Chat now with support
Chat with Support

On Demand Recovery Current - User Guide

About On Demand Recovery On Demand Recovery Module Overview Before You Start Sign up for Quest On Demand Adding a Microsoft Entra Tenant Required Permissions Microsoft 365 Tenant Requirements (Mailbox Data Protection) Access Control Working with On Demand Recovery Backup Unpacking Restoring Objects Restoring Directory Roles and Application Roles Restoring Users Restoring Groups Restoring Service Principal Objects Restoring Applications Restoring Application Proxy Settings Restoring Multifactor Authentication Settings Restoring Group Licenses Restoring Devices Restoring Conditional Access Policies Backup and Restore of Tenant Level Settings Backup and Restore Administrative Units Integration with Recovery Manager for Active Directory Working with Inactive Mailboxes Hybrid Connection Port and Protocol Requirements Restoring Email Address or Phone for Self-Service Password Reset Reporting Advanced Search How does On Demand Recovery Handle Object Attributes? What is Not Protected by Microsoft Entra Connect but Can Be Restored by On Demand Recovery?

Using Query Strings

You can refine your search for the report data by using search expressions. To perform a keyword search in a specified column, you need to use the internal name of the column instead of the column display name. For example, <internal column name>:<search term or expression>. For a list of internal column names and string examples, see the tables below.

Table 7: Unpacked Objects screen

Column display name Column internal name To search for Query example
Name displayName An object by object name displayName:SamJones
Type objectType An object by object type objectType:user
Backup Date backupDate An object by the specified backup date/time backupDate:[2017-06-27]
Directory tenant An object by directory name tenant:demo365
Principal Name userPrincipalName An object by principal name userPrincipalName:Sam.Jones@mycompany.com
Mail mail An object by mail address mail:Sam.Jones@mycompany.com
City city An object by city city:London
Department department An object by department department:Sales
Job Title jobTitle An object by job title jobTitle:manager
Description description An object using keywords in the object descriptions description:Sales
User Type userType An object by user type userType:new
Telephone Number telephoneNumber An object by telephone number telephoneNumber:44658

Table 8: Differences screen

Column display name Internal column name To search for Query example
Name objectName Changes related to a specified object name objectName:SamThomas*
Change changeType Objects by change type changeType:"Object hard deleted"
Object Type objectType Objects by object type objectType:User
Attribute changedAttribute Changes related to a specific attribute changedAttribute:link
Difference oldValue Search by old attribute value (value before the change) oldValue:User1@mycompany.com
Difference newValue Search by new attribute value (value after the change) newValue:User1@gmail.com
Backup time backupDate Search by the specified backup date/time backupDate:[2017-06-27]

Table 9: Events screen

Column display name Internal column name To search for Query example
Time timestamp Specified timestamp timestamp:NormanThomas*
Description message Keywords in event descriptions message:"Object attributes were restored"
Object Name object.name Objects by an object name object.name:User
Task Name task.name Specified task task.name:"Restore objects"

Table 10: Tasks screen

Column display name Column internal name To search for Query example
Title name A task by task name name:"restore objects"
State status A task by task status status:completed
Type type A task by task type type:restore
Modified modified A task by the date when the task was modified modified:[2017-06-26]
Created created A task by the date when the task was created created:[2017-06-27]
Operation lastResultDescription Keywords in the operation description lastResultDescription:unpack*

How does On Demand Recovery Handle Object Attributes?

Note: On Demand Recovery does not support the restore of objects in restricted management administrative units.

Attributes Restored by On Demand Recovery

For a full list of attributes restored by On Demand Recovery, visit the On Demand Recovery Supported Attributes guide.

What is Not Protected by Microsoft Entra Connect but Can Be Restored by On Demand Recovery?

Microsoft Entra Connect synchronizes many attributes for users and groups from on-premises Active Directory but there are also cloud objects, properties, and links to Microsoft 365 resources which are not protected by Microsoft Entra Connect and restored only with On Demand Recovery.

Table 11: Types of cloud-only objects restored by On Demand Recovery

Object Type Description Azure Recycle Bin
Guest users A Microsoft Entra business-to-business (B2B) collaboration user that typically resides in a partner organization and has limited privileges in the inviting directory. 30 days
Microsoft 365 Groups Groups that are used for collaboration between users, both inside and outside the company. 30 days
Cloud only Security Groups Groups that are used for granting access to Microsoft 365 and Microsoft Entra ID resources. No
Dynamic Security Groups Groups with dynamic rule-based membership. No
Dynamic Microsoft 365 Groups Microsoft 365 Groups with dynamic rule-based membership. 30 days
Devices Device registration records in Microsoft Entra ID. No
Application Registration Stores application manifest (non-Gallery application manifests are not supported), logo, sign in, up URLS and other information. 30 days
Conditional Access Policies Microsoft Entra policies that are used to control user access to cloud applications and resources. No
Named Locations Named lists of IP prefixes that are used in Conditional Access Policies. No
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating