diff --git a/docs/recoveryforactivedirectory/3.1/admin/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/_category_.json new file mode 100644 index 0000000000..51435b6e32 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Administration", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/activedirectory/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/_category_.json new file mode 100644 index 0000000000..72c950b636 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Active Directory Page", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md new file mode 100644 index 0000000000..a1e7009921 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md @@ -0,0 +1,118 @@ +--- +title: "Active Directory Page" +description: "Active Directory Page" +sidebar_position: 40 +--- + +# Active Directory Page + +On the Active Directory page, you can access all the domains that you have configured through the +[Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md). + +Click **Active Directory** in the left pane to open the Active Directory page. + +![Active Directory page](/images/recoveryforactivedirectory/3.1/product/active_directory/active_directory.png) + +Select a domain from the drop-down menu and expand it to view the domain tree and container +structure, which is exactly the same as you get in Active Directory Users and Computers. Objects in +the domain are also available in the same hierarchical structure. + +The page displays the following information: + +- Name – The display name of the object +- Distinguished Name – The unique name identifying the object in the directory +- Description – A description of the object +- Type – The object type, showing whether it is a container, organizational unit, computer, group, + user, etc. +- Backup Time – The date and time of the last the backup + +You can perform the rollback and recover operations for objects. + +## Search for an Object + +There are several ways to find an object: + +- Column Filters – Click a column header to organize the table alphabetically by the column header. + An arrow appears by the column name. Use it to arrange the entries by ascending or descending + order. +- Search box – Enter a text string in the search box to filter the table for results that contain + the text. + +## Rollback an Object + +Select and expand a domain in the left pane and locate the object you want to rollback. Right-click +this object and select **Rollback** on the menu. See the [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) topic for +additional information. + +## Recover Deleted Objects + +On expanding a domain in the left pane, you will notice that Recycle Bin is in blue, indicating that +this is a virtual container specific to Identity Recovery. Use the Recycle Bin to +recover deleted objects in Active Directory. See the [Recover Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md) topic for +additional information. + +## Integration with Threat Prevention + +When you right-click an object in a domain on the Active Directory page, the right-click menu is +displayed as: + +![Right-click menu on the Active Directory page](/images/recoveryforactivedirectory/3.1/admin/activedirectory/rightclickmenu.webp) + +The Show audit history and Show activity options are enabled only when both the following conditions +are met: + +- Threat Prevention data is tied with Identity Recovery data +- The user is logged in with an account that is specified in the Account section of the + [Netwrix Integrations Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md) + +These options display data from Threat Prevention. + +### View the Audit History for an Object + +You can view the changes made to an object by other users. + +On the Active Directory page, select and expand a domain in the left pane and locate the object you +want to view the audit history for. Right-click this object and select **Show audit history** on the +menu. The Audit History window is displayed. + +![Audit History window](/images/recoveryforactivedirectory/3.1/admin/activedirectory/audithistory.webp) + +The following information is displayed for every action performed on the object: + +- Who – The user who performed the action +- What – The action performed +- Success – Shows whether the action was successfully performed; _True_ indicates success and + _False_ indicates failure +- Where – The object the action was performed on +- When – The date and time of the action + +To view the details of an action, click the plus sign in the respective row to expand it. +Information includes the object attribute that was affected, the type of change made, and the old +and new values. + +### View the Activity Perpetrated by an Object + +You can view the activity performed by an object in the environment. + +On the Active Directory page, select and expand a domain in the left pane and locate the object +whose activity you want to view. Right-click this object and select **Show activity** on the menu. +The Audit Activity window is displayed. + +![Audit Activity window](/images/recoveryforactivedirectory/3.1/admin/activedirectory/auditactivity.webp) + +The following information is displayed for the actions performed by the object: + +- What – The action performed +- Success – Shows whether the action was successfully performed; _True_ indicates success and + _False_ indicates failure +- Where – The object the action was performed on +- When – The date and time of the action + +To view the details of an action, click the plus sign in the respective row to expand it. +Information includes the object attribute that was affected, the type of change made, and the old +and new values. + +:::note +For objects in the Recycle Bin, the Show activity option is not available. + +::: diff --git a/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md new file mode 100644 index 0000000000..de253db476 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md @@ -0,0 +1,144 @@ +--- +title: "Recover Objects" +description: "Recover Objects" +sidebar_position: 20 +--- + +# Recover Objects + +The Recycle Bin enables you to view the objects deleted in domains monitored by Identity Recovery. You can recover these deleted Active Directory objects from the Recycle Bin. + +Click **Active Directory** in the left pane to open the [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). Select +and expand a domain in the left pane and click Recycle Bin to get a list of deleted objects in the +domain. + +![Recycle Bin](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery.png) + +You can recover deleted objects. + +The page displays the following information: + +- Name – The display name of the object +- Distinguished Name – The unique name identifying the object in the directory +- Last Known Parent – The path of the parent of the object +- Type – The object type, showing whether it is a container, organizational unit, computer, group, + user, etc. +- Deleted On – The time and date when the object was deleted +- Time Left – The time remaining until the object is no longer recoverable + +## Search for an Object + +There are several ways to find an object: + +- Column Filters – Click a column header to organize the