AD Disaster Recovery

Active Directory disaster recovery

Active Directory (AD) is a key network service in organizations, without which everything comes to a grinding halt. For that very reason, AD administrators need to be prepared for the various disasters that might strike their AD forest.

When it comes to AD, the scope of disasters covers a wide array of scenarios. It can be as simple as the accidental deletion of a single object, or the slightly complicated situation of the accidental deletion of an entire organizational unit (OU). In the worst-case scenario, all domain controllers (DC) can come crashing down, and entire domains or forests must be restored.

It's imperative to be prepared for all such disasters. The native AD backup and recovery solution only allows for full backups, where you have to back up each of your domain controllers and restore them entirely. This method is highly inefficient when you just need to restore a single object or OU, as it unnecessarily puts the DC offline while the bare-metal restoration happens. 

You need a disaster recovery solution that can deal with each unique situation, and RecoveryManager Plus fits the bill perfectly. 

RecoveryManager Plus can quickly and efficiently perform any of the following:

Restore individual objects

Accidental deletion of any AD object, such as users, groups, or GPOs, can be disastrous depending on the importance of the deleted object. Deleting an entry-level employee's user account would only result in a minor inconvenience to a small number of people, but removing the user account of a critical resource or a GPO that affects multiple users can really put a wrench in the works. 

RecoveryManager Plus backs up each object in your AD environment. During each backup cycle, changes made to individual objects are incrementally backed up and stored as separate versions. This allows administrators to restore each object to any of its past versions instantly.

Restore entire OUs and their constituent objects

OUs are the smallest AD objects to which group policies can be assigned, and this makes them an important component in AD administration. Their importance highlights the need for a system that can maintain consistent and reliable OUs, while keeping in mind the number of objects that will be affected if any unwarranted modifications occur to OUs.

RecoveryManager Plus backs up all OUs and their constituent objects. When a whole OU or even just a small portion of it undergoes unnecessary modifications, administrators can restore the OU to any previous backup state. When an entire deleted OU is restored, not only are the constituent objects restored but all attributes of the objects are restored too. This includes linked attributes like group membership information, which restores the deleted objects to the groups they were previously a part of, thereby making sure that permissions provided to objects stay consistent, even after restoration.

Restore entire domains/forests

When all domain controllers in a domain or AD forest fail, the entire organization’s network comes crashing down. Immediate action must be taken to restore your domain controllers, and save both your domain/forest and your organization. 

RecoveryManager Plus backs up all aspects of your domain controllers, including the system state, the data in system partitions, and the AD database. When all your domain controllers fail, it is necessary to revive at least one domain controller per domain. RecoveryManager Plus allows you to restore entire domain controllers from scratch and get your AD back online as soon as possible. 

Moreover, RecoveryManager Plus allows administrators to restore domain controllers either authoritatively or non-authoritatively, as needed. Click here to learn more about carrying out both types of restoration. 

Couldn't find the feature you wanted? Raise a feature request 
Need a full-fledged demonstartion of the product? Request a personalized demo

A single pane of glass for Active Directory and Virtual Environment Backup