Chat now with support
Chat with Support

On Demand Recovery Current - User Guide

About On Demand Recovery Before You Start On Demand Recovery Console Overview Sign up for Quest On Demand Required Permissions Adding an Azure Active Directory Tenant Office 365 Tenant Requirements (Mailbox Data Protection) Access Control Working with On Demand Recovery Backup Unpacking Restoring objects Restoring roles Backup and Restore of Service Principal Objects Restoring Application Proxy settings Backup and Restore of MFA Settings Backup and restore group licenses Backup and restore SharePoint Online resource access Backup and Restore of Devices Backup and Restore of Conditional Access Policies Integration with Recovery Manager for Active Directory Working with Inactive Mailboxes Hybrid Connection Port and Protocol Requirements Restore Email Address/Phone for Self-Service Password Reset Reporting Advanced Search How does On Demand Recovery Handle Object Attributes? What is not protected by Auzure AD Connect in a hybrid environment but can be restored by On Demand Recovery?

About On Demand Recovery

Quest® On Demand Recovery cloud application lets you perform the following operations:

  • Back up Azure Active Directory and Office 365 users, groups, contacts, service principals, device information, conditional access policies, navigation properties, and Application Proxy settings.
  • Support for Azure Active Directory B2C tenants.
  • Restore Azure Active Directory and Office 365 users, groups, service principals, devices, conditional access policies, inactive mailboxes for permanently deleted users, and application proxy settings. The application can process two types of Office 365 groups: Office 365 groups and Security groups. Group membership and ownership is restored for both types of groups.
  • Back up and restore Multi-Factor Authentication settings.
  • View differences between the selected backup and live Azure Active Directory or Office 365 and revert unwanted changes in the Differences report.
  • Configure integration with Quest Recovery Manager for Active Directory to restore on-premises Active Directory objects.

The objects can be selected in a backup and then restored to Azure Active Directory or Office 365 without affecting other objects or attributes. Using the granular restore, objects that were accidentally deleted or modified can be recovered in a few minutes.

On Demand Recovery can be started from Quest On Demand single SaaS command point. For more information about Quest On Demand, see the Quest On Demand product documentation.

To access On Demand, you need to provide On Demand credentials or use your existing Quest Software account. For more details, see Signing up for Quest On Demand.

For more information about Quest On Demand Recovery for Teams, see the Quest On Demand Recovery for Teams User Guide.

The following sections describe how to configure and work with On Demand Recovery:

Before You Start

To access your Azure Active Directory or Office 365 tenant via On Demand Recovery, use an Administrative account that has the Global Administrator role. If you do not have an account with the Global Administrator permissions, you should create the account by using one of the procedures described below.

To create an administrative user account with the Global Administrator role in Office 365 Admin Center

  1. Sign in to Office 365 with your administrative account using this link
  2. Click the Admin tile.

  3. From the left pane, select Users, and then select Add a user.
  4. Specify all necessary user information. In the Roles section, select the Global administrator radio button.

  5. Click Add.
  6. Now you can use this user account to access your Office 365 tenant in On Demand Recovery.

To create an administrative user account with the Global Administrator role in Azure Management Portal

  1. Log into the Azure Management Portal ( with your individual account.
  2. Select your tenant from the list of available tenants. To view the list of tenants, click on your profile icon in the upper-right corner of the screen.
  3. Navigate to the Azure Active Directory section in the left pane.
  4. Click Add a user on the Quick tasks tile and provide the required details in the "User" form. In the Directory role section, select the Global administrator radio button and click OK.
  5. Click Create.

On Demand Recovery Console Overview

The main screen, called Dashboard, is opened after you connect to your Azure Active Directory tenant. The user interface of the administrative console consists of four main screens:

  • Dashboard
    This is the main screen in the module. It is a source of all general information regarding current project status. You can view and open tasks from the Dashboard, view and manage available connections, view object charts and monitor recent errors. The toolbar provides links to most general tasks such as managing tenants, unpacking backups and browsing objects to restore.
  • Backups
    This screen shows a list of backups that were created for the selected tenant.
  • Unpacked Objects
    This screen contains all objects that were extracted from the selected backup and operations you can perform on them.
  • Differences
    This screen allows you to compare the current state of objects in live Azure Active Directory or Office 365 with their state in a backup and roll back unwanted changes. This helps when troubleshooting problems that may result from the deletion or modification of critical objects.
  • Events
    This screen provides you detailed information about errors and warnings that occur during backup creation and restore operations.
  • Tasks
    This screen allows you to view task statuses and manage them.

Sign up for Quest On Demand

To get access to On Demand Recovery, you need to sign up for the Quest On Demand service and create an organization. For that, go to Quest On Demand and use one of the following options:

  • Sign up using the existing Quest account
  • Create a new Quest account and sign up for Quest On Demand
  • Join an existing On Demand organization

For more details, refer to the Signing up for Quest On Demand section in On Demand Global Settings User Guide.

Self Service Tools
Knowledge Base
Notifications & Alerts
Product Support
Software Downloads
Technical Documentation
User Forums
Video Tutorials
RSS Feed
Contact Us
Licensing Assistance
Technical Support
View All
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating