Can I restore Active Directory from a snapshot of a virtual machine?

Hello,

I thinks the best way for protect your AD is to Install Commvault Agent.

Follow this guide: https://documentation.commvault.com/2022e/expert/14387_active_directory.html.

Best regards

Onno pretty much covered it. It is helpful if all roles are on the same DC but that's probably not best practice depending on size of environment. Once you restore a domain controller to a previous time, its AD database will be overwritten by newer copies - you need to make the domain controller authoritative (the master of all) before introducing it to the network which will force all other domain controllers to overwrite their database with the restored copy.

When using a FS agent that option is already included on the restore options. When restoring from a VM you’ll have to figure it out the steps to do it manually. The VM method could be quicker depending on the circumstances, but I’d have both FS backups and VM backups to give yourself all the possible options!

When it comes to restores, options are good :) 

So to summarize: yes, it is possible but it depends on the issue that you are facing. I would say in case you have multiple AD servers and AD is still healthy than I would always just build a new AD controller from scratch and remove the broken one. In case AD is screwed you can use VM-level backup to recover AD but it requires some steps to be taken but you know you have a "system state”. A full AD recovery using the AD agent cannot be done unless you also schedule a FS backup with system state. I opened CMR 232194 a very long time ago to enhance the AD agent to make sure the FS agent is scheduled and configured automatically as we have seen customers making mistakes because they assumed the AD agent would also cover the system state backup automatically. So they managed to break AD entirely and couldn't recover their AD.