialog box appears.
-
Select Active Directory.
The Active Directory page appears.
-
Click CONTINUE.
The How do you want to deploy your backup? page appears.
-
Select Backup direct to cloud (for cloud servers), and then click NEXT.
The Select The Cloud Storage Type page appears.
-
Select the cloud storage type and click NEXT.
The Install Package page appears.
-
Download and install the Commvault Cloud seed package on the server that you want to back up.
For more information about installing a package, see Installing a Commvault Cloud Package on a Windows Server.
-
After the package installation is complete, in the guided setup in the Commvault Cloud software, in the Server hostname box, enter the hostname of the new server, and then click VERIFY.
The Commvault Cloud software installs additional Active Directory server packages, which takes a few minutes. Wait for the installations to complete.
-
Click NEXT.
The Backup Plan page appears.
-
Select a backup plan and click NEXT.
The Service Account page appears.
-
Enter the Username and Password for the service account.
Wait for the configurations to complete.
-
Click NEXT.
The Configuration page appears.
-
Review the status of all operations, and then click NEXT.
The Summary page appears.
-
Review the summary.
Note
You must run the adLdapTool.exe on the client computer before you perform your first backup to enable restores of passwords for users and computers.
-
Click FINISH.