Recovery Manager for Active Directory

Disaster Recovery for Active Directory and Quick Restore of Granular Objects

Recovery Manager for Active Directory enables you to prevent system downtime and lost productivity as the result of human error or hardware and software failures that corrupt Active Directory (AD), system configurations or Group Policy data. Now you can automate backups, quickly compare a backup to the current value of AD to pinpoint changes and instantly recover the desired data.

Using online, granular restore capabilities, you can recover entire sections of the directory, selected objects or individual attributes – all without taking AD offline. This time-saving solution reduces costs and increases productivity.

Features

  • AD Recycle Bin – Use a wizard-based console to direct you through a streamlined recovery process, effectively creating a graphical Active Directory recycle bin – no scripting required!
  • Online, Granular Restore – Restore directory objects without the need to restart domain controllers. This eliminates downtime and any impact on users who are logged on to the network.
  • Comparison Reporting – Use reports to compare the online state of AD with its backup and highlight changes made to the directory data since the backup. Comparisons can also be made between different backups. Reports display the objects that were deleted or changed, including attributes. If you’re running Quest’s ChangeAuditor®, the comparison reports will also include who made the changes.
  • Comprehensive Recovery Options – Take advantage of the only solution of its kind that offers restore of any object in AD, including users, groups, computers, organizational units (OUs), sites, subnets, configuration and Exchange storage groups and Group Policy Objects (GPOs).
  • Attribute-Level Restore – Restore individual attributes, such as account settings, group memberships and binary attributes, even when the object itself has not been deleted. This enables administrators to restore only the required attributes without affecting other attributes.
  • Recovery Manager Portal—Use web interface to:
          • Delegate data restore tasks to specific users
          • Monitor Recovery Manager for Active Directory instances deployed in your organization
          • Undelete AD objects quickly without having to restore from backup
          • Access the search and restore functionality of Recovery Manager for Active Directory
  • Scalable, Flexible Backup of AD – Schedule backups for off-peak hours and centrally manage system state backups for domain controllers. Backups can be stored in a central location, in distributed locations or left on the domain controllers themselves to minimize bandwidth demands and scale to any size of environment.
  • Disaster Recovery Protection – Automatically monitor the health of AD backups, and send email alerts when backups fail or errors are encountered. Quest Management Packs for Microsoft Operations Manager (MOM) 2005 and System Center Operations Manager (SCOM) 2007 provide backup health status and alerts within their respective monitoring consoles. This ensures that you are always aware that backups are being successfully created and are protected in the case of a disaster.
  • Get alerts – Be alerted about Recovery Manager for AD backup events and issues via proactive notifications on mobile devices. You can stay connected and assess issues even while you’re not on site.
  • Take action – Initiate actions such as recovering backups from your mobile device. Check the status of the backup so you are aware of when it started and when it completed, as well as whether it was successful. Respond faster if a backup fails by viewing the error message and restarting the backup immediately.
  • Backup and Restore of Active Directory Lightweight Directory Services (AD LDS) – Back up and perform online restores of AD LDS objects. You can recover AD LDS objects that were deleted or inadvertently modified without restarting AD LDS services or interfering with its operation.

Sys Reqs

Before installing Recovery Manager for Active Directory, ensure your system meets the following minimum hardware and software requirements:

Recovery Manager for Active Directory

ProcessorMinimum: 1.4 GHz

Recommended: 2.0 GHz or faster

Memory
(overall RAM)
Minimum: 1 Gb

Recommended: 2 Gb

These figures apply only if the Active Directory domains managed by Recovery Manager for Active Directory include 1 million objects or less.
Increase RAM size by 512 MB for every additional 1 million objects.

