Comprehensive Protection for Critical Active Directory Data

Active Directory is a significant target for cybercriminals, especially ransomware. It plays a central role in managing identities and access to network resources, making it a lucrative entry point. Active Directory is a complex system that often has overprivileged accounts, misconfigured security policies, and other vulnerabilities that adversaries can exploit.
• 95 million Active Directory accounts are attacked daily
• 1.2 million Entra ID accounts are compromised each month
• 68% of Active Directory attacks involve ransomware
• Attacks can breach Active Directory in about 16 hours

Should an attacker delete or alter Active Directory data, the importance of having recent backups cannot be overstated. These backups allow for a swift restoration to the last known good configuration, effectively removing any vestiges of an attack.

Consistent Backup for Peace of Mind
• Leave complex backup scripts behind with purpose-built data protection. Enable frequent backups to roll back damaging or unwanted changes in the face of accidental deletion, errant scripts, cybersecurity threats, and other emergencies.
 
Fast, Granular Recovery
• Flexible, granular recovery allows administrators to quickly recover only the missing, damaged, or misconfigured object attributes and get your business systems or users back online quickly without fully restoring an entire Active Directory environment.
 
Easy Management
• Protect Active Directory in hybrid environments with a single enterprise-grade solution for use with on-premises or cloud applications like Microsoft Office 365 and Microsoft Dynamics 365. Simple SaaS delivery means no-hassle deployment, no backup infrastructure to manage, and automatic updates.

Active Directory Backup will continue to cover both Active Directory and Entra ID from a single platform. The licenses you purchase will cover both workloads. If you have both Active Directory and Entra ID, you are required to license the higher of the two enabled user counts:  
 
• The total number of enabled user accounts in all Active Directory domains managed with the product.  
• The total number of enabled user accounts in all Entra ID tenants managed with the product.  
 
Once you have purchased sufficient licenses based on the higher of the two enabled user accounts listed above, those licenses allow the full functionality for protecting both Active Directory and Entra ID. It’s important to note that no separate licenses are required, simplifying the process further.

Active Directory has no capacity limitations. Your backup data will be retained unlimitedly, and you can sign up for a free trial to get started today!

For AD backups, cloud storage options are BYOS in Azure or Air Gap Protect. If you choose to store backups in Air Gap Protect, you will need to license the AGP storage capacity separately. AD Backup sizes are relatively small compared to other workloads protected by Commvault Cloud.  
 
The most accurate way to estimate the size of the backup and storage needed is to look at the size of the NTDS.dit file (the AD database) on one of your domain controllers – this will be the maximum size of a full backup with Commvault Cloud.