Home Platform Active Directory Cyber Resilience for Active Directory and Entra ID Rapid recovery for AD and Entra ID environments from deletion, corruption, and ransomware attacks, enabling continuous business across the enterprise. Learn more Get a personalized demo Active Directory Demo Video Benefits Features Pricing Resources FAQs Start a free trial demo VIDEO Automate and accelerate Active Directory forest recovery Discover how Commvault Cloud for Active Directory Enterprise Edition brings resilience to AD by enabling automated, rapid recovery of the AD forest after corruption or attack to help maintain continuous business. Watch now how we do it Resiliency and recovery for your critical identity services Streamlined, automated protection and recovery of Active Directory and Entra ID environments Comprehensive coverage Automated and frequent daily backups of attributes and objects. Automated forest recovery Automate and accelerate recovery of the AD forest to a pre-attack state. Granular object and attribute-level restore Fast, granular, and accurate recovery of missing, damaged, or misconfigured objects and attributes. Restore users, groups, app registrations, roles, and more. Interactive comparison reporting Compare all changes in the AD domain between two points in time, and quickly identify the data that needs to be recovered or reverted, and restore it quickly, directly from the report. AD recovery testing Regularly test and validate recovery of AD in non-production environments. Unified protection for AD and Entra ID Protect Active Directory and Entra ID in hybrid environments with a single, unified solution. Commvault Cloud Backup & Recovery for AD Stay resilient and recoverable Commvault® Cloud helps provide continuous availability of Active Directory services to minimize downtime and maintain business operations. Automate AD forest recovery Reduce the time to recover AD after cyberattacks Automate the entire forest recovery process and accelerate recovery from attacks. Visual topology views of your AD environment and customizable automated runbooks simplify and guide the recovery process for greater accuracy and control. Accelerate investigations Quickly identify and roll back changes to the directory Interactive comparisons identify all changes in the domain between two points in time, allowing you to quickly recover deleted objects or roll back overwritten attributes across the entire directory, right from the report. Watch the demo Read More Enhance cyber readiness Support frequent disaster and cyber recovery testing Easily practice your AD disaster and cyber recovery plans regularly in a non-production lab environment during the good times to prepare for the bad times. Backup & Recovery for Active Directory pricing Active Directory Standard Starting at $0.75 / enabled user / month Recover AD users, groups, computers, OUs, contacts, sites, and configuration Interactive, domain-wide comparisons of all objects and attributes Protect Group Policies, including settings, links, and security Rollback overwritten attributes across thousands of objects at once Recover Entra ID users, groups, licenses, conditional access, and role assignments Automated forest recovery for AD Simplify recovery planning with visual AD topology Orchestrate the 50 – 100+ steps involved including AD restores, DC promotions, and critical AD hygiene tasks Support regular disaster recovery testing with interactive runbooks Volume discounts may apply for quantities over 750 users Enterprise Starting at $1.25 / enabled user / month Recover AD users, groups, computers, OUs, contacts, sites, and configuration Interactive, domain-wide comparisons of all objects and attributes Protect Group Policies, including settings, links, and security Rollback overwritten attributes across thousands of objects at once Recover Entra ID users, groups, licenses, conditional access, and role assignments Automated forest recovery for AD Simplify recovery planning with visual AD topology Orchestrate the 50 – 100+ steps involved including AD restores, DC promotions, and critical AD hygiene tasks Support regular disaster recovery testing with interactive runbooks Volume discounts may apply for quantities over 750 users Recover AD users, groups, computers, OUs, contacts, sites, and configurationInteractive, domain-wide comparisons of all objects and attributesProtect Group Policies, including settings, links, and securityRollback overwritten attributes across thousands of objects at onceRecover Entra ID users, groups, licenses, conditional access, and role assignmentsAutomated forest recovery for ADSimplify recovery planning with visual AD topologyOrchestrate the 50 – 100+ steps involved including AD restores, DC promotions, and critical AD hygiene tasksSupport regular disaster recovery testing with interactive runbooks eBook Protecting the Crown Jewels: Securing Active Directory Against Cyber Threats With Active Directory at the center of secure authentication and services, protecting and securing this data is critical. Discover how rapid recovery of your Active Directory can enhance your organization’s cyber