Hard Disk Spacex86 system
Full installation including the prerequisite software:
—1.5 Gb of free disk space
In case all the prerequisite software is already installed:
—200 Mb of free disk space

x64 system
Full installation including the prerequisite software:
—2.7 Gb of free disk space
In case all the prerequisite software is already installed:
—210 Mb of free disk space

Note: Additional storage space is required for a backup repository, at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40 MB for the transaction log files.
MonitorSVGA at 1024 x 768 or higher
Operating SystemInstallation
You can install Recovery Manager on a computer running one of the following operating systems (both x86 and x64 platforms are supported):
—Microsoft Windows Server 2012
—Microsoft Windows 8
—Microsoft Windows Server 2008 R2 without Service Pack or with Service Pack 1
—Microsoft Windows Server 2008 with Service Pack 1 or Service Pack 2
—Microsoft Windows 7 without Service Pack or with Service Pack 1
—Microsoft Windows Vista with Service Pack 2
—Microsoft Windows Server 2003 R2 with Service Pack 2
—Microsoft Windows Server 2003 with Service Pack 2
—Microsoft Windows XP with Service Pack 3

Note: When installed on a Windows XP-, Windows Server 2003-, or Windows Server 2003 R2-based computer, Recovery Manager does not support working with the following:
—Domain controllers or AD LDS (ADAM) hosts running Windows Server 2012
—AD LDS (ADAM) hosts running Windows 8

Targets for backup, restore, or compare operations
—Microsoft Windows Server 2012 (including Server Core installation)
—Microsoft Windows Server 2008 R2 without Service Pack or with Service Pack 1 (including Server Core installation)
—Microsoft Windows Server 2008 with Service Pack 1 or Service Pack 2 (including Server Core installation)
—Microsoft Windows Server 2003 R2 without Service Pack or with Service Pack 2
—Microsoft Windows Server 2003 without Service Pack or with Service Pack 1 or Service Pack 2
Microsoft .NET FrameworkYour computer must have all of the following versions installed:
—Microsoft .NET Framework version 4.0
—Microsoft .NET Framework version 3.5 SP1
Microsoft SQL Server Microsoft SQL Server

One of the following versions is required:
—Microsoft SQL Server 2012 with or without any Service Pack (Enterprise, Business Intelligence, Standard, Express, Web, or Developer Edition )
—Microsoft SQL Server 2008 R2 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition)
—Microsoft SQL Server 2008 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition)
—Microsoft SQL Server 2005 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, or Developer Edition)

Required Microsoft SQL Server components
These Microsoft SQL Server components must be installed on the Recovery Manager computer. If these components are missing, the Recovery Manager Setup installs them for you.
Microsoft System CLR Types for SQL Server 2012
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft SQL Server 2012 Data-Tier Application Framework

Microsoft SQL Server Reporting Services
To display reports, Recovery Manager for Active Directory can integrate with Microsoft SQL Server Reporting Services 2008.

Microsoft Windows PowerShellMicrosoft Windows PowerShell version 3.0 or 2.0
Microsoft Windows InstallerMicrosoft Windows Installer 4.5
Microsoft Management ConsoleMicrosoft Management Console version 3.0
Integration with
Quest ChangeAuditor for Active Directory
To provide information on who modified particular Active Directory objects, Recovery Manager for Active Directory can integrate with the following versions of Quest ChangeAuditor for Active Directory:
5.6, 5.5, 5.1, 5.0, 4.9, 4.8, 4.7, 4.6, and 4.5

If any prerequisite software is not installed, the Setup program will automatically install it for you before installing Recovery Manager for Active Directory

Recovery Manager Portal

ProcessorMinimum: 1 GHz
Memory
(overall RAM)
Minimum: 512 Mb
Hard Disk Spacex86 system: 850 Mb

x64 system: 2 Gb
MonitorSVGA at 1024 x 768 or higher
Operating SystemInstallation
You can install Recovery Manager on a computer running one of the following operating systems (both x86 and x64 platforms are supported):
—Microsoft Windows Server 2012 with or without any Service Pack
—Microsoft Windows Server 2008 R2 with Service Pack 1 or later
—Microsoft Windows Server 2008 with Service Pack 2 or later
Web BrowserTo access the Recovery Manager Portal, you can use Microsoft Internet Explorer 10, 9, or 8.
Microsoft .NET FrameworkMicrosoft .NET Framework version 4.5
Microsoft Internet Information Server
(IIS)
Microsoft Internet Information Services (IIS) 8.0, 7.5, or 7.0.

