Converse agora com nosso suporte
Chat com o suporte

On Demand Recovery Current - User Guide

About On Demand Recovery On Demand Recovery Module Overview Before You Start Sign up for Quest On Demand Adding a Microsoft Entra Tenant Required Permissions Access Control Working with On Demand Recovery Backup Unpacking Restoring Objects Restoring Directory Roles and Application Roles Restoring Users Restoring Groups Restoring Service Principal Objects Restoring Applications Restoring Application Proxy Settings Restoring Group Licenses Restoring Devices Restoring Conditional Access Policies Restoring Claims Mapping Policy Backup and Restore of Tenant Level Settings Backup and Restore Administrative Units Integration with Recovery Manager for Active Directory Working with Inactive Mailboxes Hybrid Connection Port and Protocol Requirements Restoring Email Address or Phone for Self-Service Password Reset Reporting Advanced Search How does On Demand Recovery Handle Object Attributes? What is Not Protected by Microsoft Entra Connect but Can Be Restored by On Demand Recovery?

Hybrid Connection Widget

The Hybrid connection widget on the Dashboard screen shows issues with the hybrid connection. The widget state is synchronized automatically every time the page is refreshed.

When a customer does not want to configure a hybrid connection with Quest Recovery Manager for Active Directory, the corresponding connection error events can be deactivated by changing their severity from Error to Info. To do this, clear the Show hybrid restore errors if hybrid connection is not configured check box in the Configure hybrid connection dialog. For details, see Integration with Recovery Manager for Active Directory.

The widget has the following states:

  • If the hybrid connection is properly configured and works fine, the widget is green.
  • If the hybrid connection is not configured because you do not need it, the widget is gray and advises you to configure the connection. In this case, the Show hybrid restore errors if hybrid connection is not configured check box is not selected in the Configure hybrid connection dialog.
  • If the hybrid connection is not configured and the Show hybrid restore errors if hybrid connection is not configured check box is selected in the Configure hybrid connection dialog, the widget is yellow and has a warning sign.
  • If one or more console is connected to On Demand Recovery and the Show hybrid restore errors if hybrid connection check box is selected in the Configure hybrid connection dialog, the widget is yellow and has a warning sign. For more information, go to the Configure Hybrid Recovery section in Hybrid Recovery with On Demand Recovery.

Working with Inactive Mailboxes

On Demand Recovery supports the backup and restore of inactive mailboxes of hard-deleted users.

NOTE: This feature requires the following consent permissions and roles:

NOTE: If you need to restore the inactive mailbox of a hybrid user, see Restoring Mailboxes for Hybrid Users.

 

To back up and restore inactive mailboxes, you need to back up the mailbox properties associated with the user account.

To back up the linkage between users and inactive mailboxes:

  1. On the Dashboard, select Manage Backups.
  2. In the Manage backups dialog, select the tenant from the list and select Edit.
  3. In the Configure backup dialog, under Backup options, select the checkbox Back up linkage between users and inactive mailboxes.
  4. Select Save.

Restoring Mailboxes for Hybrid Users

To preserve the original cloud mailbox of hybrid users, you need to remove the newly created cloud user from Microsoft Entra ID before the restore.

To do so, in the Restore objects dialog, select the checkbox If a hybrid user account already exists in Microsoft Entra ID, delete it before the restore operation.

Hybrid user scenario
  1. A hybrid user is deactivated by the administrator. The user account goes to the Recycle Bin. After 30 days, Microsoft Entra ID cleans this account from the Recycle Bin.
  2. The user returns to the organization and the user account is enabled by the administrator. After the activation, the user is recreated in the cloud with the new mailbox.
  3. To use the original cloud mailbox for the user, the user needs to be restored from the backup. Before restoring the user, the newly created cloud user is removed from Microsoft Entra ID.

If you restore a hybrid user and their mailbox with On Demand Recovery:

  • For Non-Federated Domains, On Demand Recovery restores a cloud user and its mailbox without an on-premises user.
  • For Federated Domains, restore of hybrid users requires Recovery Manager for Active Directory. In this scenario, On Demand Recovery restores a hybrid user and its mailbox in the cloud. Recovery Manager for Active Directory restores this hybrid user on-premises, then it calls Microsoft Entra Connect to synchronize the user back to the cloud and make the cloud user previously restored by On Demand Recovery be in the Federated Domain. Without Recovery Manager for Active Directory, the cloud user will be non-federated after restore and you will not log in with this user.

Hybrid Connection Port and Protocol Requirements

Hybrid configuration with Recovery Manager for Active Directory requires only outbound TCP/UDP port 443 to be opened on the Recovery Manager Portal server to access the internet. If the Recovery Manager Portal server already has access to the internet, you do not need to change the Firewall configuration.

Note: If you do not want to open all outbound IP Prefixes and your firewall or proxy allows DNS allow lists, you can add connections to <your name space>.servicebus.windows.net to your allow list.

Table 2: Hybrid connection port and protocol requirements

Protocol Ports Direction
HTTPS 443 (TCP/UDP) Outbound

Figure 2: Hybrid Restore Components Diagram

Documentos relacionados

The document was helpful.

Selecione a classificação

I easily found the information I needed.

Selecione a classificação