Hi @PedroRocha ,

You can check this link in our Documentation:

https://documentation.commvault.com/2022e/expert/14387_active_directory.html

Best Regards,

Sebastien Merluzzi

To expand - the Active Directory IDA only allows granular recovery of AD objects - like restoring user attributes etc. You cannot perform a full AD restore with that agent.

Full AD restores require system state backups as part of the file system iDA. You can use the mining tool if you don’t want to use the AD agent but that is much more effort.

So yes, having both provides full coverage with the best recovery options.

Instructions for restoring a domain controller: https://documentation.commvault.com/2022e/essential/57210_recovering_windows_file_system_data.html

There is really one critical item to be aware of. If you need the backup data to overwrite all domain controllers, you need to perform an authoritative restore (overwrite AD on all DCs).

I’d definitely recommend trying out some AD/DC recovery scenarios in an isolated environment, as there are always nuances with restoring system state on top of an existing machine, and its best to test that ahead of time than figure them out during an actual disaster.