Foglight

$19.7M saved in ransomware recovery losses

Quest Identity Recovery

With an identity recovery solution, minutes matter. Fast and secure AD and Entra ID recovery is vital following a ransomware attack or other disaster. The longer these critical identity services are down, the longer your business is down. But when disaster strikes, you can recover 90% faster with Quest Software, saving millions in downtime and mitigation costs.

The power of hybrid disaster recovery

Protect Active Directory and Entra ID from a single solution, delivering secure, malware-free identity recovery with high availability and instant restoration. The most flexible identity recovery solution is always on, updated, and available via the Quest Security Management Platform. 

  • Supports critical on-premises infrastructure: Many industries are still deeply entrenched in on-premises infrastructure due to regulatory and operational requirements. When attacks occur, the separation between AD admin teams and security teams causes delays and confusion, impacting business.
  • Increases recovery speed: While traditional enterprise backup solutions take days or weeks to restore operations, Quest Identity Recovery recovers systems in minutes or hours, reducing downtime when costs can exceed $1M/hour. This rapid identity recovery is a key differentiator compared to other AD backup and recovery methods.
  • Provides complete protection in a single platform: Manage the entire security lifecycle in a single interface. Our unified approach aligns with the NIST CSF framework, covering all pillars: Identify, Protect, Detect, Respond, Recover, and Govern. This empowers IT to manage the entire recovery process independently, without coordinating between multiple teams.
  • Lowers costs and enhances security — With a hybrid identity recovery solution, you’ll eliminate server and operating system costs while reducing hardware expenses over time. This is valuable when regulatory constraints prevent you from fully migrating to the cloud, allowing you to benefit from enhanced security features from cloud providers like Microsoft.
Security first modernization

Quest Recovery Manager for Active Directory Disaster Recovery Edition

For 20+ years, the gold standard in AD recovery, from granular object level to full forest disasters. Discover the most flexible and proven solution for AD backup and recovery.

streamlined optimized management

Quest Identity Recovery for Entra ID

Establish a complete Entra ID recovery plan to minimize disruption and maintain access to critical systems. Detect unwanted changes, restore identities and relationships to their correct state, and ensure business continuity without relying on manual effort or limited native tools.

Key Benefits

SVG

Rapidly recover from identity disasters

Deploy proven automation and flexibility in recovery options, malware protection, and other best-in-class disaster recovery capabilities that slash identity recovery time.
SVG

Protect identities with immutable backups

Reduce attack surface and keep backups readily available with immutable cloud storage for AD and Entra ID identities, objects, and configurations.
SVG

Improve security and compliance

Satisfy regulatory and internal security requirements with validated supply chain risk management practices that exceed industry standards.
SVG

Maximize availability with an identity recovery solution

Instantly start identity recovery of on-prem Active Directory when on-prem systems are compromised or unavailable.
SVG

Reduce footprint and lower costs

Operate world-class AD backup and disaster recovery from the cloud, satisfying SaaS-only strategies.
SVG

Streamline operations

Control Active Directory and Entra ID backup and recovery from a single console and common interface to reduce training and admin costs.

Highlighted Features

Preventing extreme recovery measures

Preventing extreme recovery measures

An example of recovery challenges comes from a global shipping company that had a severe cyberattack. They had to fly a team member to another continent to retrieve an offline Active Directory server that remained unaffected by the attack. Quest Identity Recovery makes such drastic measures unnecessary, as it allows for centralized control and identity recovery from any location regardless of your global footprint.

Protecting your reputation

Protecting your reputation

Beyond financial implications, prolonged downtime can damage your reputation. The longer systems are down, the more likely it is to attract negative attention from the media and customers. Quest Identity Recovery not only restores operations quickly but also helps protect your organization's reputation by minimizing incident impact.

Built on the Quest Security Management Platform

Built on the Quest unified identity cloud platform

Quest Identity Recovery is built on the unified Quest Security Management Platform that’s migrated 100 PB of data, backed up 60B Entra ID objects in 12 months, and reduced customers’ identity attack surface by over 99%. The identity recovery solution is ISO/IEC 27001, 27017, and 27018 certified with award-winning, global support 24/7/365. We simplify identity security with better tools and resources, reducing the need for extensive training. 

Quest Identity Recovery is the proven leader

90
%

Faster recovery

$
19.5
M

Ransomware savings

60
B+

Entra ID objects managed

FAQ

In the event of a scorched earth attack, i.e., your entire on-premises environment is compromised by something like ransomware, even the most robust on-premises identity recovery solution will require hardware provisioning and installation before starting recovery procedures. Not to mention getting access to on-premises backups, if you can at all. When the cost of downtime can exceed $1M/hour, having an immediately available SaaS solution with cloud backups lets you instantly start identity recovery, saving not only money but brand reputation.

With Microsoft-provided tools and manual processes, Active Directory forest recovery is a difficult, time-consuming, and error-prone process. In fact, Microsoft’s Active Directory Forest Recovery Guide outlines 40 high-level steps that must be performed correctly and in the proper sequence – on each DC. In addition, many of the steps aren’t operations that AD administrators are familiar with; they are tedious, often command-line based steps, so it’s very easy to make mistakes that can re-corrupt your directory and require you to start over. Quest Software reduces risk by automating every one of these manual steps.

VM snapshots are no substitute for an enterprise AD identity recovery solution. Using snapshots for forest recovery will almost always cause data consistency problems that are difficult to resolve. Since the data on DCs is constantly being updated and the replication process takes time, snapshots of different DCs almost always contain inconsistent information. Snapshots can also include malware, which gets restored with everything else on the DC. Plus, if you store your VM snapshots in the default location, they’re an obvious target for ransomware encryption, rendering them useless. And logistically, control over VM snapshots resides with the virtualization team, complicating the AD team’s recovery operation. The virtualization team may not know the AD snapshots are an essential part of the disaster recovery strategy and may not protect them appropriately.

An immutable backup is a duplicate copy of data that can’t be altered or removed for a specified timeframe. It’s a method you can use to protect valuable data from threats ranging from cyberattacks to accidental removal. When it comes to AD security, our solutions provide multiple storage locations for AD backups, with many organizations choosing a dedicated backup location for their identity recovery team that doesn’t rely on traditional backup teams (since traditional backup teams often rely on AD for authentication). While some organizations can choose to store backups inside enterprise backup storage, you should validate that there are authentication capabilities to retrieve those backups that do not require AD. Because we’ve seen physical destruction, as well as loss of connectivity to the internet, we recommend your backups are air-gapped or on immutable storage.

Knowledge Center