Outlook Vault Restore
What is the Enterprise Vault? The enterprise vault is where your archived emails are stored. Every user has a virtual vault attached to their mailbox that can only be accessed by that user. 46 days after you receive/send an email it will vault and move to your virtual vault folder (See “Where is my Virtual Vault.
- Outlook Enterprise Vault Restore
- Outlook Vault Missing
- Enterprise Vault Outlook Download
- Microsoft Outlook Enterprise Vault
Vault Solutions work closely with Veritas development to create add-on tools that enhance native Enterprise Vault functionality and offer Enterprise Vault administrators tailor made solutions to deal with issues specific to working with Enterprise Vault. Vault Solutions also provide tools for administrators who are considering moving to alternative archiving platforms and need to effectively manage Enterprise Vault propriety files and shortcuts.
Outlook 2013/2016. There are three ways to restore the data from your archives. You can move individual items from a.pst file into their original folder or a new one, copy the email back to the original folder, or copy the email to a new folder. Opening a.pst file. Choose File Open & Export Open Outlook Data File. Select the.pst file. Update the Enterprise Vault desktop policy to disable functions such as Store and Restore 3. Run provisioning to apply the new policies (this must be done before the mailboxes are migrated, since Enterprise Vault won’t be able to provision the mailboxes once in Office 365.) 4. Migrate the mailboxes.
Archive Accelerator Restore
Moving users from one physical location to another. Moving users off Enterprise Vault as part of enterprise reorganization. These scenarios create the unique challenge of restoring messages back to users’ mailboxes in Enterprise Vault.
Archive Accelerator Mailbox Restore reintroduces items into a user’s mailbox based on currently existing shortcuts. Resulting in a cleaner restore with no duplicates. The solution offers an “Unattended” mode to restore multiple mailboxes automatically.
Leveraging Archive Accelerator Restore, customers are can:
- Restore items from short-cuts
- Run the solution as a service, restoring multiple mailboxes simultaneously in the background
- Delete originals from Enterprise Vault
- Restore only those items with user-defined shortcuts
- Restore to current shortcut locations, rather than original archive locations
- Use the solution in conjunction with Vault Solutions Outlook Add-In Module to migrate from Enterprise Vault to Microsoft Exchange 2010 Archiving
- Leverage support of Exchange 2010 CAS Arrays
- Leverage support of Exchange 2010 Database Availability Groups (DAGs)
- Restore items to Exchange 2013
- Restore items to Office 365
- Migrate to Google Apps for Business
All restore processes are managed by the administrator via a Management Console – in a multi-threaded manner with the ability to schedule during off-hours.
Outlook Add-in Module
Running in the background and permitting users to simultaneously work while the solution processes short-cuts, the Add-In supports Outlook 2003, Outlook 2007, Outlook 2010 and Outlook 2013 – as well as Windows XP/Vista/7.
Key features and functionality include:
Restore/Delete
Provides easy to use and robust technology to help users restore individual mailbox items or entire folders within Enterprise Vault shortcuts in Outlook. The process includes restoration of originals to users’ mailboxes, which are then deleted from Enterprise Vault.
PST Automatic Shortcut Restore
It’s regular business practice to move archived items to a PST file. Users are under the misperception they needn’t worry about items being expired from the archive. However, once an item expires from the archive, the PST short-cut will remain – but archived copy will not. Our Outlook Add-In can detect the removal or copying of short-cuts to a PST file. The software automatically restores these items from Symantec Enterprise Vault by connecting directly to the system without wasting resources on the Exchange Server.
PST Search and Restore
Users are often faced with a flood of short-cuts in their PST files, making search and restoration an extremely challenging process. Our Search and Restore feature finds existing short-cuts in the PST files attached to a user’s profile and replaces the short-cuts with the original items.
PST Inventory
Our solution empowers administrators to use the power of Archive Accelerator to view a list of all PST files with a count of the number of short-cuts in each. The solution provides valuable insight to determine the number of PST files within the organization.
