ACTIVE DIRECTORY USER GUIDE
Prepare the AD catalog point, object identity, attribute difference and scoped restore delegation; assess Recycle Bin and System State objectives separately.
BEFORE YOU BEGIN
Attribute restore on an existing object, creating a new object from a catalog and recovering a deleted object through Recycle Bin have different identity outcomes. Creating a new object does not recover its old SID/GUID or password hash. This guide covers online object/attribute assessment, not full DC/forest or destructive System State apply.
Screenshots were captured from the actual lab interface on 16 October 2026. The interface is in English; explanations follow your selected language. Resource names, dates and settings are examples; use values for your own environment.
Validation limit: existing catalog items were viewed; no recovery point was found for Attributes or User Computer Object in the current date range. No object/attribute target preview was captured. No AD writes, object creation/deletion, permission changes or System State apply were performed. Historical lab acceptance does not apply automatically to every installed release.
Distinguish attribute rollback on an existing object, deleted-object reanimation/Recycle Bin recovery and creation of a new object from a catalog. Record target GUID/SID, DN and OU. Protected accounts, group membership, passwords and SPNs are outside a simple description test.
Identity-preservation expectations and operation type are explicit.
Find the correct AD test job in Home → Backups → Backup List. Use Action → Restore to inspect instance/item and Full/dependent points. Compare domain, item type and time. Last Backup or an object list in the catalog does not prove live target connectivity or successful recovery.
The correct source item and point are identified.
Use search in User Computer Object or the release-specific Attribute Restore screen to find only the test object. Compare GUID and target DN; avoid Select All. Record current and backed-up values. DNS/GPO recovery requires separate acceptance from user/computer operations.
The scope is one object and the selected attribute.
In the matching granular restore release generate a dry-run/diff and inspect only the intended attribute change. Delegate permissions for the operation, such as WriteProperty on an existing object or class-specific CreateChild for a new one. Deleted Objects and Reanimate rights for Recycle Bin/tombstone require separate acceptance. A backup token does not imply AD write access; do not publish the confirmation token.
The plan and permissions cover only the intended change.
Compare source backup ID, object identity, attribute, old/new value and target with the summary. Do not treat a legacy bulk Restore screen without dry-run as a safe preview; use the matching validated operation workflow with the technical team. Apply the final restore only to the approved test object; account enablement and password reset are not automatic parts of this step.
One traceable test change is created.
Compare task/audit results with the target AD attribute value. For an existing-object attribute restore verify unchanged GUID/SID and no unexpected differences in a repeated dry-run. Group membership is assessed through member on the target group; do not assume direct writes to memberOf. A success notification alone does not establish acceptance.
Target value, identity and audit record agree.
Document object acceptance with backup ID, release, target and changed attributes; have the responsible administrator remove temporary test delegation. System State/authoritative/DSRM and forest recovery need an isolated/fenced environment, a separate recovery identity and a release-appropriate specialist procedure. An online object test does not establish full domain/forest recovery support.
Object acceptance and broader recovery scope are recorded separately.
COMMON QUESTIONS
No. Recycle Bin uses the directory’s deleted-object mechanism. It differs in data path and acceptance from archive-based attribute/object recovery and System State operations.
STEP-BY-STEP GUIDES
Install EraBackup Master: operating system readiness, package integrity, terminal installer, TLS, licensing, repository and service validation.
Open guide
02Use EraBackup Create Policy to select source, storage, clients, retention and schedule, then validate the first full backup and recovery point.
Open guide03Select a recovery point in EraBackup, use the RESTORE wizard, review target mappings and Summary, and validate data in an isolated target.
Open guide04Prepare VMware backup step by step, from vCenter connectivity and test VM selection to HotAdd prerequisites and the full/CBT chain.
Open guide05Plan VMware recovery point selection, target vSphere resources and datastore checks, then validate recovery in a new isolated VM.
Open guide06Plan OpenShift Virtualization/KubeVirt VM backups with namespace, CSI, RBAC and repository prerequisites; assess database profiles separately.
Open guide07Plan the OpenShift recovery point, target namespace, new VM name and StorageClass; distinguish VM/PVC recovery from database restore.
Open guide08Prepare agent-based database policies and OpenShift PostgreSQL/MySQL logical streaming separately; check source, method, retention and initial backup acceptance.
Open guide09Prepare recovery point, target database, credential reference and final acceptance checks according to the engine and backup method.
