--- title: "Active Directory and Entra ID | Commvault " type: "WebPage" language: "en-US" url: "https://www.commvault.com/platform/active-directory" date: "2023-10-10T15:38:26-04:00" modified: "2026-04-27T12:20:40-04:00" description: "Rapidly recover Active Directory and Entra ID environments from ransomware, operational mistakes, and insider threats to keep your business moving. " image: "https://www.commvault.com/ogimage/fb/4441/" breadcrumbs: - name: "Commvault Home" url: "https://www.commvault.com/" - name: "Platform" url: "https://www.commvault.com/platform" - name: "Active directory" --- # Active Directory - [Home](/) - Capabilities - Active Directory ## Active Directory and Entra ID Resilience When identity goes down, we can help bring it back fast. Rapidly recover Active Directory and Entra ID environments from ransomware, operational mistakes, and insider threats to keep your business moving. - [Learn more](https://www.commvault.com/resources/ebook/securing-active-directory-against-cyber-threats) - [Get a personalized demo](/request-demo) ![](/wp-content/uploads/2025/08/Capability_ActiveDirectory_Hero_650x650.jpg) --- - [Overview Video](#overview) - [Benefits](#Benefits) - [Features](#Features) - [Pricing](#Pricing) - [Resources](#Resources) - [FAQs](#FAQs) [Start a free trial](/trials/active-directory-backup) --- overview video ## Automate and Accelerate Active Directory Forest Recovery See how Commvault facilitates the restoration of clean, trusted Active Directory services to help enable secure and scalable access. [Watch now](https://www.commvault.com/resources/demos/demo-automated-forest-recovery-for-active-directory) Play Video ![Video thumbnail](https://play.vidyard.com/eNitMbwg1RhNwyeaLSMvig.jpg) --- how we do it ## Help keep your identity infrastructure resilient and restore access fast. Automated protection and recovery of AD and Entra ID environments. --- --- ## Comprehensive coverage Automated and frequent daily backups of attributes and objects. --- ## Automated AD forest recovery Automate and accelerate recovery of the AD forest to a pre-attack state. --- ## Granular object and attribute-level restore Fast, granular, and accurate recovery of missing, damaged, or misconfigured objects and attributes. Restore users, groups, app registrations, roles, and more. --- ## Interactive comparison reporting Identify all changes in the AD domain or Entra ID tenant and recover affected data quickly, directly from the report. --- ## Recover AD to Clean VM Help prevent the reintroduction of malware by restoring compromised forests onto a new, trusted operating system. --- ## Unified protection for hybrid identity environments Protect Active Directory and Entra ID in hybrid environments with a single, unified solution. --- Commvault Cloud Backup & Recovery for AD ## Strengthen your identity foundation Commvault® Cloud helps provide continuous availability of Active Directory services to minimize downtime and maintain business operations. --- Automate AD forest recovery ## Reduce the time to recover AD after cyberattacks Accelerate recovery and minimize downtime with automated forest-level recovery for AD. Interactive forest topology visualization and auto-generated runbooks simplify and guide the recovery process, enhancing accuracy and control. ![](/wp-content/uploads/2025/08/AD-topology-2-gray-frame-scaled.png) --- Accelerate investigations ## Quickly identify and roll back changes to the directory Interactive comparisons identify all changes in the domain between two points in time, allowing you to quickly recover deleted objects or roll back overwritten attributes across the entire directory, right from the report. [Watch the demo](https://www.commvault.com/resources/video/commvault-cloud-backup-recovery-for-active-directory-demo-video) ![](/wp-content/uploads/2025/08/Capability-Active-Directory_Security-insights_1088x870.png) --- Enhance cyber readiness ## Support frequent disaster and cyber recovery testing Regularly practice your AD disaster and cyber recovery plans in a non-production lab environment during the good times to prepare for the bad times. ![](/wp-content/uploads/2025/08/Runbook-progress-with-gray-frame-scaled.png) --- Backup & Recovery for Active Directory pricing ## Active Directory | | Standard | Enterprise | |---|---|---| | | Starting at $0.75 / enabled user / month | Starting at $1.25 / enabled user / month | | Recover AD users, groups, computers, OUs, contacts, sites, and configuration | Yes | Yes | | Interactive, domain-wide comparisons of all objects and attributes | Yes | Yes | | Protect Group Policies, including settings, links, and security | Yes | Yes | | Rollback overwritten attributes across thousands of objects at once | Yes | Yes | | Recover Entra ID users, groups, licenses, conditional access, and role assignments | Yes | Yes | | Automated forest recovery for AD | No | Yes | | Simplify recovery planning with visual AD topology | No | Yes | | Automated forest recovery for AD | No | Yes | | Orchestrate the 50 – 100+ steps involved including AD restores, DC promotions, and critical AD hygiene tasks | No | Yes | | Support regular disaster recovery testing with interactive runbooks | No | Yes | --- eBook ## Protecting the Crown Jewels: Securing Active Directory Against Cyber Threats Your organization’s digital identity infrastructure is under siege, and traditional backup and recovery methods for AD are no longer sufficient. Learn why these approaches fall short and discover how you can strengthen true identity resilience with Commvault. [Learn more](https://www.commvault.com/resources/ebook/securing-active-directory-against-cyber-threats) ![](/wp-content/uploads/2025/08/Campaign_Compete-Hero-2_650x650.jpg) --- Our Reach ## Supporting more than 100,000 companies --- - ![](/wp-content/uploads/2025/08/logo__adidas.png) - ![](/wp-content/uploads/2025/08/logo__sony.png) - ![](/wp-content/uploads/2025/08/astra-zeneca-case-study.png) - ![](/wp-content/uploads/2025/08/logo__merck.png) - ![](/wp-content/uploads/2025/08/logo__randstad.png) - ![](/wp-content/uploads/2025/08/logo__panasonic.png) --- > “We used to manually