Hi @Kim Andre 

While the AD IDA agent in Commvault backs up individual objects, it's not ideal for full forest recovery.
https://documentation.commvault.com/2024/essential/active_directory_01.html

In case of a major disaster, you'll want to use the pre-defined "Active Directory Forest Restore" workflow to restore multiple domain controllers (DCs), including their system state data.
https://documentation.commvault.com/2023e/expert/predefined_workflow_restoring_domain_controllers_in_active_directory_forest.html
 

Here's what I experienced at a customer site (different approach, but with the same goal):

I used a combination of the File System IDA and AD IDA agents on the DC. This captures both file system data and AD objects.

• Install a new DC with the same OS and patches.
• Install the Commvault File System agent on the new DC.
• Use Commvault to perform a complete in-place restore, selecting "Primary" in the SYSVOL options.
• Prepare the environment for Commvault's 1-Touch Bare Metal Recovery.
• This allows you to boot from an ISO and recover the other DCs directly, skipping the steps of installing the OS, patches, and the Commvault agent.

Once the recovery is complete, you'll need to check and verify several things:

• Ensure all Active Directory services are running as expected.
• Verify if all FSMO roles are present on this new DC. If not, claim the missing roles using these resources:
  https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/view-transfer-fsmo-roles
  https://learn.microsoft.com/en-us/troubleshoot/windows-server/active-directory/transfer-or-seize-operation-master-roles-in-ad-ds
• Use MMC consoles to ensure all AD services are working properly. Test functions like pinging DNS names
• Verify if you can make changes to objects in DNS and Active Directory.

Let me know if this aligns with what you were looking for! If not, please share your thoughts. I'm happy to discuss further.

Best Regards,
Mohamed Ramadan
Data Protection Specialist

@Mohamed Ramadan 

Many thanks for a detailed answer, much appreciated! :)

@Kim Andre if I recall correctly this enhanced AD forest recovery option is still to be released and is planned for the next release planned to arrive somewhere next month. They just released, as part of the CPR2024E release, the first iteration of the improved AD agent. See for more info this post → 

Still the steps from @Mohamed Ramadan for full forst recovery are correct, it unfortunately is a lengthy process if you would have to recover it following these steps. Recovering it via VM-level backups is also possible and might even be a faster route. 

Correct, still to be released. There is no date as yet, but this calendar year seems unlikely from what I know.