Back up Active Directory and restore down to the object and attribute levels. Quest® Recovery Manager for Active Directory is like an insurance plan for your AD environment. It not only enables you to back up Active Directory (AD) at the object and attribute level, but also helps you pinpoint changes to your AD environment at the same granular level. Know what happened, who is impacted and what to roll back. Quickly compare a backup to pinpoint differences at the object level and instantly recover.
Mistakes happen. Your AD environment can be damaged when an administrator accidentally deletes something or makes a mass update that goes wrong. This can negatively impact your productivity for hours or even days, and as a result, cost your company revenue and its reputation. When this happens, you need a disaster recovery plan and Active Directory backup and restore tools to get you back up and running quickly. Recovery Manager for Active Directory helps you do exactly that, all while reducing recovery time and costs to reduce user impact.
Of data breaches caused by insiders
AD accounts under attack daily
Another ransomware attack occurs
Restore any object in AD, including users, attributes, organizational units (OUs), computers, subnets, sites, configurations and Group Policy Objects (GPOs). Recovery Manager not only helps you back up Active Directory faster, but also significantly reduces downtime so you can get affected users back to work quickly without restarting domain controllers. You’ll be able to eliminate downtime as well as negative impact on network users.
Whether you’re running a hybrid AD environment with Azure AD Connect, or have cloud-only objects or attributes that aren’t synchronized, it’s critical for security and compliance purposes that you have Active Directory backup and restore tools to ensure the availability and integrity of both on-premises AD as well as Azure AD. Quest On Demand Recovery provides a single recovery dashboard to differentiate hybrid and cloud-only objects, run difference reports between production and real-time backups, and restore all changes, whether on premises or in Azure AD.
Use IT Security Search to discover which AD objects have changed, including before and after values, and restore them to a previous state with a few clicks.
Highlight changes made since the last Active Directory backup by comparing the online state of AD with its backup or by comparing multiple backups. Accelerate recovery by quickly pinpointing deleted or changed objects or attributes. And with Change Auditor you can easily identify who made the changes.
Share persistent configuration data between several instances of your recovery consoles so that you can quickly resume the last restore operation in case it was unexpectedly interrupted.
Generate a detailed recovery process report. This overview of every recovery stage and operation allows you to gain a better understanding and more control of every aspect of Active Directory backup and recovery.
Assign restore tasks to specific users to cut down on recovery timelines and senior-level resource requirements.
We have peace of mind, knowing that our global data is protected and safe with Recovery Manager for Active Directory, even though we haven’t had to use it for a while.Marc Denman Senior Systems Support Specialist, Amway Read Case Study
Before installing Recovery Manager for Active Directory, ensure that your system meets the following minimum hardware and software requirements.
Minimum: 1.4 GHz
Recommended: 2.0 GHz or faster
Minimum: 2 GB
Recommended: 4 GB
These figures apply only if the Active Directory domains managed by Recovery Manager for Active Directory include 1 million objects or less. Increase RAM size by 512 MB for every additional 1 million objects.
Full installation including the prerequisite software: 2.7 GB of free disk space
In case all the prerequisite software is already installed: 260 MB of free disk space
NOTE Additional storage space is required for a backup repository, at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40MB for the transaction log files.
Targets for backup, restore, or compare operations
The Windows Server Backup feature is supported for Windows Server 2012 R2 or higher. Make sure that the feature is installed on all domain controllers in your environment.
Microsoft .NET Framework version 4.8 or higher
Microsoft SQL Server versions
Microsoft SQL Server is required for the following Recovery Manager for Active Directory features: Comparison Reporting and Forest Recovery Persistence.
Supported SQL Server versions:
Microsoft SQL Server components
Microsoft System CLR Types for SQL Server 2012
If this component is not installed, it will be installed automatically by the RMAD setup.
Microsoft SQL Server Reporting Services
To display reports, Recovery Manager for Active Directory can integrate with Microsoft SQL Server Reporting Services (SRSS) 2016, 2017, 2019 and 2022.
Supported Microsoft Operations Managers for the RMAD Management Pack for Microsoft Center Operations Manager (SCOM):
Microsoft Windows PowerShell version 5.0 or later
Supported versions of Change Auditor for Active Directory: from 6.x to 7.x.
If any prerequisite software is not installed, the Setup program automatically installs it for you before installing Recovery Manager for Active Directory. If the prerequisite software to be installed is not included in this release package, it is automatically downloaded.
Continuous recovery: From version 10.0.1, Recovery Manager for Active Directory together with Change Auditor can restore the deleted object(s) and continuously restores the last change (if any) that was made to the object attributes after creating the backup, using the data from the Сhange Auditor database.
The anti-virus checks are performed on the Forest Recovery Console machine running Windows Server 2016 or higher by means of antivirus software installed on the machine.
1 GB (2 GB recommended)
2 GB or more
One of the following operating systems:
Microsoft Windows Installer 4.5 or later must be installed.
Software that must be installed on the Active Directory Virtual Lab computer:
Software that is installed on the source computer by Active Directory Virtual Lab console:
For more details, see the Working with SCVMM 2012 R2 or higher section in User Guide.
Supported operating systems for the Hyper-V host:
You can only use the Password and SIDHistory Recoverability Tool if Microsoft's Active Directory Recycle Bin is not enabled in your environment.
Recovery Manager for Active Directory Disaster Recovery Edition is upgradeable from version 10.0 or later.
Window Server 2008 R2 included a particularly welcome enhancement, AD Recycle Bin restore, which enables restore of some recently deleted Active Directory objects. To facilitate object recovery in cloud-based environments, Microsoft provides the Azure AD Recycle Bin, which offers similar but not identical functionality to its on-premises sibling.
The Active Directory and Azure AD Recycle Bins are extremely valuable in certain situations. If an AD object, such as a user account, has been mistakenly deleted, for instance, you might be able to restore the object from the AD or Azure AD Recycle Bin. However, the Microsoft Recycle Bin is not, and was never intended to be, a complete solution to backup Active Directory. Check out this Active Directory and Azure AD Recycle Bin FAQ and feature comparison to learn exactly what each can do and explore the key limitations.