resilience. Our Reach Supporting more than 100,000 organizations “We used to manually engineer redundancy to avoid data loss. Commvault provides the needed flexibility and granularity for fast restores.” Greg Robinson Senior Systems Engineer, Allina Health “Commvault gives us confidence that our data is safe, and our important services can be up and running quickly.” Paul Vries IT Consultant, Bilthoven Biologicals “With a long retention strategy, our cloud storage costs were accelerating quickly. Commvault Cloud gave us a way to dramatically lower those costs and keep them predictable, while simultaneously providing us with the data resilience needed to keep our business running.” Jacob Gsoedl CIO Power Integrations Whitepaper Active Directory forest recovery Active Directory forest recovery is foundational to maintaining continuous business after a cyberattack. This whitepaper provides an in-depth overview of AD forest recovery, highlighting essential considerations for planning your recovery strategy. Learn more Read More Additional resources Explore more of our resources View all resources datasheet Protect Active Directory from data loss threats Dive into the details of how Commvault Cloud protects and accelerates the recovery of Active Directory from threats in this datasheet. Solution brief Active Directory protection Understand how to solve your top challenges so you can safeguard Microsoft AD and Entra ID from a single solution. Infographic Securing the core Failing to safeguard AD enables attackers with a centralized location to control and sever access to critical business assets. Discover immediate steps you can take to enable its protection and recoverability. Frequently Asked Questions Why is it essential to protect Active Directory? Active Directory is a significant target for cybercriminals, especially ransomware. It plays a central role in managing identities and access to network resources, making it a lucrative entry point. Active Directory is a complex system that often has overprivileged accounts, misconfigured security policies, and other vulnerabilities that adversaries can exploit.• 95 million Active Directory accounts are attacked daily• 68% of Active Directory attacks involve ransomware• Attacks can breach Active Directory in about 16 hoursShould an attacker delete or alter Active Directory data, the importance of having recent backups cannot be overstated. These backups allow for a swift restoration to the last known good configuration, helping to remove any vestiges of an attack.¹ Firmus, Active Directory Security: Fortifying the Heart of Your IT Infrastructure, Feb 2025 ² Sophos, The 2023 Active Adversary Report for Tech Leaders What key benefits does Backup & Recovery for Active Directory deliver? Automated AD forest recovery • Automated, rapid recovery of the AD forest to a point-in-time before an attack, allowing you to get back to business in hours rather than days or weeks. Interactive Domain Comparisons • Compare all changes in the AD domain between two points in time, quickly identify the data that needs to be recovered or reverted, and restore it quickly, directly from the report. Fast, Granular Recovery• Flexible, granular recovery allows administrators to quickly recover only the missing, damaged, or misconfigured object attributes and get your business systems or users back online quickly without fully restoring an entire Active Directory environment.Single-solution protection for AD and Entra ID• Protect Active Directory in hybrid environments with a single enterprise-grade solution for use with on-premises or cloud applications like Microsoft 365, Microsoft Dynamics 365, end points, and VMs. How is Active Directory licensed? Active Directory Backup covers both Active Directory and Entra ID from a single platform. The licenses you purchase cover both workloads. If you have both Active Directory and Entra ID, you only need to license the total number of enabled user accounts in the Active Directory domains managed with the product.Once you have purchased sufficient licenses, they allow the full functionality for protecting both Active Directory and Entra ID. It’s important to note that no separate licenses are required, simplifying the process further. When you subscribe to Active Directory Backup, are there any capacity limitations? Active Directory has no capacity limitations. You get unlimited retention of your backup data, and you can sign up for a free trial to get started today! Do I have to pay for storage separately? For AD backups, cloud storage options are BYOS in Azure or Air Gap Protect. If you store backups in Air Gap Protect, you must license the Air Gap Protect storage capacity separately. AD Backup sizes are relatively small compared to other workloads protected by Commvault Cloud. The most accurate way to estimate the size of the backup and storage needed is to look at the size of the NTDS.dit file (the AD database) on one of your domain controllers – this will be the maximum size of a full backup with Commvault Cloud. Ready to get started? Experience Commvault Cloud for Active Directory Request a demo today Guided demo