Below is a handy script for restoring a VM with Special Configuration<\/p>\n
Please Note: this will only work where the VM still exists in the Azure. this process would be used to recover the VM from a previous day or if became corrupt. If the VM completely disappeared then additional steps will be required to manually recreate Availability Sets and NICs.<\/p>\n
This script focus on restore NIC, ILB, Availability Sets , OMS, Diagnostic Settings and Antimalware<\/p>\n
#Set the restore date #Global Settings #XML Download name and location #Backup Diagnostic Settings #Backup VM Settings #Remember to remove the remark to remove the VM $vault = Get-AzureRmRecoveryServicesVault -Name $VaultName -ResourceGroupName $rgname $namedContainer = Get-AzureRmRecoveryServicesBackupContainer -ContainerType AzureVM \u2013Status Registered -FriendlyName $RestoreVMName #Select the backup Set #Start the Restore Process #Wait for Restore to complete #Get Details from Backup Configuration Properties<\/p>\n $properties = $details.properties Set-AzureRmCurrentStorageAccount -Name $storageaccountname -ResourceGroupName $rgname Set-AzureRmVMOSDisk -VM $vm -Name \"osdisk\" -VhdUri $obj.StorageProfile.OSDisk.VirtualHardDisk.Uri -CreateOption \u201cAttach\u201d #Connect existing NIC #CreateVM #Attach Antimalware Extension #Enable Diagnostic Logging #Attach OMS Resource <\/code><\/p>\n","protected":false},"excerpt":{"rendered":" Below is a handy script for restoring a VM with Special Configuration Please Note: this will only work where the VM still exists in the Azure. this process would be used to recover the VM<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[21],"tags":[],"class_list":["post-3731","post","type-post","status-publish","format-standard","hentry","category-microsoft"],"jetpack_publicize_connections":[],"yoast_head":"\r\n
\n# Login to Azure PowerShell
\nLogin-AzureRmAccount
\n$YourSubscriptionName= '
\nGet-AzureRmSubscription \u2013SubscriptionName $YourSubscriptionName | Select-AzureRmSubscription
\nGet-AzureSubscription \u2013SubscriptionName $YourSubscriptionName | Select-AzureRmSubscription
\nGet-AzureRmContext<\/p>\n
\n$startDate = Get-Date -Date '21 December 2016 00:00:00'
\n$endDate = Get-Date -Date '21 December 2016 23:59:59'<\/p>\n
\n$loc = 'North Europe'
\n$rgname = '
\n$VMName = '
\n$RestoreVMName = $VMName #Only Change if you want to give the VM a New Name (for Testing)
\n$VaultName = '
\n$StorageAccount = '
\n$workspaceName = \"
\n$diagnosticsconfig_path = 'DiagnosticsPubConfig.xml'
\n$VMNameConfig_path = 'VMConfig.json'
\n$RestoreVMNameConfig_path = 'RestoreVMConfig.json'<\/p>\n
\n$publicsettings = (Get-AzureRmVMDiagnosticsExtension -ResourceGroupName $rgname -VMName $vmname).PublicSettings
\n$encodedconfig = (ConvertFrom-Json -InputObject $publicsettings).xmlCfg
\n$xmlconfig = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String($encodedconfig))
\n$xmlconfig | Export-Clixml -Path $diagnosticsconfig_path<\/p>\n
\n$VmObject = Get-AzureRmVM -ResourceGroupName $rgname -Name $Vmname
\nConvertTo-Json -InputObject $VmObject | Out-File -FilePath $VMNameConfig_path
\n$destination_path = $VMNameConfig_path
\n$oldconfobj = ((Get-Content -Path $destination_path -Encoding Unicode)).TrimEnd([char]0x00) | ConvertFrom-Json<\/p>\n
\n#Remove-AzureRmVM -ResourceGroupName $rgname -Name $VMName<\/p>\n
\nSet-AzureRmRecoveryServicesVaultContext -Vault $vault<\/p>\n
\n$backupitem = Get-AzureRmRecoveryServicesBackupItem \u2013Container $namedContainer \u2013WorkloadType \"AzureVM\"<\/p>\n
