System Requirements

Veeam Explorer for Active Directory does not require a separate license. It is installed with Veeam Backup & Replication server or standalone management console; all editions including Veeam Backup Free Edition are supported (for details, see the Licensing and Editions section).

To install and use Veeam Explorer for Active Directory as a component of Veeam Backup & Replication, make sure that all necessary system requirements for Veeam Backup & Replication are met. System requirements specific for Veeam Explorer are listed below.

Specification	Requirement
Microsoft Active Directory Domain Services	Veeam Explorer for Microsoft Active Directory supports database files (.DIT) created with Microsoft Active Directory Domain Services servers (domain controllers): Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 Microsoft Windows Server 2003 SP2 Minimum supported domain and forest functional level is Windows 2003. Important! Database files created by a domain controller can be open for object recovery with Veeam Explorer for Active Directory only if Veeam Explorer is installed on a Windows machine with OS version same or above the version of that domain controller's OS.
Software	Any edition of Veeam Backup & Replication 9.0. Microsoft PowerShell 2.0 Veeam Explorer can restore the relationships between Active Directory objects and corresponding mailboxes - if an object (user or group) was deleted from production Active Directory, Veeam Explorer can restore this object from Active Directory backup, reconnect Exchange mailbox and restore mailbox security role for that object. Veeam Explorer for Active Directory supports restore of both mailbox-enabled objects (including hard-deleted items and Online Archives) and mail-enabled objects for the following Microsoft Exchange versions: Microsoft Exchange Server 2016 Microsoft Exchange Server 2013 Microsoft Exchange Server 2010 SP1 and later For other Microsoft Exchange versions, restore of mailbox-enabled objects is not supported (only mail-enabled objects can be restored). To open database files, Veeam Explorer for Microsoft Active Directory uses a service dynamic link library (esent.dll) which is installed together with Microsoft Active Directory Domain Services and can be found in the system directory at %SystemRoot%. Important! Esent.dll on the machine where Veeam Explorer runs should be of the same version as Microsoft Active Directory Domain Services used to create database files. To restore account password, Veeam Explorer for Microsoft Active Directory uses the registry database, so if you plan to restore password(s), make sure that System registry hive is available (default location is %systemroot%\System32\Config). If you restore Active Directory database from Active Directory backup using Veeam file-level restore, then registry hive will be located automatically. Otherwise, for example, if you restore from an imported backup or from VeeamZIP file, make sure the System registry hive is located in the same folder as .DIT file.

Specification

Requirement

Microsoft Active Directory Domain Services

Veeam Explorer for Microsoft Active Directory supports database files (.DIT) created with Microsoft Active Directory Domain Services servers (domain controllers):

Microsoft Windows Server 2012 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008
Microsoft Windows Server 2003 SP2

Minimum supported domain and forest functional level is Windows 2003.

Important! Database files created by a domain controller can be open for object recovery with Veeam Explorer for Active Directory only if Veeam Explorer is installed on a Windows machine with OS version same or above the version of that domain controller's OS.

Software

Any edition of Veeam Backup & Replication 9.0.
Microsoft PowerShell 2.0
Veeam Explorer can restore the relationships between Active Directory objects and corresponding mailboxes - if an object (user or group) was deleted from production Active Directory, Veeam Explorer can restore this object from Active Directory backup, reconnect Exchange mailbox and restore mailbox security role for that object.
Veeam Explorer for Active Directory supports restore of both mailbox-enabled objects (including hard-deleted items and Online Archives) and mail-enabled objects for the following Microsoft Exchange versions:

Microsoft Exchange Server 2016
Microsoft Exchange Server 2013
Microsoft Exchange Server 2010 SP1 and later

For other Microsoft Exchange versions, restore of mailbox-enabled objects is not supported (only mail-enabled objects can be restored).

To open database files, Veeam Explorer for Microsoft Active Directory uses a service dynamic link library (esent.dll) which is installed together with Microsoft Active Directory Domain Services and can be found in the system directory at %SystemRoot%.

Important! Esent.dll on the machine where Veeam Explorer runs should be of the same version as Microsoft Active Directory Domain Services used to create database files.

To restore account password, Veeam Explorer for Microsoft Active Directory uses the registry database, so if you plan to restore password(s), make sure that System registry hive is available (default location is %systemroot%\System32\Config). If you restore Active Directory database from Active Directory backup using Veeam file-level restore, then registry hive will be located automatically. Otherwise, for example, if you restore from an imported backup or from VeeamZIP file, make sure the System registry hive is located in the same folder as .DIT file.

Required Ports

The following table describes network ports that must be opened to ensure proper communication of the Veeam backup server with the Microsoft Active Directory VM during application-item restore.

From	To	Protocol	Port	Notes
Veeam backup server/standalone console	Microsoft Active Directory VM guest OS	TCP	135	Port required for communication between the domain controller and Veeam backup server.
		TCP, UDP	389	LDAP connections.
		TCP	636, 3268, 3269	LDAP connections.
		TCP	1025 to 5000 (for Microsoft Windows 2003) 49152-65535 (for Microsoft Windows 2008 and newer)	Dynamic RPC port range used by the runtime coordination process deployed inside the VM guest OS for application-aware image processing (when working over the network, not over VIX API). For more information, see http://support.microsoft.com/kb/929851/en-us.

Send feedback | Updated on 5/4/2016