Open guide010Prepare the Exchange agent, registered instance, database selection and backup acceptance plan. Check which release validates DAG, database and mailbox objectives.
Open guide011Inspect the Exchange catalog item, recovery point and mailbox selection screen; distinguish a UI preview from an actually completed recovery operation.
Open guide012Prepare the AD agent, domain controller source, policy selection and catalog acceptance; distinguish object recovery from System State and forest recovery objectives.
Open guide013Prepare the AD catalog point, object identity, attribute difference and scoped restore delegation; assess Recycle Bin and System State objectives separately.
Open guide014Prepare EraBackup Kubernetes agent policies, PVC/Pod selection and node/control-plane methods for your distribution; plan catalog and isolated restore acceptance together.
Open guide015Inspect Kubernetes catalog records, PVC targets and control-plane recovery limits separately; verify source/namespace mapping and application acceptance.
Open guide016Separate Rancher local management, RKE2/K3s and downstream application scope; distinguish the EraBackup agent method from Rancher’s own backup operator.
Open guide017Prepare separate source, target and acceptance checks for Rancher management restore, RKE2/K3s cluster recovery and downstream application recovery.
Open guide018Prepare OpenStack backup from VM, Cinder disk, project and consistency profile through the Full/incremental chain.
Open guide019Plan OpenStack VM restore with recovery point, disk chain, metadata and target project/network mappings.
Open guide020Prepare Safir Bulut backup from VM, Cinder disk, project and consistency profile through the Full/incremental chain.
Open guide021Plan Safir Bulut VM restore with recovery point, disk chain, metadata and target project/network mappings.
Open guide022Prepare Hyper-V backup with source connection, VM/disk selection, retention and initial acceptance checks.
Open guide023Plan recovery point, disk chain and Hyper-V targets within the scope exposed by the source template.
Open guide024Prepare Proxmox backup with source connection, VM/disk selection, retention and initial acceptance checks.
Open guide025Plan recovery point, disk chain and Proxmox targets within the scope exposed by the source template.
Open guide026KVM Backup Preparation Guide: assess releases, source access and validated target scope.
Open guide027KVM Restore Preparation Guide: assess releases, source access and validated target scope.
Open guide028Sangfor Backup Preparation Guide: assess releases, source access and validated target scope.
Open guide029Sangfor Restore Preparation Guide: assess releases, source access and validated target scope.
Open guide030Prepare file and folder selection, agent access, repository, retention and initial acceptance for Windows servers step by step.
Open guide031Prepare recovery points, file selection, target paths and data acceptance for Windows servers step by step.
Open guide032Prepare file and folder selection, agent access, repository, retention and initial acceptance for Linux servers step by step.
Open guide033Prepare recovery points, file selection, target paths and data acceptance for Linux servers step by step.
Open guide034Prepare Windows Bare Metal image backup with agent access, disk scope, boot dependencies and a recovery test.
Open guide035Prepare Windows Bare Metal image recovery points, destination disks, recovery environment and boot/data acceptance.
Open guide036Prepare Linux Bare Metal image backup with agent access, disk scope, boot dependencies and a recovery test.
Open guide037Prepare Linux Bare Metal image recovery points, destination disks, recovery environment and boot/data acceptance.
Open guide038Prepare replication acceptance with site mappings, the first Full seed, incremental generations and a verified checkpoint.
Open guide039Prepare service recovery with checkpoint selection, isolated testing, fencing, controlled failover and failback planning.
Open guide040Prepare source/destination roles, Storage Policy scope and data acceptance for NAS.
Open guide041Prepare catalogs, recovery chains, destination effects and file acceptance for NAS.
Open guide042Prepare source/destination roles, Storage Policy scope and data acceptance for S3-Compatible Object Storage.
Open guide043Prepare catalogs, recovery chains, destination effects and file acceptance for S3-Compatible Object Storage.
Open guide044Prepare SQL Server agent access, instance/database selection, method and initial backup acceptance.
Open guide045Prepare SQL Server recovery points, chains, destination instances and application acceptance step by step.
Open guide046Prepare Oracle agent access, instance/database selection, method and initial backup acceptance.
Open guide047Prepare Oracle recovery points, chains, destination instances and application acceptance step by step.
Open guide048Validate PostgreSQL methods, instance/database scope and initial data acceptance.