In the event of system failure whereby the Vault or Safes are corrupted or in case of loss of data, the Vault enables you to restore the required metadata and data, and retrieve previous versions of the files in the Safe.
The following diagram shows the structure of the folder that contains the Restored Safes.
When the backup set is restored to the Restored Safes folder, the backed up metadata is synchronized with the Vault’s metadata and the data files are copied to the Data folder. The Metadata Backup folder in the Restored Safes remains empty.
If the backup was carried out with a third-party backup software, the metadata backup files must be restored from the Metadata Backup folder to the Restored SafesMetadata folder, and the data files must be restored from the data folder to the Restored SafesData folder |
These files are then synchronized with the files in the Safes folder.
Restore a single recordings Safe
See CyberArk Vault Backup Utility for more information. |
Restoring a recordings Safe does not require an existing Safe of the same name in the Vault. During the restore process, a new Safe is created with the name entered by the user, with the specified owners and retention period.
During the restore process, the session video and text files are restored to the desired Safe.
To restore multiple recordings safes, repeat the restore command for each Safe.
The restore process can take a while, depending on the size of the Safe. To enhance the restore process, we recommend running the process from a station that is close to the Vault. |
Outlook Enterprise Vault Restore
Limitations:
- Restored recordings are available on the Primary Vault only and are not replicated by default to any DR or Satellite Vault.
- Reviewing a restored recording is available using the V10 user interface in a PVWA that is configured to work with the Primary Vault.
- The restored recordings are configured by default to the root location
- Once the retention period has passed for the Safe, the Safe is not deleted automatically.
- Non-English characters are supported for the Safe name in backup only. All other inputs must be entered in English.
- A restored recordings Safe cannot be used for new recordings.
- The restored recordings only restore the video and text recordings.
Restoring the PSM/P Recordings Safe requires a supported version of the PVWA application. Continuing the restore process without a supported PVWA application disables access to the Monitoring page. For PVWA compatibility, see Prerequisites. |
Restore a single Safe
In order to restore a single Safe, there must be an existing Safe of the same name in the Vault. The existing safe will not be replaced during a restore operation, and a new Safe will be created using the name specified by the user in PARestore. If a Safe has inadvertently been deleted and there is no Safe with the same name, create an empty Safe with the same name and add the Safe Owners who will require access, so that the Restore process will recognize the Safe as an existing one.
During a single Safe restore process, the following information will not be restored:
■ | Requests and Confirmations |
■ | Access markers |
■ | Changes stored during incremental backups since the last full backup |
The following diagram shows the restoration process:
Step 1: As shown in the diagram above, restoration begins with transferring the Safe’s metadata backup files and data files to the Restored Safes folders on the Server.
The metadata backup files and the data files that are updated to the same date and time must be restored to the Restored Safes folder in the same structure as they were backed up – metadata backup files in the Metadata folder, and data files in the Data folder.
For example, a Marketing department would like to restore a Safe called Brochures. The relevant metadata backup files (Backup-Dump.sql.gz and any Mysql-bin.*.gz files) should be restored to the Restored SafesMetadata folder, and the folder containing the data files for the Brochures Safe should be restored to the Restored SafesData folder.
The way a Safe is restored depends on the way it was backed up, as described below.
■ | Restoring from the PrivateArk Replicator – If the backup procedure was carried out by the PrivateArk Replicator, use the PARestore utility to copy the Safe files to the Restored Safes folder. In order to be able to issue the PARestore command, the User must have the ‘Restore All Safes’ authorization in the Vault. A predefined group called ‘Operators’ is created during Vault installation and upgrading, and is added automatically to every Safe that is created. Each user that is subsequently assigned to this group must be given the restore authorizations manually. |
■ | Restoring from an external backup utility – If the backup procedure was carried out by an external backup application, the same application should copy the metadata backup files and the data files to the Restored Safes folder. |
Step 2: After the Safe files have been copied to the Restored Safes folder, they must be synchronized with the Safe files in the Safes folder. The PARestore utility does this automatically, but it can be split into two separate procedures.