table alphabetically by the column header. + An arrow appears by the column name. Use it to arrange the entries by ascending or descending + order. +- Search box – Enter a text string in the search box to filter the table for results that contain + the text. + +## Recover an Object + +Follow the steps to recover a deleted object. + +**Step 1 –** Click Active Directory in the left pane to open the +[Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). + +**Step 2 –** Select and expand a domain in the left pane and click Recycle Bin. + +**Step 3 –** Do one of the following + +- Select the object to restore and click the **Restore** button. +- Right-click the object and select **Restore** on the shortcut menu. + +The Object Restore wizard opens. + +![Object Restore wizard - Object Backups page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page1.png) + +**Step 4 –** In the Backup Data section, select a backup date to restore from. Then click **Next**. + +![Object Restore wizard - Domain Controller page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page2.png) + +**Step 5 –** Select a domain controller where the restore operation will take effect. Options are: + +- Use any writable domain controller – The system picks any writable domain controller in the domain + for the restore operation +- Use a specific domain controller – Select a domain controller from the drop-down menu for the + restore operation + +**Step 6 –** Click **Next**. + +![Object Restore wizard - Recovery Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page3.png) + +**Step 7 –** On the Recovery Options page, select the Container and Naming Conflict actions for the +recovery process. + +- Container – When a container is deleted in Active Directory, all child objects are also deleted. + Select a container restore option from the drop-down menu: + + - Only restore the container object – Restores the container object but no children + - Restore the container object and the immediate children – Restores the container object and + its immediate children + - Restore the entire sub-tree – Restores the container object and all children + + :::note + Selecting the Restore the container object and the immediate children or the Restore + the entire sub-tree option enables the User Options page. + ::: + + +- Naming Conflict – A naming conflict can occur if an object was created post-deletion that has + identical values to the original object. From the drop-down menu, select an option to implement if + a naming conflict occurs: + + - Skip the object – If there is a conflict with naming, do not restore and skip the object + - Automatically use alternative values – If there is a conflict with naming, a numeric value + will be appended to the name of the object being restored to create a unique name + +**Step 8 –** Click **Next**. + +![Object Restore wizard - User Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page4.png) + +**Step 9 –** The User Options page is displayed when user objects are being restored. When a user +object is included as a child object being restored, this page is also displayed. Select the check +boxes to configure the necessary options for the user. + +- Enable user – Enables the user in Active Directory +- Clear 'User must change password' flag upon restoration – Restored users do not receive an alert + to change their password upon first login after a recovery. Instead, their old password prior to + deletion is still active. +- Set new password – Implement a new password upon recovery. Type the new password in the text box. + + :::tip + Remember, when a new password is created, the user needs it to login the first time. The + password should be copied and given to the restored user. + ::: + + +**Step 10 –** Click **Next**. + +![Object Restore wizard - Credentials page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page5.png) + +**Step 11 –** The account performing the operation must have Domain Admin privileges to access the +domain tree area where the object resides. On the Credentials page: + +- If the account specified during domain configuration has Domain Admin privileges, click **Next**. +- If the domain account does not have Domain Admin privileges, select the **Use alternate + credentials to perform the object restore** checkbox and enter an account with Domain Admin + privileges, then click **Next**. + +For a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery, see the +[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model) +topic. + +![Object Restore wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page6.png) + +**Step 12 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +![Object Restore Complete message](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_finished.png) + +**Step 13 –** A completed message is displayed when the restore is successful. Click **OK**. + +The deleted object has now been restored. diff --git a/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md new file mode 100644 index 0000000000..7f741bbdd8 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md @@ -0,0 +1,67 @@ +--- +title: "Rollback Objects" +description: "Rollback Objects" +sidebar_position: 10 +--- + +# Rollback Objects + +You can revert an Active Directory object to its previous state. + +Follow the steps to roll back an Active Directory object, including user accounts, groups, and +organizational units. + +**Step 1 –** Click Active Directory in the left pane to open the +[Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). + +**Step 2 –** Select and expand a domain in the left pane and locate the object you want to rollback. + +**Step 3 –** Do one of the following: + +- Select the object to rollback and click the **Rollback** button. +- Right-click the object and select **Rollback** on the shortcut menu. + +The Object Rollback wizard opens. + +![Object Rollback wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page1.png) + +**Step 4 –** In the Backup Date section, select a backup to use for the rollback operation. Then +select the checkbox(es) for the attributes you want to roll back. Click **Next**. + +![Object Rollback wizard - Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page2.png) + +**Step 5 –** Select a domain controller where the rollback changes will get affected. Options are: + +- Use any writable domain controller – The system picks any writable domain controller in the domain + for the rollback operation +- Use a specific domain controller – Select a domain controller from the drop-down menu for the + rollback operation + +**Step 6 –** Click **Next**. + +![Object Rollback wizard - Credentials page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page3.png) + +**Step 7 –** The account performing the operation must have Domain Admin privileges to access the +domain tree area where the object resides. On the Credentials page: + +- If the account specified during domain configuration has Domain Admin privileges, click **Next**. +- If the domain account does not have Domain Admin privileges, select the **Use alternate + credentials to perform the object rollback** checkbox and enter an account with Domain Admin + privileges, then click **Next**. + +For a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery, see the +[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model) +topic. + +![Object Rollback wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page4.png) + +**Step 8 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Complete** +to finish the wizard. + +![Object Rollback Sucessful message](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished.png) + +**Step 9 –** A completed message is displayed when the rollback is successful. Click **OK**. + +The object has been rolled back. diff --git a/docs/recoveryforactivedirectory/3.1/admin/audit.md b/docs/recoveryforactivedirectory/3.1/admin/audit.md new file mode 100644 index 0000000000..758c52bdea --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/audit.md @@ -0,0 +1,22 @@ +--- +title: "Audit Logs Page" +description: "Audit Logs Page" +sidebar_position: 70 +--- + +# Audit Logs Page + +The Audit Logs page provides an audit trail of the actions performed by users in Identity Recovery. + +Click **Audit Logs** in the left pane to open the Audit Logs page. + +![Audit Logs Page](/images/recoveryforactivedirectory/3.1/product/auditing.png) + +The following information is displayed for an event: + +- Action – The action perpetrated by the account +- Object – The name of the object affected by the change +- Account – The account that made the change +- Event Time – The time the action was performed + +To view the details of an event, click the arrow next to it to expand it. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/configuration/_category_.json new file mode 100644 index 0000000000..ab4f42dd27 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Configuration Interface", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/azurestorage.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/azurestorage.md new file mode 100644 index 0000000000..d57c360443 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/azurestorage.md @@ -0,0 +1,58 @@ +--- +title: "Azure Storage Page" +description: "Azure Storage Page" +sidebar_position: 12 +--- + +# Azure Storage Page + +The Azure Storage page displays the Azure storage containers configured for domain controller backup usage with Identity Recovery. + +Click **Configuration** in the left pane. Then click the **Azure Storage tab** on the Configuration page to open the Azure Storage page. + +![Users and Roles page](/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration.png) + +The table displays the following information: + +- Container – The container in Azure storage +- Storage account – The storage account for this container +- Tenant – The tenant the storage container exists in +- Action – Actions that can be performed on user accounts + + - Remove – Click **Remove** to remove the storage container + - Edit - Click **Edit** to edit the storage container configuration + +### Add a Storage Container + +Follow the steps to add a storage container that can be used to store domain controller backups. + +**Step 1 –** Click the **Add Storage Container** button on the Azure Storage page. The Add Storage Container wizard opens. + +![Add Storage Container wizard – Storage account page](/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page1.png) + +**Step 2 –** Enter the tenant name, client ID, secret and storage account from the application registration in Entra and click **Next**. + +![Add Storage Container wizard – Container page](/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page2.png) + +**Step 3 –** Select an existing container using the dropdown list or specify a new container name. Click **Next** to continue. + +![Add Storage Container wizard – Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page3.png) + +**Step 4 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +The storage container is now added to the system. + +### Edit a Storage Container Configuration + +Follow the steps to edit a storage container configuration. Editing a storage container follows the same steps as adding a storage container configuration. + +**Step 1 –** On the Storage Container page, click the **Edit configuration** icon for a storage container. The Edit +Storage Container wizard opens. + +**Step 2 –** Modify the desired settings for the storage container configuration + +**Step 3 –** The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use the Back button to return to a previous page and change any setting. Click **Done** to finish the wizard. + +The storage container configuration is updated. \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/dataretention.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/dataretention.md new file mode 100644 index 0000000000..521b6e1ff3 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/dataretention.md @@ -0,0 +1,47 @@ +--- +title: "Data Retention Policy Page" +description: "Data Retention Policy Page" +sidebar_position: 50 +--- + +# Data Retention Policy Page + +The Data Retention Policy page provides settings for deleting backup data that of domains and domain +controllers has aged by X number of days, and for deleting backup data for tombstone objects that +have been purged. + +Click **Configuration** in the left pane. Then click the **Data Retention Policy** tab on the +Configuration page to open the Data Retention Policy page. + +![Data Retention Policy Page](/images/recoveryforactivedirectory/3.1/product/configuration/data_retention_configuration.png) + +Follow the steps to specify a data retention policy. + +**Step 1 –** On the Data Retention Policy page, select the **Enable data retention policy** checkbox +to enable policy settings. + +**Step 2 –** Select the **Delete object backup data older than X days** checkbox to delete backup +data that is older than X number of days from the database. You can specify any number of days; +default is 60 days. + +**Step 3 –** Select the **Delete backup data for objects that have been purged from the deleted +objects container** checkbox to delete data from the database for tombstone objects that have been +purged. + +:::note +The 'deleted objects container' is represented by the Recycle Bin in Identity Recovery. +::: + +When an object is deleted in Active Directory, it has _tombstone_ as its state. The object is not +physically deleted but is stripped off most of its attributes and is flagged as _deleted_. The +object remains in tombstone state for 60 days by default, after which it is permanently deleted +from Active Directory. Selecting the **Delete backup data for objects that have been purged from the +deleted objects container** checkbox deletes data for permanently deleted objects from Identity Recovery. + +:::info +As permanently deleted objects cannot be rolled back or recovered using Identity Recovery, it is recommended to enable this setting. +::: + +**Step 4 –** Click **Save**. + +A data retention policy has been defined in the system. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md new file mode 100644 index 0000000000..9f0fcfc19f --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md @@ -0,0 +1,138 @@ +--- +title: "Domains Page" +description: "Domains Page" +sidebar_position: 10 +--- + +# Domains Page + +The Domains page provides a list of the domains backed up by Identity Recovery. It +displays the backup schedule settings for each added domain. You can also add and configure new +domains. + +Click **Configuration** in the left pane. Then click the **Domains** tab on the Configuration page +to open the Domains page. + +![Domains Page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration.png) + +The table displays the following information: + +- Domain – Fully-qualified name of the domain +- Last Collection Time – The most recent time the collection (backup) occurred +- Duration – The time the collection took to complete +- Status – Collection state as idle, waiting, error, or success +- Details – Information about any errors that occurred when the last backup was performed +- Actions – Displays the icons used to collect, edit, and delete the respective domain + + - Run backup – Click the **Play** icon to start a new collection (backup) on the respective + domain if collection is needed outside of the configured schedule + - Edit configuration – Edit the settings of the domain. Click the **Edit** icon for a domain to + open the Edit Domain Configuration wizard and edit the domain's settings. See the Edit Domain + Configuration topic for additional information. + - Delete configuration – Click the Delete icon for a domain to delete it + +To add a domain, click the **Add domain configuration** button. See the Add a Domain topic for +additional information. + +### Add a Domain + +To add a domain, provide domain details and configure the backup schedule. For a list of the +supported Windows Servers, see the [Target Domains](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md) topic. + +Follow the steps to add a domain. + +**Step 1 –** Click the **Add domain configuration** button on the Domains page to launch the Add +Domain Configuration wizard. + +![Add Domain Configuration wizard - Domain page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page1.png) + +**Step 2 –** Enter a domain [example.domain.com] in the Domain field. + +**Step 3 –** Enter the account username [DOMAIN\USERNAME] to be used for backups, rollbacks, and +recoveries in the Account field. + +**Step 4 –** Enter the password for the account in the Password field. + +:::note +The account must have Domain Admin privileged access to read and write object data in +order to back up, rollback, and restore objects in Active Directory. If the account has read rights +only, it will be able to back up the domain but unable to rollback and restore objects. In this +case, alternate credentials with read and write access to objects will have to be provided on the +Credentials page of the Object Rollback and Object Restore wizards. See the +[Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) and +[Recover an Object](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md#recover-an-object) topics for information on the wizards. +::: + +For a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery, see the +[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model) +topic. + +**Step 5 –** Click **Next**. + +![Add Domain Configuration wizard - Backup Schedule page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page2.png) + +**Step 6 –** Select the days of the week in the Run the backup on section to indicate the days when +backups will be run. + +**Step 7 –** Select a start time (UTC) in the Start the backup at field to begin the backup. The +default time is 12:00 AM. + +**Step 8 –** In the Repeat every field, enter a frequency, in minutes, to set the time between the +start of each domain backup. Keep in mind the size of the environment when configuring this option. +Click **Next**. + +:::note +If the start time is changed from the default and a frequency is selected (in minutes), the backups +will run at the desired frequency but will skip from midnight until the selected start time. +::: + +![Add Domain Configuration wizard - Options page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page3.png) + +**Step 9 –** (_Optional_) Select the **Collect GPOs** checkbox to enable GPO rollback and recovery. +This setting requires Group Policy Management Console (GMPC). If GPO collection is not desired, skip +to Step 10. + +**Step 10 –** If the Collect GPOs checkbox is selected, the Store the Group Policy Object backups in +the following location field is enabled. Specify the save location for the GPO backup here. + +:::note +The path must be a network share. Do not provide the path to a local drive for storing the +backup. +::: + +**Step 11 –** Click **Next**. + +![Add Domain Configuration wizard - Notification page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page4.png) + +**Step 12 –** To set notifications, select the Send email notifications check box and enter the +email address of one or more users and/or groups to receive the job start and end notifications. Use +a semicolon (;) to separate multiple recipients. See the [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) +topic for additional information. + +If notifications are not desired, skip this step. + +**Step 13 –** Click **Next**. + +![Add Domain Configuration wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page5.png) + +**Step 14 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +A new domain backup configuration is added and displayed on the Domains page. + +Backups will begin as scheduled. On the first scheduled instance, a complete backup of the domain is performed. Then, subsequent backups only include the incremental changes that occurred since the previous backup. + +### Edit Domain Configuration + +Follow the steps to edit a domain backup configuration. Editing a domain follows the same steps as adding a domain backup configuration. + +**Step 1 –** On the Domains page, click the **Edit configuration** icon for a domain. The Edit +Domain Configuration wizard opens. + +**Step 2 –** Modify the desired settings for the domain backup configuration + +**Step 3 –** The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use the Back button to return to a previous page and change any setting. Click **Done** to finish the wizard. + +The domain configuration is updated and backups will resume as scheduled. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md new file mode 100644 index 0000000000..299290c63f --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md @@ -0,0 +1,121 @@ +--- +title: "Entra ID Page" +description: "Entra ID Page" +sidebar_position: 12 +--- + +# Entra ID Page + +The Entra ID page provides a list of the Entra tenants backed up by Identity Recovery. It displays the backup schedule settings for each added Entra tenant. You can also add and configure a new Entra tenant. + +Click **Configuration** in the left pane. Then click the **Entra ID** tab on the Configuration page +to open the Entra tenants page. + +![Tenant Page](/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration.png) + +The table displays the following information: + +- Tenant – Fully-qualified name of the tenant +- Last Collection Time – The most recent time the collection (backup) occurred +- Duration – The time the collection took to complete +- Status – Collection state as idle, waiting, error, or success +- Details – Information about any errors that occurred when the last backup was performed +- Actions – Displays the icons used to collect, edit, and delete the respective tenant configuration + + - Run backup – Click the **Play** icon to start a new collection (backup) on the respective + tenant if collection is needed outside of the configured schedule + - Edit configuration – Edit the settings of the tenant. Click the **Edit** icon for a tenant to + open the Edit Tenant Configuration wizard and edit the tenant's settings. See the Edit Tenant + Configuration topic for additional information. + - Delete configuration – Click the Delete icon for a tenant to delete it + +To add a tenant, click the **Add tenant configuration** button. See the Add a Tenant topic for +additional information. + +### Add a Tenant + +To add a tenant, provide tenant details and configure the backup schedule. + +Follow the steps to add a tenant. + +**Step 1 –** Click the **Add tenant configuration** button on the Entra Id page to launch the Add +Tenant Configuration wizard. + +![Add Tenant Configuration wizard - Entra Id page](/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page1.png) + +**Step 2 –** Enter a tenant [example.tenant.com] in the Tenant field. + +**Step 3 –** Enter the Client Id [CLIENTID] to be used for backups, rollbacks, and +recoveries in the Client ID field. + +**Step 4 –** Enter the secret for the application registration in the Secret field. + +:::note +The application registration must have the following Microsoft Graph access: + +|API / Permissions name|Type|Description|Admin consent required|Status| +|----------------------|----|-----------|----------------------|------| +|AdministrativeUnit.ReadWrite.All|Application|Read and write all administrative units|Yes|Granted| +|Application.ReadWrite.All|Application|Read and write all applications|Yes|Granted| +|Application.ReadWrite.OwnedBy|Application|Manage apps that this app creates or owns|Yes|Granted| +|Directory.ReadWrite.All|Application|Read and write directory data|Yes|Granted| +|Group.ReadWrite.All|Application|Read and write all groups|Yes|Granted| +|User.DeleteRestore.All|Application|Delete and restore all users|Yes|Granted| + +::: + +**Step 5 –** Click **Next**. + +![Add Tenant Configuration wizard - Backup Schedule page](/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page2.png) + +**Step 6 –** Select the days of the week in the Run the backup on section to indicate the days when +backups will be run. + +**Step 7 –** Select a start time (UTC) in the Start the backup at field to begin the backup. The +default time is 12:00 AM. + +**Step 8 –** In the Repeat every field, enter a frequency, in minutes, to set the time between the +start of each domain backup. Keep in mind the size of the environment when configuring this option. +Click **Next**. + +:::note +If the start time is changed from the default and a frequency is selected (in minutes), +the backups will run at the desired frequency but will skip from midnight until the selected start +time. +::: + +![Add Tenant Configuration wizard - Notifications page](/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page3.png) + +**Step 9 –** To set notifications, select the Send email notifications check box and enter the +email address of one or more users and/or groups to receive the job start and end notifications. Use +a semicolon (;) to separate multiple recipients. See the [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) +topic for additional information. + +If notifications are not desired, skip this step. + +**Step 10 –** Click **Next**. + +![Add Tenant Configuration wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page4.png) + +**Step 11 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +A new tenant is added and displayed on the Entra Id page. + +Backups will begin as scheduled. On the first scheduled instance, a complete backup of the tenant is +performed. Then, subsequent backups only include the incremental changes that occurred since the +previous backup. + +### Edit Tenant Configuration + +Follow the steps to edit a tenant. + +**Step 1 –** On the Entra Id page, click the **Edit configuration** icon for a tenant. The Edit +Tenant Configuration wizard opens. + +**Step 2 –** Modify the desired settings for the tenant configuration + +**Step 3 –** The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use the Back button to return to a previous page and change any setting. Click **Done** to finish the wizard. + +The tenant configuration is updated and backups will resume as scheduled. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/forest.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/forest.md new file mode 100644 index 0000000000..c01ff1025f --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/forest.md @@ -0,0 +1,34 @@ +--- +title: "Forest Page" +description: "Forest Page" +sidebar_position: 50 +--- + +# Forest Page + +The Forest page allows administrators to: + +- Add forests + +## Add a Forest + +You must add a forest in the system to perform backup and recovery operations for it. Follow the +steps to add a forest. + +![ Forest configurations ](/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration.png) + +**Step 1 –** On the Forest Configuration page, click the **Add Forest** button. The Add Forest window is displayed. + +![ Add Forest window](/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_page1.png) + +**Step 2 –** In the Domain field, enter the name of the root domain in the forest +[example.domain.com]. + +**Step 3 –** Enter the account username [DOMAIN\USERNAME] to be used to connect to the forest in the +Account field. Ensure that the account has privileges to access the domain. + +**Step 4 –** Enter the password for the account in the Password field. + +**Step 5 –** Click **Save**. + +The forest has been added to the system. \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md new file mode 100644 index 0000000000..25a5b8d427 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md @@ -0,0 +1,64 @@ +--- +title: "Netwrix Integrations Page" +description: "Netwrix Integrations Page" +sidebar_position: 40 +--- + +# Netwrix Integrations Page + +The Netwrix Integrations page provides the ability to configure access to the data in other Netwrix +products. At present, only Netwrix Threat Prevention is supported. This enables Identity Recovery to +pull object data from the integrated product and tie it with that same object's data in +Identity Recovery. Users can then view the audit history and activity data coming from +Threat Prevention for objects on the [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). + +Click **Configuration** in the left pane. Then click the **Netwrix Integrations** tab on the +Configuration page to open the Netwrix Integrations page. + +![Netwrix Integrations page](/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration.png) + +Follow the steps to configure access to the data of a Netwrix product. + +**Step 1 –** On the Netwrix Integrations page, use the Auditing Product Integration drop-down menu +to