Open guide049Validate PostgreSQL methods, instance/database scope and destination chains.
Open guide050Validate MySQL methods, instance/database scope and initial data acceptance.
Open guide051Validate MySQL methods, instance/database scope and destination chains.
Open guide052Prepare MariaDB instances, methods, data scope and initial acceptance.
Open guide053Prepare MariaDB recovery points, log chains and validated destination effects.
Open guide054Prepare MongoDB instances, methods, data scope and initial acceptance.
Open guide055Prepare MongoDB recovery points, log chains and validated destination effects.
Open guide056Prepare DB2 instance, database/tablespace, methods and initial backup acceptance.
Open guide057Prepare DB2 instance, database/tablespace, recovery chains and destination acceptance.
Open guide058Use repository identity, HTTPS access, capacity and verified data acceptance to prepare installation.
Open guide059Use repository identity, HTTPS access, capacity and verified data acceptance to manage storage operations.
Open guide060Prepare scope, state verification and operational acceptance for monitoring step by step.
Open guide061Prepare scope, state verification and operational acceptance for reporting step by step.
Open guide062Prepare scope, state verification and operational acceptance for notification management step by step.
Open guide063Validate identity, role/group and tenant/resource boundaries for user management.
Open guide064Validate identity, role/group and tenant/resource boundaries for role management.
Open guide065Validate identity, role/group and tenant/resource boundaries for permission management.
Open guide066Validate LDAP connectivity, directory users and tenant/role mappings separately.
Open guide067Assess email OTP, expiry and sign-in-path exceptions through an acceptance plan.
Open guide068Assess symptoms, job identity, services and data acceptance step by step to diagnose issues.
Open guide069Assess symptoms, job identity, services and data acceptance using timelines and redacted logs.
Open guide070Prepare identity, package/scope and post-action acceptance for license management.
Open guide071Prepare identity, package/scope and post-action acceptance for version upgrade.
Open guide072Plan source, method, capacity and data acceptance together for backup scheduling.
Open guide073Plan source, method, capacity and data acceptance together for retention policies.
Open guide074Assess deduplication layers, policy selections and measured data acceptance separately.
Open guide075Assess compression layers, policy selections and measured data acceptance separately.
Open guide076Assess encryption layers, release support, key ownership and restore acceptance step by step.
Open guide077Validate the WORM option, repository requirements, protection period and catalog evidence separately.
Open guide078Assess job records, recovery chains and isolated restores using measurable acceptance steps.
Open guide079Review hash comparisons, repository chains and backend verification limits step by step.
Open guide080Manage transfer scheduling, concurrency and network impact through measurable steps.
Open guide081Assess source, network, repository and concurrency effects through controlled comparisons.
Open guide082Prepare Windows and Linux components, secure enrollment requirements and initial connectivity acceptance step by step.
Open guide083Manage agent inventory, connectivity health, updates and retirement conditions through controlled steps.
Open guide084Prepare integration requirements, the support process and secure test acceptance without exposing technical secrets.
Open guide085Combine scheduled jobs, error behavior, monitoring and rollback in a secure automation plan.
Open guide086Prepare event scope, time correlation and secure evidence sharing step by step.
Open guide087Assess access, updates, data protection and incident handling without publishing sensitive configuration.
Open guide088Plan site roles, data copies, connectivity impact and recovery acceptance through controlled steps.
Open guide089Assess inventory, access boundaries, job tracking and centralized operational acceptance step by step.
Open guide090Assess archival needs, target support, data scope and recovery requirements step by step.
Open guide091Plan retention needs, chain dependencies, continued access and periodic recovery acceptance.
Open guide092Assess tenant separation, resource ownership and access boundaries through controlled acceptance.
Open guide093Plan tenant onboarding, user/resource mappings and retirement acceptance safely.
Open guide094Assess data volume, change rate, retention chains and safe capacity headroom together.
Open guide095Measure storage and processing load separately to prepare supported expansion and acceptance plans.
Open guide096Assess service dependencies, support scope and controlled failover acceptance separately.
Open guide097Assess access traffic, health checks and job concurrency against the supported architecture.
Open guideTALK TO THE TECHNICAL TEAM
Share your workloads and recovery objectives. Let’s define the technical scope together.
MEET ERABACKUP
Share your workloads to start a demo and technical scope discussion.
Your requirements have been recorded for technical assessment.
