Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -112,4 +112,7 @@ To view the details of an action, click the plus sign in the respective row to e
Information includes the object attribute that was affected, the type of change made, and the old
and new values.

**NOTE:** For objects in the Recycle Bin, the Show activity option is not available.
:::note
For objects in the Recycle Bin, the Show activity option is not available.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -81,8 +81,11 @@ recovery process.
its immediate children
- Restore the entire sub-tree – Restores the container object and all children

**NOTE:** Selecting the Restore the container object and the immediate children or the Restore
:::note
Selecting the Restore the container object and the immediate children or the Restore
the entire sub-tree option enables the User Options page.
:::


- Naming Conflict – A naming conflict can occur if an object was created post-deletion that has
identical values to the original object. From the drop-down menu, select an option to implement if
Expand All @@ -106,8 +109,11 @@ boxes to configure the necessary options for the user.
deletion is still active.
- Set new password – Implement a new password upon recovery. Type the new password in the text box.

_Remember,_ when a new password is created, the user needs it to login the first time. The
:::tip
Remember, when a new password is created, the user needs it to login the first time. The
password should be copied and given to the restored user.
:::


**Step 10 –** Click **Next**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -28,8 +28,11 @@ default is 60 days.
objects container** checkbox to delete data from the database for tombstone objects that have been
purged.

**NOTE:** The 'deleted objects container' is represented by the Recycle Bin in Recovery for Active
:::note
The 'deleted objects container' is represented by the Recycle Bin in Recovery for Active
Directory.
:::


When an object is deleted in Active Directory, it has _tombstone_ as its state. The object is not
physically deleted but is stripped off most of its attributes and is flagged as _deleted_. The
Expand All @@ -38,8 +41,11 @@ from Active Directory. Selecting the **Delete backup data for objects that have
deleted objects container** checkbox deletes data for permanently deleted objects from Recovery for
Active Directory.

**_RECOMMENDED:_** As permanently deleted objects cannot be rolled back or recovered using Recovery
:::info
As permanently deleted objects cannot be rolled back or recovered using Recovery
for Active Directory, it is recommended to enable this setting.
:::


**Step 4 –** Click **Save**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -53,14 +53,17 @@ recoveries in the Account field.

**Step 4 –** Enter the password for the account in the Password field.

**NOTE:** The account must have Domain Admin privileged access to read and write object data in
:::note
The account must have Domain Admin privileged access to read and write object data in
order to back up, rollback, and restore objects in Active Directory. If the account has read rights
only, it will be able to back up the domain but unable to rollback and restore objects. In this
case, alternate credentials with read and write access to objects will have to be provided on the
Credentials page of the Object Rollback and Object Restore wizards. See the
[Rollback Objects](/docs/recoveryforactivedirectory/2.6/admin/activedirectory/rollback.md) and
[Recover an Object](/docs/recoveryforactivedirectory/2.6/admin/activedirectory/recover.md#recover-an-object) topics for information on the
wizards.
:::


For a Least Privilege Access Model to provision an Active Directory security group with the
permissions that are necessary to perform backups, rollbacks and recovery, see the
Expand All @@ -81,9 +84,12 @@ default time is 12:00 AM.
start of each domain backup. Keep in mind the size of the environment when configuring this option.
Click **Next**.

**NOTE:** If the start time is changed from the default and a frequency is selected (in minutes),
:::note
If the start time is changed from the default and a frequency is selected (in minutes),
the backups will run at the desired frequency but will skip from midnight until the selected start
time.
:::


![Add Domain Configuration wizard - Options page](/img/product_docs/recoveryforactivedirectory/2.6/admin/configuration/options.webp)

Expand All @@ -94,8 +100,11 @@ to Step 9.
**Step 10 –** If the Collect GPOs checkbox is selected, the Store the Group Policy Object backups in
the following location field is enabled. Specify the save location for the GPO backup here.

**NOTE:** The path must be a network share. Do not provide the path to a local drive for storing the
:::note
The path must be a network share. Do not provide the path to a local drive for storing the
backup.
:::


**Step 11 –** Click **Next**.

Expand Down Expand Up @@ -153,9 +162,12 @@ needed.
the start of each domain backup. Keep in mind the size of the environment when configuring this
option.

**NOTE:** If the start time is changed from the default and a frequency is selected (in minutes),
:::note
If the start time is changed from the default and a frequency is selected (in minutes),
the backups will run at the desired frequency but will skip from midnight until the selected start
time.
:::


**Step 9 –** Click **Next**.

Expand All @@ -169,8 +181,11 @@ collection is not desired, skip to Step 12.
the following location field is enabled. Modify the save location for the GPO backup here, as
needed.

**NOTE:** The path must be a network share. Do not provide the path to a local drive for storing the
:::note
The path must be a network share. Do not provide the path to a local drive for storing the
backup.
:::


**Step 12 –** Click **Next**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,10 @@ You can view whether the license is valid and when it will expire.
Recovery for Active Directory comes with a temporary 14-day trial license. Follow the steps to
import a license key file to continue using the product.