\n$rp = Get-AzureRmRecoveryServicesBackupRecoveryPoint -Item $backupitem -StartDate $startdate.ToUniversalTime() -EndDate $enddate.ToUniversalTime()
\n$rp[0]<\/p>\n
\n$restorejob = Restore-AzureRmRecoveryServicesBackupItem -RecoveryPoint $rp[0] -StorageAccountName $StorageAccount -StorageAccountResourceGroupName $rgname
\n$restorejob<\/p>\n
\n$restorejob = Get-AzureRmRecoveryServicesBackupJob -Job $restorejob
\n$details = Get-AzureRmRecoveryServicesBackupJobDetails -Job $restorejob<\/p>\n
\n$storageAccountName = $properties[\"Target Storage Account Name\"]
\n$containerName = $properties[\"Config Blob Container Name\"]
\n$blobName = $properties[\"Config Blob Name\"]<\/p>\n
\n$Restoredestination_path = $RestoreVMNameConfig_path
\nGet-AzureStorageBlobContent -Container $containerName -Blob $blobName -Destination $Restoredestination_path
\n$obj = ((Get-Content -Path $Restoredestination_path -Encoding Unicode)).TrimEnd([char]0x00) | ConvertFrom-Json
\n$vm = New-AzureRmVMConfig -VMSize $obj.HardwareProfile.VirtualMachineSize -VMName $VMName -AvailabilitySetId $oldconfobj.AvailabilitySetReference.id #$AvailabilitySet.Id<\/p>\n
\n$vm.StorageProfile.OsDisk.OsType = $obj.StorageProfile.OSDisk.OperatingSystemType foreach($dd in $obj.StorageProfile.DataDisks)
\n{
\n $vm = Add-AzureRmVMDataDisk -VM $vm -Name \"datadisk1\" -VhdUri $dd.VirtualHardDisk.Uri -DiskSizeInGB 127 -Lun $dd.Lun -CreateOption Attach
\n}<\/p>\n
\n$vm=Add-AzureRmVMNetworkInterface -VM $vm -Id $oldconfobj.NetworkInterfaceIDs[0]<\/p>\n
\n$vm.StorageProfile.OsDisk.OsType = $obj.StorageProfile.OSDisk.OperatingSystemType
\nNew-AzureRmVM -ResourceGroupName $rgname -Location $loc -VM $vm<\/p>\n
\n$RegularServer = @'
\n{
\n \"AntimalwareEnabled\": true,
\n \"RealtimeProtectionEnabled\": true,
\n \"ScheduledScanSettings\": {
\n \"isEnabled\": false,
\n \"day\": 1,
\n \"time\": 10,
\n \"scanType\": \"Full\"
\n },
\n \"Exclusions\": {
\n \"Extensions\": \".MDF;.LDF;.NDF\",
\n \"Paths\": \"%systemroot%:\\\\inetpub\\\\temp\\\\IIS\",
\n \"Processes\": \"\"
\n }
\n}
\n'@
\n$TypeHandlerVersion = ((Get-AzureRmVMExtensionImage -Location 'North Europe' -PublisherName 'Microsoft.Azure.Security' -Type 'IaaSAntimalware').Version[-1][0..2] -join '')
\nSet-AzureRmVMExtension -ResourceGroupName $rgname -VMName $vmname -Name 'IaaSAntimalware' -Publisher 'Microsoft.Azure.Security' -ExtensionType 'IaaSAntimalware' -SettingString $RegularServer -Location $loc -TypeHandlerVersion $TypeHandlerVersion<\/p>\n
\nSet-AzureRmVMDiagnosticsExtension -ResourceGroupName $rgname -VMName $vmname -DiagnosticsConfigurationPath $diagnosticsconfig_path<\/p>\n
\n$workspace = (Get-AzureRmOperationalInsightsWorkspace).Where({$_.Name -eq $workspaceName})
\nif ($workspace.Name -ne $workspaceName)
\n{
\n Write-Error \"Unable to find OMS Workspace $workspaceName. Do you need to run Select-AzureRMSubscription?\"
\n}
\n$workspaceId = $workspace.CustomerId
\n$workspaceKey = (Get-AzureRmOperationalInsightsWorkspaceSharedKeys -ResourceGroupName $workspace.ReourceGroupName -Name $workspace.Name).PrimarySharedKey
\nSet-AzureRmVMExtension -ResourceGroupName $rgname -VMName $VMName -Name 'MicrosoftMonitoringAgent' -Publisher 'Microsoft.EnterpriseCloud.Monitoring' -ExtensionType 'MicrosoftMonitoringAgent' -TypeHandlerVersion '1.0' -Location $loc -SettingString \"{'workspaceId': '$workspaceId'}\" -ProtectedSettingString \"{'workspaceKey': '$workspaceKey'}\"<\/p>\n