Skip to main content

Backup and restore FAQ's for Microsoft Active Directory

Updated today

Licensing and Access FAQ's

Why am I unable to see the option to enable Microsoft Active Directory data protection in my Druva console?

Ensure your account is on an Enterprise license. If you have the correct license and the option is still missing, contact the Druva sales or support team to manually toggle the feature for your account.

How does Druva calculate the license usage for my Active Directory environment?

Licensing is based on the consumption of active, unblocked, and undeleted AD user accounts within your environment.

Compatibility and Prerequisites

Which versions of Windows Server are supported for Druva Active Directory protection?

Druva supports the 64-bit versions of:

  • Windows Server 2025

  • Windows Server 2022

  • Windows Server 2019

Setup and Registration

What are the two main steps to back up Active Directory with Druva?

The process consists of two parts:

  1. Registration: Downloading, installing, and registering the AD agent and domain.

  2. Configuration: Setting your storage region, backup frequency, and windows.

Do I need to enable Cloud Key Management (KMS) immediately?

You can skip this step during the initial setup; however, scheduled backups will not start until Cloud Key Management is enabled. Druva recommends enabling it during setup to avoid job failures.


Backup Configuration

Can I change my Storage Region after the first backup?

No. The storage region cannot be changed once the first backup has run. If you need a different region than what is available, you must contact support before starting your backups.

What is a "Backup Window" and what happens if a job exceeds it?

The Backup Window is a strict time limit (defaulting to 7 hours). If a backup job does not complete within this specified timeframe, the job will fail.

How do Granular Object backups differ from System State backups?

  • Granular Object Backup: The first backup is a full backup, and all subsequent backups are incremental.

  • System State Backup: Every backup performed is a full backup.

What are the default retention periods for AD data?

  • Granular Object Backups: Currently stored forever.

  • System State Backups: Stored for 90 days.


Manual Tasks and Monitoring

How can I trigger a backup immediately without waiting for the schedule?

Navigate to the Microsoft Active Directory > Configured Domains tab and click the Backup Now button.

Where can I see the progress of a manual or scheduled backup?

Once a backup starts, Druva creates a backup job. You can view the status and specific details on the Jobs page.

Granular Restore

How does Druva help with Active Directory recovery?

Druva allows cloud administrators to restore AD data following accidental deletions or malicious activity. You can perform a complete restore of data from a specific snapshot or drill down into granular objects.

What are the basic steps to initiate a restore?

  1. Navigate to Microsoft Active Directory > All Domains > Configured Domains.

  2. Select the domain you wish to recover and click Restore.

  3. In the Restore Data dialog, select your desired snapshot (date/time) and the specific data to be recovered.

  4. Review your options and click Restore to create a job.

Where can I track the progress of my restore?

Once a restore job is initiated, you can monitor its progress by visiting the Jobs page within the Druva console.

What is an "in-place" restore?

Druva performs in-place restores, meaning it replaces the existing object in your Active Directory with the version saved in the backup.

Can I restore relationships between AD objects?

Yes. By enabling the Restore Relationships setting, Druva will restore links such as:

  • Group memberships.

  • A user's assigned manager.

  • GPOs linked to Organizational Units (OUs).

  • Users responsible for managing specific computers or OUs.

Can I restore a single user instead of the whole domain?

Absolutely. Druva supports Granular Restore. You can click on specific entities (like "Users") to see all backed-up objects. From there, you can select a specific individual and perform an in-place restore of just that object's attributes.

How do I find a specific object if I don't know which snapshot it's in?

Use the Search feature within the Restore Data dialog:

  • Filters: Search by name and "Object Type" (e.g., Users).

  • Timeframe: Use the "From" and "To" fields in the Time Modified section to search snapshots taken between specific dates.

  • Deleted Items: Check the Show only deleted records box to filter for data that is no longer present in your live environment.

Did this answer your question?