Free Edition
- Quick Links
- Microsoft 365
- Exchange
- Google Workspace
- Microsoft Entra ID
- Zoho WorkDrive
- AD Disaster Recovery
- AD Objects Backup and Recovery
- Native tools vs RecoveryManager Plus
- AD Backup Highlights
- Data protection
- Related Products
- ADManager Plus Active Directory Management & Reporting
- ADAudit Plus Hybrid AD, cloud, and file auditing and security
- ADSelfService Plus Identity security with MFA, SSO, and SSPR
- Exchange Reporter Plus Exchange Server Auditing & Reporting
- EventLog Analyzer Real-time Log Analysis & Reporting
- M365 Manager Plus Microsoft 365 Management & Reporting Tool
- SharePoint Manager Plus SharePoint Reporting and Auditing
- DataSecurity Plus File server auditing & data discovery
- AD360 Integrated Identity & Access Management
- Log360 (On-Premise | Cloud) Comprehensive SIEM and UEBA
- AD Free Tools Active Directory FREE Tool
PowerShell vs Ntdsutil vs RecoveryManager Plus
Active Directory groups play a pivotal role in handling security permissions and authorizations across your AD environment. Unauthorized group changes like additions or deletions of users can jeopardize the security of sensitive resources by providing access to unauthorized users or by revoking users’ access to critical documents. To combat such accidents, a tool that tracks all changes made to groups would be handy. However, tracking every change using Microsoft tools or PowerShell is almost impossible.
Microsoft's PowerShell and Ntdsutil provide administrators with the ability to restore deleted groups, but they don’t offer any way to keep track of all the group membership changes that AD groups undergo. This serves as a deterrent to administrators who wish to maintain complete control over these changes. Administrators have nothing to worry about though, as they can deploy RecoveryManager Plus to overcome all these limitations of the native tools. Check out this chart to see how the native tools line up against RecoveryManager Plus.
Features | PowerShell | Ntdsutil | RecoveryManager Plus | |
---|---|---|---|---|
Recycle deleted groups (Restore a deleted user object from the recycle bin.) |
![]() |
![]() |
![]() |
|
Restore security permissions (Restore security permissions and authorizations provided to security groups.) |
![]() |
![]() |
![]() |
|
User interface (No need for scripting.) |
![]() |
![]() |
![]() |
|
Backup scheduler (To automate the backup process.) |
![]() |
![]() |
![]() |
|
Backup version management (Back up each change made to groups and their memberships as separate versions.) |
![]() |
![]() |
![]() |
|
Attribute-level restoration (Restore individual attributes to any of their previous versions.) |
![]() |
![]() |
![]() |
|
Group membership history (History of users added and removed from the group.) |
![]() |
![]() |
![]() |
|
Restart-free restoration (Restore groups from backup without restarting your DCs.) |
![]() |
![]() |
![]() |
As you can see in the chart above, while PowerShell and Ntdsutil allow administrators to restore deleted AD user objects, they are not very user-friendly and also don't provide any additional features to help manage the multiple changes that each object undergoes. RecoveryManager Plus, on the other hand, provides an efficient alternative for keeping your AD secure at all times. With options for scheduling backups, retaining multiple versions of the same user objects, and granular restoration capabilities, RecoveryManager Plus offers the best solution for handling user backups and restorations.
Couldn't find the feature you wanted? Raise a feature request