**NOTE:** Only accounts with administrator role can add a license key.
:::note
Only accounts with administrator role can add a license key.
:::


**Step 1 –** Contact your Netwrix Sales Representative to obtain a license key.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -41,5 +41,8 @@ sending email notifications.

Notifications have been configured in the system.

**NOTE:** The recipients of the notification can be added from the Domains page. See the
:::note
The recipients of the notification can be added from the Domains page. See the
[Add a Domain](domain.md#add-a-domain) topic for additional information.

:::
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,10 @@ sidebar_position: 60
The Configuration interface provides access to configure the domains, users and roles,
notifications, integrations, data retention policy, and licensing for Recovery for Active Directory.

**NOTE:** Only users with Administrator rights have access to the Configuration interface.
:::note
Only users with Administrator rights have access to the Configuration interface.
:::


![Domains Page](/img/product_docs/recoveryforactivedirectory/2.6/admin/configuration/domains.webp)

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,10 @@ The selected user or group is now added to the table with the specified role.

Follow the steps to change the role assigned to an account.

**NOTE:** This action is only available for manually added accounts and not for the default account.
:::note
This action is only available for manually added accounts and not for the default account.
:::


**Step 1 –** On the Users and Roles page, click the row for an account to make it editable.

Expand All @@ -82,7 +85,10 @@ account.

Follow the steps below to remove a user's or group's access to the Recovery Console.

**NOTE:** This action is only available for manually added accounts and not for the default account.
:::note
This action is only available for manually added accounts and not for the default account.
:::


**Step 1 –** On the Users and Roles page, locate the user or group for whom to remove access.

Expand Down
5 changes: 4 additions & 1 deletion docs/recoveryforactivedirectory/2.6/admin/configuremfa.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,12 @@ sidebar_position: 20
You can configure multi-factor authentication (MFA) for your Recovery for Active Directory account
to add an additional layer of security when signing into the application.

**NOTE:** At present, only authenticator apps are supported for MFA. As a prerequisite to enabling
:::note
At present, only authenticator apps are supported for MFA. As a prerequisite to enabling
MFA, install an authenticator app, such as Google Authenticator or Microsoft Authenticator, on your
phone.
:::


## Enable Authenticator for MFA

Expand Down
15 changes: 12 additions & 3 deletions docs/recoveryforactivedirectory/2.6/admin/forest/forest.md
Original file line number Diff line number Diff line change
Expand Up @@ -93,10 +93,13 @@ You can also expand a forest to view the domains under it.
When you configure backup settings for a domain controller, the system automatically installs the
Netwrix Server Backup Configuration agent on that domain controller.

**NOTE:** Ensure that the domain controller has the firewall rules configured before configuring
:::note
Ensure that the domain controller has the firewall rules configured before configuring
backup settings for it. See the
[Firewall Rules for Forest Server Backups](/docs/recoveryforactivedirectory/2.6/requirements/firewallrules.md) topic for additional
information.
:::


Follow the steps to specify backup settings for a domain controller.

Expand All @@ -121,8 +124,11 @@ on the Options page of this wizard.)
controller to the network share of the destination server in the following format: domain\account.
- Enter the password for the account in the Password field.

**NOTE:** The backup data is first stored locally on the server and copied to the storage location
:::note
The backup data is first stored locally on the server and copied to the storage location
using this account.
:::


**Step 4 –** Click **Next**.

Expand All @@ -141,8 +147,11 @@ default time is 12:00 AM.
**Step 8 –** In the Specify where you would like to store the backup data field, enter a path to a
network share on the domain controller to store the backup data.

**NOTE:** The path must be a network share. Do not provide the path to a local drive for storing the
:::note
The path must be a network share. Do not provide the path to a local drive for storing the
backup. Doing so will prevent the system from restoring the domain using the playbook mechanism.
:::


**Step 9 –** The file can be encrypted by selecting the **Encrypt the generated backup data**
checkbox and entering a password.
Expand Down
10 changes: 8 additions & 2 deletions docs/recoveryforactivedirectory/2.6/admin/forest/recover.md
Original file line number Diff line number Diff line change
Expand Up @@ -67,9 +67,12 @@ Azure or AWS, and isolated from the rest of the domain.
Once the desired domain controllers have at least one backup to choose from, you can start the
forest recovery playbook by adding the domain controllers to it.

**NOTE:** You only need one backup of a domain controller for each domain in the forest. Any other
:::note
You only need one backup of a domain controller for each domain in the forest. Any other
domains can then be added via the playbook or you should handle them manually using the "add DC to
the domain, let replication happen" model.
:::


Follow the steps to create a recovery playbook.

Expand Down Expand Up @@ -107,9 +110,12 @@ topic for additional information.
**Step 6 –** From the **Backup** drop-down menu, select the backup to use for restoring the domain
controller. The drop-down menu lists the backups available for the domain controller.

