Cannot see individual objects in Active Directory to restore even though the Agent for Active Directory is installed and the use of Granular Recovery Technology was specified in the backup job
|Article:TECH169338|||||Created: 2011-09-12|||||Updated: 2012-09-20|||||Article URL http://www.symantec.com/docs/TECH169338|
Cannot see individual objects in Active Directory to restore even though the Agent for Active Directory is installed and the use of Granular Recovery Technology (GRT) was specified in the backup job.
Error from the Backup Exec remote agent Debug Log (BEREMOTE.LOG) on the Domain Controller when a System State backup is run following message is observed:
AD:Active Directory hive 'SYSTEM\CurrentControlSet\Services\NTDS\Parameters' not found in SystemState::IsActiveDirectoryInstalled:742
This issue is caused by the user specified in the backup job not having full rights to the following registry key and subkeys:
The Backup Exec GRT process needs full access to this registry key and its subkeys so that it can get the locations of important Active Directory files. If the user specified in the backup job does not have full rights to the NTDS key specified above, GRT will not be able to access the Active Directory database in order to extract out the information needed to allow individual object restores from the System State backup.
Using REGEDIT.EXE, grant the user specified in the backup job full rights to the following registry key and subkeys:
Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried -out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.
Article URL http://www.symantec.com/docs/TECH169338