select a product for integration. The menu displays the supported Netwrix products, namely +Netwrix Threat Prevention. + +**Step 2 –** In the SQL Server field, enter the IP address or the server name of the SQL server +where the Threat Prevention database resides. + +**Step 3 –** Select the option button for **Windows authentication** or **SQL authentication** to +set the authentication mode. + +- Windows authentication uses the credentials provided on the Netwrix Recovery Server Configuration + page of the Identity Recovery Setup wizard. See the + [Install the Application](/docs/recoveryforactivedirectory/3.1/install/application.md) topic for additional information. +- For SQL Server authentication, provide SQL credentials in the Account and Password fields. The + account requires Read permissions on the Threat Prevention database. + +**Step 4 –** Click **Test** to test the connection. A message is displayed to indicate if the test +succeeded or failed. + +**Step 5 –** Identity Recovery users do not have access to audit data in Threat Prevention; +hence they cannot view it in Identity Recovery. For this reason, you must specify the account(s) +that have access to Threat Prevention. Only the users that log into Identity Recovery with any of the specified accounts will be able to fetch and view audit and activity data from Threat Prevention for domain objects. + +- Click the Add account access button to add an account. The Add Account Access wizard is displayed. + + ![Add Account Access wizard - Account page](/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page1.png) + +- Enter a user's first or last name, display name, sAMAccountName, or group name in the **Search** + field. As you type, the system will find matches in Active Directory and display the results. + Select the desired user and click **Next**. + + ![Add Account Access wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page2.png) + +- The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use + the Back button to return to a previous page and change any setting. Click **Done** to finish + the wizard. + +The added account is displayed under Account on the Netwrix Integrations page. See the +[Integration with Threat Prevention](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md#integration-with-threat-prevention) topic for additional information. + +**Step 6 –** Click **Save**. + +Integration settings with a Netwrix product are now configured. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md new file mode 100644 index 0000000000..869b286445 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md @@ -0,0 +1,38 @@ +--- +title: "Licensing Page" +description: "Licensing Page" +sidebar_position: 60 +--- + +# Licensing Page + +The Licensing page provides an overview of the organization's license status and the ability to +import a license file. + +Click **Configuration** in the left pane. Then click the **Licensing tab** on the Configuration page +to open the Licensing page. + +![Licensing page](/images/recoveryforactivedirectory/3.1/product/configuration/licensing_configuration.png) + +You can view whether the license is valid and when it will expire. + +## Import a License Key + +Identity Recovery comes with a temporary 14-day trial license. Follow the steps to +import a license key file to continue using the product. + +:::note +Only accounts with administrator role can add a license key. +::: + + +**Step 1 –** Contact your Netwrix Sales Representative to obtain a license key. + +**Step 2 –** On the Licensing page, click the **Select license file...** button to open the file +explorer. + +**Step 3 –** Locate the license key file for Identity Recovery in the file explorer and +click **Open**. The file explorer closes and you return to the console. + +The license key has been successfully imported. The organization’s license information is displayed +on the Licensing page. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md new file mode 100644 index 0000000000..6c7bcb1113 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md @@ -0,0 +1,48 @@ +--- +title: "Notifications Page" +description: "Notifications Page" +sidebar_position: 30 +--- + +# Notifications Page + +The Notifications page allows the configuration of notifications, which is required for sending an +email when a collection (backup) job is completed. Only a user with the administrator role can +configure notifications. + +Click **Configuration** in the left pane. Then click the **Notification tab** on the Configuration +page to open the Notification page. + +![Notifications Page](/images/recoveryforactivedirectory/3.1/product/configuration/notifications_configuration.png) + +Follow the steps to configure notifications. + +**Step 1 –** Select the **Enable** check box to configure email notifications. + +**Step 2 –** In the SMTP Settings section, configure the SMTP server. If the SMTP server does not +require authentication, the Account name and Account password fields can be left blank. + +- SMTP Server – The server and port information +- Account Name – Name of the account to use for accessing the mail server +- Account Password – Password for the account + +**Step 3 –** Select an encryption protocol to encode the email notifications from the Encryption +method drop-down menu. + +**Step 4 –** In the Send Email As section, configure the email address and display name to use for +sending email notifications. + +- Email address – Create an email address to be used, for example: noreply@companyname.com +- Display name – Name to be displayed on the email notifications + +**Step 5 –** Click the **Test** button to verify the notifications are configured correctly. + +**Step 6 –** Click the **Save** button to save the configurations. + +Notifications have been configured in the system. + +:::note +The recipients of the notification can be added from the Domains page. See the +[Add a Domain](domain.md#add-a-domain) topic for additional information. + +::: diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/okta.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/okta.md new file mode 100644 index 0000000000..fd794d72f6 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/okta.md @@ -0,0 +1,102 @@ +--- +title: "Okta Page" +description: "Okta Page" +sidebar_position: 12 +--- + +# Okta Page + +The Okta page provides a list of the Okta tenants backed up by Identity Recovery. It +displays the backup schedule settings for each added Okta tenant. You can also add and configure new Okta tenants. + +Click **Configuration** in the left pane. Then click the **Okta** tab on the Configuration page +to open the Okta tenants page. + +![Tenant Page](/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration.png) + +The table displays the following information: + +- Tenant – Fully-qualified name of the tenant +- Last Collection Time – The most recent time the collection (backup) occurred +- Duration – The time the collection took to complete +- Status – Collection state as idle, waiting, error, or success +- Details – Information about any errors that occurred when the last backup was performed +- Actions – Displays the icons used to collect, edit, and delete the