Which of the following methods will successfully enable your recycle bin on a new Active Directory installation?

For the best web experience, please use IE11+, Chrome, Firefox, or Safari

• Resources

• Blogs

  • IT Industry Insights
  • Quest Solution Blogs
    • Data Protection
    • Data Management
    • Microsoft Platform Management
    • Performance Monitoring
    • Unified Endpoint Management
    • IT Ninja
    • Toad World Blog

• Forums

• • United States (English)
  • Brazil (Português)
  • China (中文)
  • France (Français)
  • Germany (Deutsch)
  • Japan (日本語)
  • Mexico (Español)

• • Account Settings

Products

Products

By Product Category

Solutions

Solutions

• Automate backup & disaster recovery

  Restore business operations, data integrity and customer trust in minutes or hours instead of weeks or months

• Become data driven

  Empower enterprise stakeholders to use data assets strategically for data operations, data protection and data governance

• Gain comprehensive data protection

  Protect and recover all your systems, applications and data while reducing backup storage costs

• Improve your cybersecurity posture

  Achieve identity-centric cybersecurity to protect the people, applications and data that are essential to business

• Migrate & consolidate Microsoft workloads

  Conquer your next migration (now and in the future) by making it a non-event for end users

• Protect and secure your endpoints

  Discover, manage and secure evolving hybrid workforce environments

• Secure Active Directory and Microsoft 365

  Mitigate risk with attack path management, threat detection and disaster recovery

About

• Why Quest
• Leadership
• Customer Stories
• News
• Careers
• Contact Us

Back up Active Directory and restore down to the object and attribute levels. Quest® Recovery Manager for Active Directory is like an insurance plan for your AD environment. It not only enables you to back up Active Directory (AD) at the object and attribute level, but also helps you pinpoint changes to your AD environment at the same granular level. Know what happened, who is impacted and what to roll back. Quickly compare a backup to pinpoint differences at the object level and instantly recover.

Nav Menu

02:43

Mistakes happen. Your AD environment can be damaged when an administrator accidentally deletes something or makes a mass update that goes wrong. This can negatively impact your productivity for hours or even days, and as a result, cost your company revenue and its reputation. When this happens, you need a disaster recovery plan and Active Directory backup and restore tools to get you back up and running quickly. Recovery Manager for Active Directory helps you do exactly that, all while reducing recovery time and costs to reduce user impact.

Key Benefits

Reduce downtime

Restore any object in AD and get affected users back to work quickly without restarting domain controllers.

Accelerate recovery

Quickly pinpoint deleted or changed objects or attributes.

Granular restore

Restore only the required attributes without restarting domain controllers.

55%

Of data breaches caused by insiders

95M

AD accounts under attack daily

14sec

Another ransomware attack occurs

Comprehensive recovery

Restore any object in AD, including users, attributes, organizational units (OUs), computers, subnets, sites, configurations and Group Policy Objects (GPOs). Recovery Manager not only helps you back up Active Directory faster, but also significantly reduces downtime so you can get affected users back to work quickly without restarting domain controllers. You’ll be able to eliminate downtime as well as negative impact on network users.

Hybrid AD and Azure AD recovery

Whether you’re running a hybrid AD environment with Azure AD Connect, or have cloud-only objects or attributes that aren’t synchronized, it’s critical for security and compliance purposes that you have Active Directory backup and restore tools to ensure the availability and integrity of both on-premises AD as well as Azure AD. Quest On Demand Recovery provides a single recovery dashboard to differentiate hybrid and cloud-only objects, run difference reports between production and real-time backups, and restore all changes, whether on premises or in Azure AD.

Integration with IT Security Search

Use IT Security Search to discover which AD objects have changed, including before and after values, and restore them to a previous state with a few clicks.

Comparison reporting

Highlight changes made since the last Active Directory backup by comparing the online state of AD with its backup or by comparing multiple backups. Accelerate recovery by quickly pinpointing deleted or changed objects or attributes. And with Change Auditor you can easily identify who made the changes.

Recovery console fault tolerance

Share persistent configuration data between several instances of your recovery consoles so that you can quickly resume the last restore operation in case it was unexpectedly interrupted.

Recovery roadmap

Generate a detailed recovery process report. This overview of every recovery stage and operation allows you to gain a better understanding and more control of every aspect of Active Directory backup and recovery.

Delegated recovery

Assign restore tasks to specific users to cut down on recovery timelines and senior-level resource requirements.