If the Safe was backed up using the PrivateArk Replicator, the PARestore utility can unify these two steps and enable you to restore the Safe in a single command.
Restore safes using the PARestore utility
Safes are restored using the PARestore utility, regardless of how they were backed up.
|
- At a command line prompt, use the following command:

At a command line prompt, use the following command:
This example restores a specific recordings safe to a new safe, and sets the Auditors group and the Admin user as owners with Auditor role permissions. The recordings will be deleted after 10 days.
When the restore process completes, a summary is shown. For example:
**** Recordings safe restore summary ****
Safe name to recover from backup: PSMRecordings
New safe name: Restored_Recordings_SafeRecordings retention in days: 10
Safe owners:
Auditors, Admin
*****************************************

Follow the application’s instructions to restore the entire Metadata folder and the Safe’s folder into the Restored Safe’s folder, as described above.
At a command line prompt, use the following command:
For details about PARestore, see Restore Utilities.
Restore permissions
To restore a Safe a User must have the ‘Restore All Safes’ authorization in the Vault. This means that a User is able to restore all the Safes, but it does not grant him automatic access to the Safes after they are restored. Only users who have Safe ownership will be able to access restored Safes.
Outlook Vault Missing
The ‘Restore All Safes’ authorization enables a User to issue the PARestore utility. When using this utility, the User will be required to supply his User name and password. The Vault will then verify the User identity and check his authorizations to administer this specific Safe. If the User does not have the required rights, the operation will not be carried out.
The predefined ‘Operator’ user has the ‘Manage Safe’ authorization for each Safe, and is also assigned to the ‘Operators’ predefined group automatically. However, when additional users are added to this group, they must each be given the ‘Restore All Safes’ authorization in the Vault separately.
The user who will issue ‘CAVaultManager RestoreDB’ to restore a full Vault is not required to authenticate to the Vault. However, the full Vault can only be restored on the Vault machine.
Restore a Vault
Full Vault restoration is carried out in the event of general failure.
Restoration involves restoring the Safe folders to a new computer that is suitable as a Vault Server. For more information about Vault requirements, refer to the Privileged Access Security Installation Guide. After installing the Server and configuring it to work with the Safes, the new Vault will have the same Safe names, Users, and authorizations as the old Vault.
The new Server must use the same Master and Operator keys as the old Server.
Restore the Vault
Install a new version of the PrivateArk Server, and make sure that it is fully operational.
Enable the Operator user or another user that has the following authorization in the Vault:
In DBParm.ini, set the following parameter:
Copy all the relevant backup files (metadata and data) to the restored Safes folder on the Vault server machine.
If you used the PrivateArk Replicator, use the following command:
PARestore vault.ini operator /FullVaultRestore
For more information about PARestore, refer to Restore Utilities.
Or,
If you used a third-party application to backup the Safe, follow the application’s instructions
Enterprise Vault Outlook Download
Open the PrivateArk Server Management Console and stop the CyberArk Vault Server, then close the PrivateArk Server Management Console.
From the Server installation folder, run the CAVaultManager utility, as follows:
This command requires you to use the Master CD. |
From the Server installation folder, run the CAVaultManager utility, as follows:
Run CAVaultManager RestoreDB in an elevated session
Microsoft Outlook Enterprise Vault
This will complete the restore process and synchronize the restored metadata and data. For more information, refer to Restore Utilities.
In DBParm.ini, reset the BackupFilesDeletion parameter. This parameter’s default value is:
However, if this parameter specified other values before you restored the Vault, specify the same values again to meet your enterprise needs.
Modify the Vault configuration files to duplicate the previous Vault’s settings.
Start the CyberArk Vault Server.
