Home Platform Active Directory Comprehensive Protection for Critical Active Directory Data Active Directory (AD) and Entra ID control user access to network resources, making them prime targets for attackers. Protect your AD from accidental deletion, corruption, and attacks. Request demo View the infographic Active Directory Demo Video Benefits Features Analyst Report Resources FAQs Start a Free Trial demo VIDEO Coming Soon: Automated Forest Recovery for Active Directory Discover how Commvault Cloud for Active Directory Enterprise Edition brings a new level of resilience to AD with automated, rapid recovery of the AD forest after corruption or attack to help maintain continuous business. Watch now how we do it Dedicated protection for Microsoft AD and Entra ID Simple cloud deployment, enterprise scalability, extended storage and retention – built in. Comprehensive coverage Automated and frequent daily backups of attributes and objects. Precision response Fast, granular and accurate recovery of missing, damaged or misconfigured objects. Deep security insights Real-time insights into at-risk datasets, abnormal behaviors, and suspicious events. Multi-layered defense Layered protection, with immutable data copies, and virtually air-gapped ransomware protection. Single-solution management Protection across Microsoft AD and Entra ID environments – from a comprehensive management dashboard. Hassle-free administration Fast and precise searching and preservation of data for the support of regulatory compliance. Active Directory Backup Stay resilient and recoverable Commvault® Cloud helps provide continuous availability of Active Directory services to minimize downtime and maintain business operations. Hybrid Coverage Daily backups of attributes and objects Get dedicated coverage for AD objects and attributes: group policy objects, user groups, conditional access policies, roles, and more. Rapid Investigation Deep security insights Interactive comparisons of various points in time – with visibility to identify mistaken or malicious changes to domain or tenants. Cyber Recovery Get your business back online Quick recovery of deleted objects and roll-back of overwritten attributes across the entire directory. Analyst Report Analyzing the economic benefits of cyber resilience Commvault® Cloud Research from ESG demonstrates that a cloud-based solution like Commvault® Cloud can not only guarantee long-term data resilience and protection, but also help companies, like yours, achieve long-term goals. Our Reach Supporting more than 100,000 companies “We used to manually engineer redundancy to avoid data loss. Commvault provides the needed flexibility and granularity for fast restores.” Greg Robinson Senior Systems Engineer, Allina Health “Commvault gives us confidence that our data is safe, and our important services can be up and running quickly.” Paul Vries IT Consultant, Bilthoven Biologicals “With a long retention strategy, our cloud storage costs were accelerating quickly. Commvault Cloud gave us a way to dramatically lower those costs and keep them predictable, while simultaneously providing us with the data resilience needed to keep our business running.” Jacob Gsoedl CIO Power Integrations Datasheet Four things to consider with active directory protection Explore the four things to consider when keeping your Active Directory data secure and protected. Learn more Read More Additional resources Explore more of our resources View all resources solution brief Active Directory protection Understand how to solve your top challenges so you can safeguard Microsoft AD and Entra ID data from a single solution. infographic Active Directory Security Health Check Is your Active Directory secure? Take the guesswork out with our Active Directory Security Health Check. Discover vulnerabilities and strengthen your defenses. solution brief Cyber recovery for your SaaS app data Protecting SaaS app data is your responsibility, learn how you don’t have to do it alone. Frequently Asked Questions Why is it essential to protect Active Directory? Active Directory is a significant target for cybercriminals, especially ransomware. It plays a central role in managing identities and access to network resources, making it a lucrative entry point. Active Directory is a complex system that often has overprivileged accounts, misconfigured security policies, and other vulnerabilities that adversaries can exploit.• 95 million Active Directory accounts are attacked daily• 1.2 million Entra ID accounts are compromised each month• 68% of Active Directory attacks involve ransomware• Attacks can breach Active Directory in about 16 hoursShould an attacker delete or alter Active Directory data, the importance of having recent backups cannot be overstated. These backups allow for a swift restoration to the last known good configuration, effectively removing any vestiges of an attack. What key benefits does Backup & Recovery for Active Directory deliver? Consistent Backup for Peace of Mind• Leave complex backup scripts behind with purpose-built data protection. Enable frequent backups to roll back damaging or unwanted changes in the face of accidental deletion, errant scripts, cybersecurity threats, and other emergencies. Fast, Granular Recovery• Flexible, granular recovery allows administrators to quickly recover only the missing, damaged, or misconfigured object attributes and get your business systems or users back online quickly without fully restoring an entire Active Directory environment. Easy Management• Protect Active Directory in hybrid environments with a single enterprise-grade solution for use with on-premises or cloud applications like Microsoft Office 365 and Microsoft Dynamics 365. Simple SaaS delivery means no-hassle deployment, no backup infrastructure to manage, and automatic updates. How is Active Directory licensed? Active Directory Backup covers both Active Directory and Entra ID from a single platform. The licenses you purchase cover both workloads. If you have both Active Directory and Entra ID, you are required to license the higher of the two enabled user counts: • The total number of enabled user accounts in all Active Directory domains managed with the product.• The total number of enabled user accounts in all Entra ID tenants managed with the product. • Once you have purchased sufficient licenses based on the higher of the two enabled user accounts listed above, those licenses allow the full functionality for protecting both Active Directory and Entra ID. It’s important to note that no separate licenses are required, simplifying the process further. When you subscribe to Active Directory Backup, are there any capacity limitations? Active Directory has no capacity limitations. Your backup data will be retained unlimitedly, and you can sign up for a free trial to get started today! Do I have to pay for storage separately? For AD backups, cloud storage options are BYOS in Azure or Air Gap Protect. If you store backups in Air Gap Protect, you must license the Air Gap Protect storage capacity separately. AD Backup sizes are relatively small compared to other workloads protected by Commvault Cloud. The most accurate way to estimate the size of the backup and storage needed is to look at the size of the NTDS.dit file (the AD database) on one of your domain controllers – this will be the maximum size of a full backup with Commvault Cloud. Start a trial Achieve continuous business with Commvault Experience the platform that delivers true cloud cyber resilience. Start a free trial