Amway

We have peace of mind, knowing that our global data is protected and safe with Recovery Manager for Active Directory, even though we haven’t had to use it for a while.

Marc Denman Senior Systems Support Specialist, Amway Read Case Study

Tour

Intuitive interface

Delegated restores

Restore any AD object

Attribute change rollback

Comparison reporting

PowerShell support

Intuitive interface

Back up Active Directory and recover from inadvertent changes to AD data using an intuitive interface.

Specifications

Hardware and Software Requirements

Before installing Recovery Manager for Active Directory, ensure that your system meets the following minimum hardware and software requirements.

NOTE

• Recovery Manager for Active Directory supports only IPv4 or mixed IPv4/IPv6 networks.
• Recovery Manager for Active Directory Forest Edition can backup and restore domain controllers that are running on virtual machines in Amazon Web Services (AWS) or Microsoft Azure. Note that such domain controllers cannot be restored with the Bare Metal Active Directory Recovery method because there is no way to boot them from an ISO image.

Processor

Minimum: 1.4 GHz

Recommended: 2.0 GHz or faster

Memory

Minimum: 2 GB

Recommended: 4 GB

These figures apply only if the Active Directory domains managed by Recovery Manager for Active Directory include 1 million objects or less. Increase RAM size by 512 MB for every additional 1 million objects.

Hard Disk Space

Full installation including the prerequisite software: 2.7 GB of free disk space

In case all the prerequisite software is already installed: 260 MB of free disk space

NOTE Additional storage space is required for a backup repository, at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40MB for the transaction log files.

Operating System

• Machine that hosts the Recovery Manager for Active Directory console must have same or higher version of Windows operating system than the processed domain controllers. Otherwise, the online compare and object search in a backup during the online restore operation may fail.
• 32-bit operating systems are not supported.

Installation

• Microsoft Windows Server 2022, 2019, 2016, 2012 R2, 2012
• Microsoft Windows 11, 10 x64, 8.1 x64

Targets for backup, restore, or compare operations

• Microsoft Windows Server 2022, 2019, 2016, 2012 R2, 2012 (including Server Core installation)

The Windows Server Backup feature is supported for Windows Server 2012 R2 or higher. Make sure that the feature is installed on all domain controllers in your environment.

Microsoft .NET Framework

Microsoft .NET Framework version 4.8 or higher

Microsoft SQL Server and its components

Microsoft SQL Server versions

Microsoft SQL Server is required for the following Recovery Manager for Active Directory features: Comparison Reporting and Forest Recovery Persistence.

Supported SQL Server versions:

• Microsoft SQL Server 2019, 2017, 2016, 2014 and 2012 (Enterprise, Business Intelligence, Standard, Express, Web, or Developer Edition)

Microsoft SQL Server components

Microsoft System CLR Types for SQL Server 2012

If this component is not installed, it will be installed automatically by the RMAD setup.

Microsoft SQL Server Reporting Services

To display reports, Recovery Manager for Active Directory can integrate with Microsoft SQL Server Reporting Services (SRSS) 2016, 2017, 2019 and 2022.

Microsoft Operations Manager

Supported Microsoft Operations Managers for the RMAD Management Pack for Microsoft Center Operations Manager (SCOM):

• Microsoft System Center Operations Manager 2022, 2019, 2016, 2012 R2 and 2012

Microsoft Windows PowerShell

Microsoft Windows PowerShell version 5.0 or later

Integration with Change Auditor for Active Directory

Supported versions of Change Auditor for Active Directory: from 6.x to 7.x.

If any prerequisite software is not installed, the Setup program automatically installs it for you before installing Recovery Manager for Active Directory. If the prerequisite software to be installed is not included in this release package, it is automatically downloaded.

Continuous recovery: From version 10.0.1, Recovery Manager for Active Directory together with Change Auditor can restore the deleted object(s) and continuously restores the last change (if any) that was made to the object attributes after creating the backup, using the data from the Сhange Auditor database.

Antivirus software that is supported for backup antimalware checks

The anti-virus checks are performed on the Forest Recovery Console machine running Windows Server 2016 or higher by means of antivirus software installed on the machine.