respective domain + + - Run backup – Click the **Play** icon to start a new collection (backup) on the respective + tenant if collection is needed outside of the configured schedule + - Edit configuration – Edit the settings of the tenant. Click the **Edit** icon for a tenant to + open the Edit Tenant Configuration wizard and edit the tenant's settings. See the Edit Tenant + Configuration topic for additional information. + - Delete configuration – Click the Delete icon for a tenant to delete it + +To add a tenant, click the **Add tenant configuration** button. See the Add a Tenant topic for +additional information. + +### Add a Tenant + +To add a tenant, provide tenant details and configure the backup schedule. + +Follow the steps to add a tenant. + +**Step 1 –** Click the **Add tenant configuration** button on the Okta page to launch the Add +Tenant Configuration wizard. + +![Add Tenant Configuration wizard - Okta page](/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page1.png) + +**Step 2 –** Enter a tenant [example.tenant.com] in the Tenant field. + +**Step 3 –** Enter the API key in the Secret field. + +**Step 4 –** Click **Next**. + +![Add Tenant Configuration wizard - Backup Schedule page](/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page2.png) + +**Step 5 –** Select the days of the week in the Run the backup on section to indicate the days when backups will be run. + +**Step 6 –** Select a start time (UTC) in the Start the backup at field to begin the backup. The +default time is 12:00 AM. + +**Step 7 –** In the Repeat every field, enter a frequency, in minutes, to set the time between the start of each backup. Keep in mind the size of the environment when configuring this option. +Click **Next**. + +:::note +If the start time is changed from the default and a frequency is selected (in minutes), +the backups will run at the desired frequency but will skip from midnight until the selected start +time. +::: + +![Add Tenant Configuration wizard - Notifications page](/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page3.png) + +**Step 8 –** To set notifications, select the Send email notifications check box and enter the +email address of one or more users and/or groups to receive the job start and end notifications. Use +a semicolon (;) to separate multiple recipients. See the [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) +topic for additional information. + +If notifications are not desired, skip this step. + +**Step 9 –** Click **Next**. + +![Add Tenant Configuration wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page4.png) + +**Step 10 –** The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use the Back button to return to a previous page and change any setting. Click +**Done** +to finish the wizard. + +A new tenant is added and displayed on the Okta page. + +Backups will begin as scheduled. On the first scheduled instance, a complete backup of the tenant is performed. Then, subsequent backups only include the incremental changes that occurred since the +previous backup. + +### Edit Tenant Configuration + +Follow the steps to edit a tenant. + +**Step 1 –** On the Okta page, click the **Edit configuration** icon for a tenant. The Edit +Tenant Configuration wizard opens. + +**Step 2 –** Modify the desired settings for the tenant configuration + +**Step 3 –** The Confirm page displays a summary of the settings you provided on the pages of the wizard. Use the Back button to return to a previous page and change any setting. Click **Done** to finish the wizard. + +The tenant configuration is updated and backups will resume as scheduled. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/overview.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/overview.md new file mode 100644 index 0000000000..c691862187 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/overview.md @@ -0,0 +1,30 @@ +--- +title: "Configuration Interface" +description: "Configuration Interface" +sidebar_position: 60 +--- + +# Configuration Interface + +The Configuration interface provides access to configure the domains, users and roles, +notifications, integrations, data retention policy, and licensing for Identity Recovery. + +:::note +Only users with Administrator rights have access to the Configuration interface. +::: + + +![Domains Page](/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/config.png) + +The Configuration interface contains the following pages: + +- [Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md) – The Domains page provides a list of the domains backed up by Identity Recovery. It displays the backup schedule settings for each added domain. You can also add and configure new domains. +- [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Forest page lists the domain controllers in the forest, whether backups are enabled for the domain controllers, and the last backup time. +- [Azure Storage Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Azure Storage page lists the storage containers in Azure Storage. +- [Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md) – The Entra page provides a list of the Entra tenants backed up by Identity Recovery. It displays the backup schedule settings for each added Entra tenant. You can also add and configure new Entra tenant. +- [Okta Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/okta.md) – The Okta page provides a list of the Okta tenants backed up by Identity Recovery. It displays the backup schedule settings for each added Okta tenant. You can also add and configure new Okta tenant. +- [Users and Roles Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md) – The Users and Roles page displays the accounts with access to Identity Recovery. +- [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) – The Notifications page allows the configuration of notifications, which is required for sending an email when a collection (backup) job is completed. +- [Netwrix Integrations Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md) – The Netwrix Integrations page provides the ability to configure access to the data in other Netwrix products. At present, only Netwrix Threat Prevention is supported. +- [Data Retention Policy Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/dataretention.md) – The Data Retention Policy page provides settings for deleting backup data that of domains and domain controllers has aged by X number of days, and for deleting backup data for tombstone objects that have been purged. +- [Licensing Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md) – The Licensing page provides an overview of the organization's license status and the ability to import a license file. