Restore Options and Behavior in Active Directory

You can restore Group Policy Objects and object relationships.

Restoring Group Policy Objects

Group Policy Objects (GPOs) can be restored from their location in Active Directory.

Procedure

  1. From the navigation pane, go to Protect > Active Directory.

    The Overview page appears.

  2. On the Apps tab, click an Active Directory server for which you want to restore Group Policy Objects.

    The Active Directory server Overview tab appears.

  3. In the upper-right area of the page, click Restore gpo.

    The list of Group Policy Objects appears.

  4. Select the Group Policy Objects to restore, and then click Restore.

    The Restore options dialog box appears.

  5. Select one of the following options which determine how links associated with the GPO are restored:

    • Revert all links to their original state in the backup: To restore all links the GPO has to containers (for example domains, OUs) in the state those links were captured in the selected backup, select this option. If additional links were created from the GPO after the backup was created, those links will be deleted from Active Directory.

    • Restore links from backup and merge with existing links: To restore all links the GPO has from the backup, select this option. If additional links were created from the GPO after the backup was created, those links will remain untouched in Active Directory.

    • Do not restore any links from backup: If you would prefer not to restore any GPO links, select this option.

  6. To restore only specific attributes, move the Restore only specific attributes toggle key to the right, and enter the name of the attribute to restore, and then click Add.

  7. Click Submit.

Restoring Object Relationships

When restoring an object that owns relationships such as a group (which owns group memberships), any existing relationships will be overwritten with the relationships from the selected backup.

For example, select an Active Directory group to restore from backup.

  • During backup, the group members were Sally, Michael, and Phil.

  • Currently, in Active Directory, the same group has Sally, Phil, Steve, and Cindy as the members.

  • After restoring the group from backup, the members will be Sally, Michael, and Phil. Steve and Cindy will be removed as they were not members when the backup was created.

Note

For information about the behavior for restoring objects that own relationships in Azure AD, see Restore Options and Behavior in Azure AD.

Loading...