• Microsoft Defender
• Symantec Endpoint Protection 14.x
• Broadcom Endpoint Security (former name: Symantec Endpoint Protection 15)

Supported server management systems

• Integrated Dell Remote Access Controller (iDRAC) 8 and 9
• HP ProLiant iLO Management Engine (iLO) 3, 4 and 5
• VMware vCenter/ESX Server 6.0, 6.5, 6.7 and 7.0
• Microsoft Hyper-V Server 2012 or higher

Forest Recovery Agent Requirements

Memory

1 GB (2 GB recommended)

Hard disk space

2 GB or more

Operating System

One of the following operating systems:

• Microsoft Windows Server 2022, 2019, 2016, 2012 R2, 2012 (including Server Core installation)

Prerequisite software

Microsoft Windows Installer 4.5 or later must be installed.

Secondary Storage Requirements

Secure Storage Server

• Operating system: Microsoft Windows 2016 or higher
• A stand-alone server to be used as your Secure Storage server. This server should be a workgroup server and not joined to an Active Directory domain.
• An account that will be used to deploy the Storage Agent on the Secure Storage server. This account must also be a local Administrator on the Secure Storage server.
• Physical access to the Secure Storage server. Once the server is hardened access with regular methods will be disabled.
• Sufficient storage space on the Secure Storage server for all backup files. For one backup file, the space required is at least the size of the backed-up Active Directory database file (Ntds.dit) and the SYSVOL folder plus 40MB for the transaction log files.

Cloud Storage

• Internet access available on the Recovery Manager for Active Directory console. A standard outbound HTTPS port 443 is used to upload data to Azure Blob and Amazon Web Services S3 Storage.
• Azure and Amazon Web Services subscription(s) to create and manage Azure and Amazon Web Services S3 Storage accounts and containers.
• A method of creating and managing Azure and Amazon S3 Storage accounts, containers, and policies for the storage account (lifecycle, immutability and replication policies).

Active Directory Virtual Lab Requirements

Microsoft System Center Virtual Machine Manager (SCVMM) 2012 R2, 2016, 2019 or 2022

Software that must be installed on the Active Directory Virtual Lab computer:

• Microsoft SCVMM Console (supplied with the SCVMM version you plan to use)

Software that is installed on the source computer by Active Directory Virtual Lab console:

• Disk2vhd v2.01 utility

For more details, see the Working with SCVMM 2012 R2 or higher section in User Guide.

Supported operating systems for the Hyper-V host:

• Microsoft Windows Server 2012 R2 or higher.

VMware vCenter/ESX Server 6.0, 6.5, 6.7 and 7.0

• Active Directory Virtual Lab does not support conversion of Windows Server 2019 Domain Controllers using VMWare ESXi/vCenter server.
• Active Directory Virtual Lab does not support VMware ESXi 6.0.
• vCenter Converter 6.2 must be installed in your environment using the Client-Server installation setup option.
• vCenter Converter must be accessible to the Active Directory Virtual Lab.
• If the TLS 1.0 protocol is disabled on vCenter Converter and vCenter servers, then switch to TLS 1.2 on the ADVL server. For more details, see the following KB articles
  • //kb.vmware.com/s/article/2145796.
  • //docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2015/2960358

Upgrade and compatibility

Recovery Manager for Active Directory Disaster Recovery Edition is upgradeable from version 10.0 or later.

FAQs - Active Directory Backup and Recovery

How to restore Active Directory objects from the Active Directory Recycle Bin?

Window Server 2008 R2 included a particularly welcome enhancement, AD Recycle Bin restore, which enables restore of some recently deleted Active Directory objects. To facilitate object recovery in cloud-based environments, Microsoft provides the Azure AD Recycle Bin, which offers similar but not identical functionality to its on-premises sibling.

The Active Directory and Azure AD Recycle Bins are extremely valuable in certain situations. If an AD object, such as a user account, has been mistakenly deleted, for instance, you might be able to restore the object from the AD or Azure AD Recycle Bin. However, the Microsoft Recycle Bin is not, and was never intended to be, a complete solution to backup Active Directory. Check out this Active Directory and Azure AD Recycle Bin FAQ and feature comparison to learn exactly what each can do and explore the key limitations.

Resources

Support and Services

Product Support

Self-service tools will help you to install, configure and troubleshoot your product.

Support Offerings

Find the right level of support to accommodate the unique needs of your organization.

Professional Services

Search from a wide range of available service offerings delivered onsite or remote to best suit your needs.

Which command creates the file required to deploy a new domain controller using the install from media option?

Which of the following cmdlets would you use to create a local user account as a member of the administrators group choose two?

Which command can be used to display SPNs?

How do I restore Active Directory?