Commvault decoder/Workloads
What is Commvault's Active Directory and Entra ID recovery?
Backup, granular restore and automated forest recovery for Active Directory, Entra ID and, more recently, Okta. Commvault sells it as Backup & Recovery for Active Directory.
- Delivered as
- SaaS control plane that doesn't depend on your Active Directory
- Licensing
- Per enabled user, in Standard and Enterprise editions; Enterprise adds automated forest recovery. Commvault lists starting prices on its Active Directory page
What it does
When Active Directory is down or compromised, nothing else can sign in, including most restore tools. Commvault protects Active Directory and Entra ID separately from the rest of your environment, restores single objects or attributes, and automates recovering a whole forest, the slowest and most error-prone part of ransomware recovery.
Commvault has used several names for this area: Identity Resilience, Active Directory and Entra ID Resilience, and Backup & Recovery for Active Directory. In October 2026 it announced Commvault IDRecover as the name for its newer identity features.
Key facts
- Object- and attribute-level restore, with comparison reports you can roll back from.
- Automated forest recovery with generated runbooks, and recovery onto a clean server.
- Protects Group Policy Objects.
- Okta protection was announced in March 2026.
- Active Directory Pre Recover, a standby clean copy of AD in a cleanroom, was announced in September 2026 for early access.
How KELYN helps
KELYN plans and rehearses Active Directory and Entra ID recovery, in the order the rest of your systems need it.
Related
- Commvault CleanroomAn isolated recovery environment, created on demand, where you test cyber recovery, investigate an attack and restore clean systems without touching production. Formerly Cleanroom Recovery.
- Microsoft 365 backupCommvault's SaaS backup for Exchange Online, OneDrive, SharePoint and Teams, with copies kept outside your Microsoft tenant, including for GCC and GCC High.
Sources
Checked against Commvault's own pages in November 2026. Commvault renames and updates products often, so its documentation has the final word.
Want Commvault run for you?
KELYN is a Commvault Elite MSP Partner. U.S.-based engineers design, run and test your Commvault environment with you.