Getting Started with Recovery for Azure Active Directory

What is On Demand?

On Demand is a cloud based management platform, providing access to multiple Quest Software Microsoft management tools through a single interface. Cloud based is a term that refers to applications, services or resources made available to users on demand via the Internet. Quest On Demand Global Settings is a Software as a Service (SaaS) application where application software is hosted in the cloud and made available to users through quest-on-demand.com. The On Demand management platform is based on the concepts of organizations, task based modules and Azure AD tenants. When you sign up for the On Demand service, you create an organization. The organization can subscribe to task based modules. Organization administrators can use the tools provided by the modules to perform administrative actions on Azure AD tenants.

 

Getting Started

Accessing the On Demand Portal

  1. Visit http://quest-on-demand.com
  2. Existing accounts
    • Enter your email address
    • Click Next
    • Enter your password and click “Sign in”
  3. Create an account
    • Click “Create new account”
    • Enter your email address and click “Verify Your Email”
    • If you have signed up with Quest before, it will state that your account already exists. If this is the case, see the “Reset your password” section below
  4. Reset your password
    • From the login screen enter your email address and click Next
    • If you are coming from the “Create a new account” screen click “Sign in with an existing account”
    • Click the “Forgot your password” link
    • Enter and confirm your email address and click “Reset Password” to reset your password
    • This will send an email with a password reset link in it. Follow the instructions from this email.

Video: How to navigate the On Demand User Interface

 

Tenant Management

  1. To add a tenant
    • Click Tenants from the navigation menu
    • Click “Add Tenant”
    • The Add Tenant dialog box will come up stating you must be a global administrator, click Continue
    • This will redirect you to a sign page to add your o365 tenant, enter the appropriate credentials and sign in
    • You will be prompted with a list of permissions On Demand requires, Click Accept
    • Once completed you will be redirected back to the On Demand console and the Tenant should now be added
  2. To delete a tenant
    • Click Tenants from the navigation menu
    • Click the 3 vertical dots to the right of the Tenant name
    • Click Remove
    • You will be prompted with a dialog box that states removing the Tenant cannot be undone and that it disables all functions related to the tenant. If you are sure click Remove

Video: How to Add a tenant

 

On Demand Recovery for Azure Active Directory

Quest On Demand Recovery for Azure Active Directory allows you to backup and restore Microsoft Azure Active Directory and Office 365 users and groups with their properties. These objects can be selected in a backup and then restored to Azure Active Directory or Office 365 without affecting other objects or attributes. Using the granular restore feature, objects that were inadvertently deleted or modified can be recovered in a few minutes.

 The initial backup can take time to complete depending on the number of objects and the number of links between them.  Once the initial backup is complete all subsequent backups will be much faster.

 

On Demand Backup and Recovery test parameters

The following test parameters are recommended for effective testing of On Demand Recovery for Azure Active Directory.

  • A test or production Office 365 tenant. We recommend starting with a test tenant and then moving to a production tenant once you are familiar with On Demand operations.
  • We encourage you to test On Demand Recovery for Azure Active Directory with more than one tenant if possible.  The platform supports multi-tenant registration.

 

On Demand Backup and Recovery test cases

The following test cases will help you get started and gain an understanding of On Demand Backup and Recovery.

 

  • Backup and recover a user attributes: On Demand Recovery for Azure Active Directory allows you to backup and restore individual user attributes, enabling rapid recovery from bulk attribute changes that have been made in error or maliciously. To perform the use case:
  1. Create an Azure AD backup using On Demand Recovery for Azure Active Directory.
  2. Change one or more attributes in the Azure AD portal.
  3. Restore the users attributes using On Demand Recovery for Azure Active Directory.
  4. Confirm that user attributes have been restored to their original state.

 

  • Backup and recover a group: On Demand Recovery for Azure Active Directory allows you to backup and recreate user groups including group membership and subgroups. This can save hours of labor and avoid lengthy support calls with Microsoft since groups cannot be recovered natively through the Azure AD portal or the Office 365 Admin portals.  To perform the use case:
  1. Create an Azure AD backup using On Demand Recovery for Azure Active Directory.
  2. Delete an Azure AD group in the Azure AD portal.
  3. Restore the group using On Demand Recovery for Azure Active Directory.
  4. Confirm that the group has been restored to Azure AD.

 

  • Backup and recover a deleted user: On Demand Recovery for Azure Active Directory allows you to backup and restore users from a single interface instead of having to navigate between multiple interfaces in native tools. To perform the use case:
  1. Create an Azure AD backup using On Demand Recovery for Azure Active Directory.
  2. Delete one or more Azure AD users in the Azure AD portal.
  3. Restore the users using On Demand Recovery for Azure Active Directory.
  4. Confirm that users have been restored to their original state.

 

  • Backup and recover a user deleted from the O365 recycle bin: On Demand Recovery for Azure Active Directory allows you to backup and recreate users that have been permanently deleted from the Office 365 recycle bin. Since Microsoft maintains a strict 30 day retention policy on items in the recycle bin, users can be permanently deleted without the admins knowledge.  On Demand Recovery for Azure Active Directory makes it possible to recover these users without opening a support case with Microsoft.  To perform the use case:
  1. Create an Azure AD backup using On Demand Recovery for Azure Active Directory.
  2. Delete one or more Azure AD users in the Azure AD portal.
  3. Remove those same users from the Office 365 recycle bin.
  4. Restore users using On Demand Recovery for Azure Active Directory.
  5. Confirm that users have been restored to Azure AD.

 

 

Troubleshooting

How to Videos

  1. How to Restore a group and group membership
  2. How to restore a hard deleted user object
  3. How to restore a user attribute
  4. How to manage and unpack backups

Getting Started Knowledge Base Articles

  1. How to add an Azure Active Directory Tenant
  2. How to enable the backup schedule
  3. How to restore objects from a backup
  4. Permissions required by the account used to access the Azure AD or Office 365 tenant
  5. Is On Demand Backup and Recovery for Azure AD able to restore users from the Recycle Bin?
  6. Does On Demand Backup and Recovery for Azure AD require any additional software?
  7. How often are backups taken?
  8. List of Supported Web Browsers

 

 

 

 

How to get Help

 You can get help through a few different methods with Quest.

  1. The Quest Support Portal
  1. The Quest Communities
 
  1. Receive Updates on status
    • Visit our Status Page and subscribe to updates to stay current on any outages or partial outages that may occur. There are multiple methods of receiving these updates.

 

Once again, thank you for using Quest On Demand and Welcome aboard!

Related
Recommended