Quest® On Demand Recovery cloud application lets you perform the following operations:
- Backup Microsoft Entra ID and Microsoft 365 users, groups, contacts, service principals, device information, Conditional Access policies, navigation properties, and Application Proxy settings.
- Support for Microsoft Entra B2C tenants.
- Restore Microsoft Entra ID and Microsoft 365 users, groups, service principals, devices, Conditional Access policies, inactive mailboxes for permanently deleted users, and Application Proxy settings. The application can process two types of Microsoft 365 groups: Microsoft 365 groups and security groups. Group membership and ownership is restored for both types of groups.
- Backup and restore multifactor authentication settings.
- View differences between the selected backup and live Microsoft Entra ID or Microsoft 365 and revert unwanted changes in the Differences report.
- Configure integration with Quest Recovery Manager for Active Directory to restore on-premises Active Directory objects.
The objects can be selected in a backup and then restored to Microsoft Entra ID or Microsoft 365 without affecting other objects or attributes. Using the granular restore, objects that were accidentally deleted or modified can be recovered in a few minutes.
On Demand Recovery can be started from Quest On Demand single SaaS command point. For more information about Quest On Demand, see the Quest On Demand product documentation.
To access On Demand, you need to provide On Demand credentials or use your existing Quest Software account. For more details, see Signing up for Quest On Demand in the On Demand Global Settings User Guide.
The following sections describe how to configure and work with On Demand Recovery:
- On Demand Recovery Module Overview
- Before You Start
- Sign up for Quest On Demand
- Adding a Microsoft Entra Tenant
- Required Permissions
- Microsoft 365 Tenant Requirements (Mailbox Data Protection)
- Access Control
- Working with On Demand Recovery
- Backup Unpacking
- Restoring Objects
- Restoring Passwords
- Restoring Directory Roles and Application Roles
- Restoring Users
- Restoring Groups
- Restoring Service Principal Objects
- Restoring Applications
- Restoring Application Proxy Settings
- Restoring Multifactor Authentication Settings
- Restoring Group Licenses
- Restoring Devices
- Restoring Conditional Access Policies
- Backup and Restore of Tenant Level Settings
- Backup and Restore of Administrative Units
- Integration with Recovery Manager for Active Directory
- Working with Inactive Mailboxes
- Hybrid Connection Widget
- Working with Inactive Mailboxes
- Hybrid Connection Port and Protocol Requirements
- Restoring Email Address or Phone for Self-Service Password Reset
- Reporting
- Advanced Search
- How does On Demand Recovery Handle Object Attributes?
- What is Not Protected by Microsoft Entra Connect but Can Be Restored by On Demand Recovery?