At Commvault, we understand that Active Directory sits at the core of your identity and access management infrastructure and is a primary attack vector for bad actors. On December 1, 2023, we are taking the first of several steps towards providing expanded protection for this essential asset in the form of enhanced object and attribute level recovery for both Active Directory and Azure AD (now Microsoft Entra ID).
The key new features released on December 1 will make it easier for you to identify the scope of a disaster and recover or roll back from it as quickly as possible. The enhanced protection includes:
- Accelerated recovery of deleted and changed objects by comparing all objects and attributes between backups.
- Recovery of Group Policy Objects, including their security, links, and settings.
- Recovery of Entra ID conditional access policies and roles.
- Rollback of overwritten or corrupted attributes across many objects at once.
- More frequent backups of AD, ensuring it is always possible to restore a recent copy.
To ensure the highest level of AD protection, we will also transition Commvault® Cloud Backup & Recovery for Active Directory from a free subscription to a paid offering starting December 1, 2023.
If you are presently protecting your Active Directory or Entra ID environment with Backup & Recovery for Active Directory, you will automatically gain access to the enhanced capabilities described above at no additional cost until June 1, 2024. No action is required on your part, and your scheduled backups will not be disrupted in any way. Starting on December 1, you will have complete access to the expanded functionality in appreciation of your ongoing business.
Si vous ne protégez pas actuellement Active Directory, vous pouvez configurer la sauvegarde d’un domaine Active Directory ou d’un tenant Entra ID avant le 1er décembre 2023. Vous bénéficierez alors automatiquement d’un accès gratuit à ces fonctionnalités avancées jusqu’au 1er juin 2024, sans aucune condition. Pour commencer dès aujourd’hui à protéger Active Directory et bénéficier de ces fonctionnalités de protection améliorées jusqu’en juin, ouvrez le portail Commvault et cliquez sur « Configurer » sous la vignette Active Directory dans le catalogue de services.
Après le 1er juin 2024, il sera nécessaire de souscrire un abonnement pour continuer à bénéficier du service Active Directory.
Comparaisons interactives entre domaines au sein d’AD
To make an informed decision as to what objects to restore or roll back, you need a complete report of all changes that have recently occurred in AD. Our new comparisons do just this – they compare all objects and attributes from a backup of your choosing to the current state of AD or another selected backup – and itemize any objects that were deleted or whose attributes have changed. Rather than doing the investigative work yourself, our comparisons will tell you exactly what happened in AD and allow you to interact with the report to search and filter to narrow the results to the objects that require recovery. Most importantly, you can restore the objects directly from the report, eliminating the need to switch between different views and workflows and minimizing downtime or disruption.
Comparisons can automatically scan for all changes in AD between two points in time or focus on particular areas in AD to speed up results. The results for every comparison are saved so you and your colleagues can review them anytime.
Related Articles:
- Best Practices for Protecting SaaS Applications for Recovery:https://www.commvault.com/blogs/best-practices-for-protecting-saas-applications-for-recovery
- Commvault Cloud : une nouvelle plateforme, le même excellent service SaaS :https://www.commvault.com/blogs/commvault-cloud-saas-protection
- Unleashing SaaS-Delivered Flexibility: The Power of Cloud-Based Solutions:https://www.commvault.com/blogs/unleashing-saas-delivered-flexibility