On Demand Recovery Product Notification

On Demand Recovery Customer Notification – Multifactor Authentication Settings and Inactive Mailbox Features Restored

This is a notification of the restoration of On Demand Recovery features to back up and restore multifactor authentication settings for Microsoft Entra users and the ability to back up related data to reconnect an inactive mailbox to a restored user. These features were temporarily deprecated on July 16th, 2024 due to a functional outage of the interface used for these features. The features have been updated and functionality is now restored.

What is changing and why?  

On Demand Recovery has changed the interface used for the features to backup and restore multifactor authentication settings for Microsoft Entra users and the ability to back up required data to reconnect an inactive mailbox to a restored user.

For the restoration of multifactor authentication settings and the ability to back up related data to reconnect an inactive mailbox to a restored user, the restore features are available from the Unpacked Objects tab only. Restoring from the Differences reporting tab is still deprecated.

This change was required due to a functional outage and deprecation of the previous interface used. This was confirmed by our Cloud Service Provider.  

Action Required:

To backup multifactor authentication settings and required data to reconnect an inactive mailbox to a user, service credentials are required. For continued backups, please ensure service credentials are provided.

To specify service credentials for backup, follow these steps:

1. Select Manage Backups, select the required tenant, and click Edit.  

2. Select the options Backup MFA settings and Backup data related to inactive mailboxes. Provide the username and password for the service credentials and click Save. The account must have the Global Reader role assigned in Microsoft Entra ID.  

To restore multifactor authentication settings and inactive mailboxes for a user from the Object View, service credentials are also required. To specify service credentials for restore, follow these steps:

1. Select Manage Restores and select the required tenant.

2. Provide the username and password for service credentials and click Save. For MFA settings, the account must have the Privileged Authentication Administrator role assigned in Microsoft Entra ID.


For more information, please contact Quest Support.