On Windows Server 2008 or Windows Server 2008 R2, the following role services are required:

- Web Server

      - Common HTTP Features
           - Static Content
           - Default Document
      - Application Development
           - ASP.NET
           - .NET Extensibility
           - ISAPI Extensions
           - ISAPI Filters
     - Health and Diagnostics
           - HTTP Logging
     - Security
           - Windows Authentication
           - Request Filtering
     - Performance
           - Static Content Compression
- Management Tools

      - IIS Management Console

On Windows Server 2012, the following role services are required:

- Web Server

      - Common HTTP Features
             - Default Document
             - Static Content
      - Health and Diagnostics
             - HTTP Logging
      - Performance
             - Static Content Compression
      - Security
             - Request Filtering
             - Windows Authentication
      - Application Development
             - .NET Extensibility 4.5
             - ASP.NET 4.5
             - ISAPI Extensions
             - ISAPI Filters
- Management Tools

    - IIS Management Console
Microsoft SQL Server Microsoft SQL Server

One of the following is required:
—Microsoft SQL Server 2012 with or without any Service Pack (Enterprise, Business Intelligence, Standard, Express, Web, or Developer Edition )
—Microsoft SQL Server 2008 R2 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition)
—Microsoft SQL Server 2008 with or without any Service Pack (Enterprise, Standard, Workgroup, Express, Web, or Developer Edition)

Required Microsoft SQL Server components
These Microsoft SQL Server components must be installed on the Recovery Manager computer. If these components are missing, the Recovery Manager Setup installs them for you.
Microsoft System CLR Types for SQL Server 2012
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft SQL Server 2012 Data-Tier Application Framework

Videos

Screenshots

Recovery Manager for Active Directory

Recovery Manager for Active Directory

Recovery Manager features an intuitive interface that allows you to recover from an inadvertent deletion or change to the AD data. With its remote, online, granular restore capability, you can recover selected objects and individual attributes without taking AD offline. You can even launch Forest Edition directly from the Recovery Manager for AD console.

Delegated restores

Scalable, Flexible Backup of Active Directory

Recovery Manager provides the ability to assign specific people to restore AD objects at either the domain or container level. It provides secure access to restore and undelete objects for delegated users.

Undelete AD objects

Undelete AD objects

Recovery Manager allows you to search, restore and immediately undelete AD objects without having to restore them first. The first step is to identify the objects. Search by container, object type and date.

Search results of objects

Search results of objects

With Recovery Manager, once the objects have been identified, the next step is to review the objects selected to be undeleted. You may remove items or execute the undelete process.

Attribute recovery

Attribute recovery

With Recovery Manager, the restore search is similar to undelete, but includes an attribute filter.

Scalable, Flexible Backup of Active Directory

Scalable, Flexible Backup of Active Directory

Recovery Manager for Active Directory allows centralized management of System State backups for DCs. Backups can be stored in a central location, in distributed locations or left on the domain controllers to minimize bandwidth demands and scale to any size of environment.

Disaster Recovery Protection

Disaster Recovery Protection

Quest Management Pack for Microsoft System Center Operations Manager (SCOM)provides backup health status and alerts within the SCOM console. This ensures you’re always aware that backups are being successfully created and are protected in the case of disaster.

Integration with Microsoft Data Protection Manager (DPM)

Integration with Microsoft Data Protection Manager (DPM)

In many instances recovery must be done on a granular level and DPM cannot provide this level of recovery alone. Recovery Manager leverages the backup capabilities of DPM, allowing you to identify the modified AD data and quickly restore AD objects with their attributes intact.