engineer redundancy to avoid data loss. Commvault provides the needed flexibility and granularity for fast restores.” > > Greg Robinson > > Senior Systems Engineer, Allina Health > “Commvault gives us confidence that our data is safe, and our important services can be up and running quickly.” > > Paul Vries > > IT Consultant, Bilthoven Biologicals > “With a long retention strategy, our cloud storage costs were accelerating quickly. Commvault Cloud gave us a way to dramatically lower those costs and keep them predictable, while simultaneously providing us with the data resilience needed to keep our business running.” > > Jacob Gsoedl > > CIO, Power Integrations --- Whitepaper ## Active Directory forest recovery Active Directory forest recovery is foundational to maintaining continuous business after a cyberattack. This whitepaper provides an in-depth overview of AD forest recovery, highlighting essential considerations for planning your recovery strategy. [Learn more](https://www.commvault.com/resources/whitepaper/active-directory-forest-recovery%20) ![](/wp-content/uploads/2025/08/woman-on-laptop-in-server-room-square.png) --- Additional resources ## Explore more of our resources [View all resources](/resources) --- ![](/wp-content/uploads/2025/08/Abstract-multi-floor-building-Crocus-Thumbnail.png) datasheet ## Protect Active Directory from data loss threats Dive into the details of how Commvault Cloud helps protect and rapidly recover Active Directory from threats in this datasheet. [Read more about Protect Active Directory from data loss threats](https://www.commvault.com/resources/datasheet/backup-and-recovery-for-microsoft-active-directory) ![](/wp-content/uploads/2025/08/learn_image_1.jpg) Solution brief ## Active Directory protection Understand how to solve your top challenges so you can safeguard Microsoft AD and Entra ID from a single solution. [Learn more about Active Directory protection](https://www.commvault.com/resources/solution-brief/commvault-active-directory-backup) ![](/wp-content/uploads/2025/08/Capability_ActiveDirectory_Hero_650x650.jpg) Infographic ## Securing the core Failing to safeguard AD enables attackers with a centralized location to control and sever access to critical business assets. Discover immediate steps you can take to enable its protection and recoverability. [Learn more about Securing the core](https://www.commvault.com/resources/infographic/active-directory-vulnerabilities-and-how-to-fix-them) --- ## Frequently Asked Questions Why is it essential to protect Active Directory? Active Directory is a significant target for cybercriminals, especially ransomware. It plays a central role in managing identities and access to network resources, making it a lucrative entry point. Active Directory is a complex system that often has overprivileged accounts, misconfigured security policies, and other vulnerabilities that adversaries can exploit. - 95 million Active Directory accounts are attacked daily - 68% of Active Directory attacks involve ransomware - Attacks can breach Active Directory in about 16 hours Should an attacker delete or alter Active Directory data, the importance of having recent backups cannot be overstated. These backups allow for a swift restoration to the last known good configuration, helping to remove any vestiges of an attack. *¹ Firmus, Active Directory Security: Fortifying the Heart of Your IT Infrastructure, Feb 2025* *² Sophos, The 2023 Active Adversary Report for Tech Leaders* What key benefits does Backup & Recovery for Active Directory deliver? **Automated AD Forest Recovery** Automated forest-level recovery for AD that includes the auto-generation of custom runbooks and point-and-click simplicity to recover complex AD environments in hours, rather than days or weeks. **Interactive Domain Comparisons** Compare all changes in the AD domain or Entra ID between two points in time, quickly identify the data that needs to be recovered or reverted, and restore it quickly, directly from the report. **Fast, Granular Recovery** Flexible, granular recovery allows administrators to quickly recover only the missing, damaged, or misconfigured object attributes and get business systems or users back online quickly without fully restoring an entire Active Directory environment. **Unified protection for AD and Entra ID** Protect hybrid Active Directory and Entra ID environments with a single enterprise-grade solution for use with on-premises or cloud applications like Microsoft 365, Microsoft Dynamics 365, endpoints, and VMs. **SaaS-based control plane for recovery when AD is down** Access your recovery console anytime, even during catastrophic events like ransomware attacks, thanks to Commvault’s SaaS-delivered control plane that operates independently of your Active Directory environment. How is Active Directory licensed? Active Directory Backup covers both Active Directory and Entra ID from a single platform. The licenses you purchase cover both workloads. If you have both Active Directory and Entra ID, you only need to license the total number of enabled user accounts in the Active Directory domains managed with the product. Once you have purchased sufficient licenses, they allow the full functionality for protecting both Active Directory and Entra ID. It’s important to note that no separate licenses are required, simplifying the process further. When you subscribe to Active Directory Backup, are there any capacity limitations? Active Directory has no capacity limitations. You get unlimited retention of your backup data, and you can sign up for a free trial to [get started today](/trials/active-directory-backup)! Do I have to pay for storage separately? For AD backups, cloud storage options are BYOS in Azure or AirGap Protect. If you store backups in AirGap Protect, you must license the AirGap Protect storage capacity separately. AD Backup sizes are relatively small compared to other workloads protected by Commvault Cloud. --- Ready to get started? ## Experience Commvault Cloud for Active Directory Request a demo today [Guided demo](/request-demo) ![](/wp-content/uploads/2025/08/FooterPromoImagesTech-Gal-2-1.png)