**NOTE:** If you do not choose a backup for a domain controller, an attempt will be made to join the
:::note
If you do not choose a backup for a domain controller, an attempt will be made to join the
domain controller to the existing domain that was restored previously in the playbook using a backup
of another domain controller.
:::


**Step 7 –** If the backup is encrypted, provide the password used for encryption in the Encryption
Password field. This would allow the recovery process to decrypt the backup.
Expand Down
5 changes: 4 additions & 1 deletion docs/recoveryforactivedirectory/2.6/admin/navigation.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,10 @@ The navigation pane contains the following links:
to configure the domains, users and roles, notifications, integrations, data retention policy, and
licensing for Recovery for Active Directory.

**NOTE:** Only users with Administrator rights have access to the Configuration interface.
:::note
Only users with Administrator rights have access to the Configuration interface.
:::


- [Domains Page](/docs/recoveryforactivedirectory/2.6/admin/configuration/domain.md) – The Domains page provides a list of the domains
backed up by Recovery for Active Directory. It displays the backup schedule settings for each
Expand Down
5 changes: 4 additions & 1 deletion docs/recoveryforactivedirectory/2.6/gettingstarted.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,10 @@ Installation
Install and configure Recovery for Active Directory. See the
[Install the Application](/docs/recoveryforactivedirectory/2.6/install/application.md) topic for additional information.

**NOTE:** Installing the server automatically installs the RSAT Extension locally.
:::note
Installing the server automatically installs the RSAT Extension locally.
:::


First Launch

Expand Down
10 changes: 8 additions & 2 deletions docs/recoveryforactivedirectory/2.6/install/application.md
Original file line number Diff line number Diff line change
Expand Up @@ -21,12 +21,15 @@ During a fresh installation, it is possible to modify both or either the applica
directory and the SQL Server database location. The application installation directory can be
modified through the Destination Folder page in the Recovery for Active Directory Setup Wizard.

**NOTE:** The `msoledbsql.msi` must be installed on the machine the Recovery Application Server will
:::note
The `msoledbsql.msi` must be installed on the machine the Recovery Application Server will
be installed on, prior to installing the Recovery Application Server. This allows the Recovery
Application Server to connect with the SQL Server. If it is not installed, the installer fails on
the SQL Server Configuration page. The
[Microsoft OLE DB Driver for SQL Server](https://www.microsoft.com/en-us/download/details.aspx?id=56730)
can be downloaded directly from Microsoft.
:::


Follow the steps to install Recovery for Active Directory.

Expand Down Expand Up @@ -85,10 +88,13 @@ database communication.
this account has access to read and write to the tables with permissions to execute stored
procedures.

**NOTE:** Windows authentication will use the credentials of the account running the installer. Once
:::note
Windows authentication will use the credentials of the account running the installer. Once
the database is created, Windows authentication will use the credentials of the account used for the
Recovery for Active Directory service., specified on the Netwrix Recovery Server Configuration page
of the wizard.
:::


Click **Next**.

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -51,9 +51,12 @@ The wizard returns to the Destination Folder page. Click **Next** to proceed.
**Step 6 –** In the Server name field, enter the name or IP address of the Recovery Application
Server, so the RSAT Extension identifies it in the environment.

**NOTE:** 9001 is the default port. If a different port is specified on the Netwrix Recovery Server
:::note
9001 is the default port. If a different port is specified on the Netwrix Recovery Server
Configuration page of the Recovery for Active Directory Setup wizard while installing the
application, then that specific port is applicable here.
:::


Click **Next**.

Expand Down
15 changes: 12 additions & 3 deletions docs/recoveryforactivedirectory/2.6/install/login.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,8 +18,11 @@ Directory server using either of the following methods:
- Click the desktop icon
- Type `http:/localhost:3005` in a web browser and press Enter

**NOTE:** If the port number and web protocol was changed from default during the installation
:::note
If the port number and web protocol was changed from default during the installation
process, use the port and protocol configured from the install.
:::


## Access the Recovery Console Remotely

Expand All @@ -29,8 +32,11 @@ bar. For example:

- http://[ServerName]:3005

**NOTE:** If the port number and web protocol was changed from default during the installation
:::note
If the port number and web protocol was changed from default during the installation
process, use the port and protocol configured from the install.
:::


## Sign In

Expand All @@ -41,7 +47,10 @@ Follow the steps to sign into the Recovery Console.

**Step 1 –** Launch the Recovery Console.

**NOTE:** The URL may need to be added to the browser's list of trusted sites.
:::note
The URL may need to be added to the browser's list of trusted sites.
:::


![Recovery for Active Directory - Login page](/img/product_docs/recoveryforactivedirectory/2.6/install/login.webp)

Expand Down
5 changes: 4 additions & 1 deletion docs/recoveryforactivedirectory/2.6/install/upgrade.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,10 @@ Run the `NetwrixRecovery_Setup.exe` on the Netwrix Recovery for Active Directory
to the newer version of the product. See the [Install the Application](/docs/recoveryforactivedirectory/2.6/install/application.md) topic for
additional information.

**NOTE:** The database does not change between versions, so the same can be used for the new
:::note
The database does not change between versions, so the same can be used for the new
version. Do not uninstall or remove the existing database.
:::


Recovery for Active Directory v2.5 has now been upgraded to v2.6.
Loading
Loading