Scheduled Backups

Scheduled Backups

Recovery Manager for Active Directory allows administrators to schedule backups for off-peak hours. By using the differential backup feature, you can increase backup efficiency, enable more frequent and timely backups, and still use less storage than other recovery solutions.

Restore Any Active Directory Object

Restore Any Active Directory Object

Recovery Manager is the only solution of its kind that offers restore of any object in AD, including users, groups, computers, OUs, sites, subnets, configuration and Exchange storage groups. And this can all be done without restarting domain controllers.

Rollback Attribute Changes

Rollback Attribute Changes

Recovery Manager can also restore individual attributes, such as account settings, group memberships and binary attributes, even when the object itself has not been deleted. This enables administrators to restore only the required attributes without affecting other attributes.

Restore AD LDS Objects

Restore AD LDS Objects

Recovery Manager supports the online restore of Active Directory Lightweight Directory Services (AD LDS), formerly ADAM, objects. You can recover AD LDS objects that were deleted or inadvertently modified without restarting AD LDS services or interfering with its operation.

Comparison Reporting

Comparison Reporting

Reports compare the live state of Active Directory with its backup and highlight changes made to the directory data since the backup. This accelerates and simplifies the recovery process. Comparisons can also be made between different backups.

Identify Overwritten or Erased Attributes

Identify Overwritten or Erased Attributes

Recovery Manager’s comparison reports highlight individual attributes that have been changed or deleted, such as account settings or group memberships. The reports list the attributes that have been overwritten and their previous values to assist in troubleshooting.

Integration with Native Tools

Integration with Native Tools

Recovery Manager seamlessly integrates with all Microsoft native tools enabling users to work with a familiar interface. Comprehensive integration includes AD Users and Computers.

PowerShell Support

PowerShell Support

Integration with Windows PowerShell allows flexible scripting of Recovery Manager’s powerful capabilities, making it easy to integrate with other applications.

Docs

Case Studies

A Leading National Health Insurer Chooses Quest Software to Protect Active Directory Brasfield & Gorrie Gets Active Directory Administration Under Control with Quest Software Brighter Future for Knox County Schools Charlotte-Mecklenberg Schools (CMS) Implements Plan for Disaster Recovery with Recovery Manager for Active Directory Community College Earns A+ for Its Active Directory Recovery Plan Energy Company is Back to Work Within an Hour Howard County, MD Performance and Progress Keeping IT in Shape: Texas Health and Human Services Commission stays healthy with its new Active Directory system. Large University Understands Importance of AD Management Norwich and Peterborough Building Society Cashes In on Quest's Active Directory Recovery Solution and Achieves 1,000 Percent ROI Quest Educates Kingston University on Exchange and Active Directory Protection and Recovery, Delivering 89 Percent Savings in Staff Time Quest Helps 22,000 Users in Gavle's Council and Schools Stay Online in the Event of Active Directory Failure, Delivering Over 600 Percent ROI Quest Improves the Efficiency and Security of La Caja De Canarias' Operations and Customer Transactions Quest Recovery Manager for Active Directory Quickly Restores E-mail for 11,000 LandAmerica Employees, Delivering 200% ROI in Less Than a Day Quest Software Uses Its Own Recovery Manager for Active Directory to Resolve Serious E-mail Disruption Quickly Quest's Windows Management Products Fit the Bill at Lancashire Constabulary Recovery Manager for Active Directory Reduces Restore Time from One Hour to 10 Minutes Sberbank of Russia is Protected Against Unplanned Downtime Spanish university improves IT efficiency by 60 percent Tyco Healthcare Speeds Recovery Time by More Than 75 Percent with Recovery Manager for Active Directory back to top

Support Docs, Notes and Guides

Release Notes and User Guides back to top