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md b/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md new file mode 100644 index 0000000000..999a2614ec --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md @@ -0,0 +1,97 @@ +--- +title: "Users and Roles Page" +description: "Users and Roles Page" +sidebar_position: 20 +--- + +# Users and Roles Page + +The Users and Roles page displays the accounts with access to Identity Recovery. + +Click **Configuration** in the left pane. Then click the **Users and Roles tab** on the +Configuration page to open the Users and Roles page. + +![Users and Roles page](/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration.png) + +The table displays the following information: + +- Account – Login username displayed in the [DOMAIN\USERNAME] format for Active Directory accounts +- Type – The type of account, an individual or group account +- Role – The role assigned to the account. + + - Administrator – This role allows full control of Identity Recovery, including + adding domains, configuring notifications, and adding and removing users. It has access to the + Configuration node in the left navigation pane of the application. + - Operator – This role allows access to the Active Directory and Forest nodes, and can perform + rollback and recovery tasks for domains and forests through the Recovery Console. + +- Action – Actions that can be performed on user accounts + + - Remove – Click **Remove** to remove the respective user or group from console access. See the + Remove a User or Group topic for additional information. + +### Add a User or Group + +Follow the steps to add a user or group that can log into the Recovery Console. If a group is added +all its members can log in. + +**Step 1 –** Click the **Add Account Role** button on the Users and Roles page. The Add Account Role +wizard opens. + +![Add Account Role wizard – Account page](/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page1.png) + +**Step 2 –** Enter a user's first or last name, display name, sAMAccountName, or group name in the +**Search** field. As you type, the system will find matches in Active Directory and display the +results. + +**Step 3 –** Select the desired user and click **Next**. + +![Add Account Role wizard – Role page](/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page2.png) + +**Step 4 –** Select the Administrator or Operator role for the account from the **Role** drop-down +menu. + +- Administrator – This role allows full control of Identity Recovery, including adding + domains, configuring notifications, and adding and removing users. It has access to the + Configuration node in the left navigation pane of the application. +- Operator – This role allows access to the Active Directory and Forest nodes, and can perform + rollback and recovery tasks for domains and forests through the Recovery Console. + +**Step 5 –** Click **Next**. + +![Add Account Role wizard – Confirm page](/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page3.png) + +**Step 6 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +The selected user or group is now added to the table with the specified role. + +## Change the Role Assigned to an Account + +Follow the steps to change the role assigned to an account. + +:::note +This action is only available for manually added accounts and not for the default account. +::: + +**Step 1 –** On the Users and Roles page, click the row for an account to make it editable. + +**Step 2 –** Then use the drop-down menu in the Role column to select a different role for the +account. + +### Remove a User or Group + +Follow the steps below to remove a user's or group's access to the Recovery Console. + +:::note +This action is only available for manually added accounts and not for the default account. +::: + +**Step 1 –** On the Users and Roles page, locate the user or group for whom to remove access. + +**Step 2 –** Click the **Remove** button to remove that user or group from the table. + +**Step 3 –** Click **OK** to confirm the action. + +The user's or group's access to Identity Recovery is removed. diff --git a/docs/recoveryforactivedirectory/3.1/admin/configuremfa.md b/docs/recoveryforactivedirectory/3.1/admin/configuremfa.md new file mode 100644 index 0000000000..fcfa617a0f --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/configuremfa.md @@ -0,0 +1,61 @@ +--- +title: "Configure Multi-Factor Authentication" +description: "Configure Multi-Factor Authentication" +sidebar_position: 20 +--- + +# Configure Multi-Factor Authentication + +You can configure multi-factor authentication (MFA) for your Identity Recovery account +to add an additional layer of security when signing into the application. + +:::note +At present, only authenticator apps are supported for MFA. As a prerequisite to enabling MFA, install +an authenticator app—such as Google Authenticator or Microsoft Authenticator—on your phone. +::: + + +## Enable Authenticator for MFA + +Follow the steps to enable the authenticator option for MFA. + +![Enable MFA page](/images/recoveryforactivedirectory/3.1/product/mfa_enable.png) + +**Step 1 –** In the Recovery Console, click your profile icon in the top right corner of the page +and select **Manage**. The MFA page opens. + +**Step 2 –** Click the **Add authenticator app** button. The Configure authenticator app page is +displayed, showing the instructions for setting up the app. + +![Configure authenticator app page](/images/recoveryforactivedirectory/3.1/product/mfa_authenticator.png) + +**Step 3 –** Open the authenticator app on your phone and scan the QR code with it. A new account is +created in the app for the Recovery application and a verification code is displayed under the +account name. + +**Step 4 –** Enter this code in the Verification Code field on the Configure authenticator app page +and click **Verify**. A confirmation message is displayed on success. + +The authenticator app generates a new code every 30 seconds, with each code expiring after 30 +seconds. + +**Step 5 –** Click **Close**. + +MFA has been enabled for your account. Now you must authenticate your account using the +Authenticator app every time you sign into Identity Recovery. See the +[Sign In](/docs/recoveryforactivedirectory/3.1/install/login.md#sign-in) topic for additional information. + +## Disable Authenticator for MFA + +Follow the steps to disable MFA for your Identity Recovery account. + +![Disable MFA page](/images/recoveryforactivedirectory/3.1/product/mfa_disable.png) + +**Step 1 –** In the Recovery Console, click your profile icon in the top right corner of the page +and select **Manage**. The MFA page opens. + +**Step 2 –** Click **Disable 2FA**. A confirmation message is displayed. Click **Disable 2FA** to +disable multi-factor authentication or **Cancel** to leave it enabled. + +On disabling MFA, the page displays a confirmation message and there is an option to enable it +again. diff --git a/docs/recoveryforactivedirectory/3.1/admin/entraid/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/entraid/_category_.json new file mode 100644 index 0000000000..f634addeed --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/entraid/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Entra ID Page", + "position": 41, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md b/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md new file mode 100644 index 0000000000..e7bc181bbc --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md @@ -0,0 +1,46 @@ +--- +title: "Entra ID Page" +description: "Entra ID Page" +sidebar_position: 41 +--- + +# Entra ID Page + +On the Entra ID page, you can access all the Entra tenants that you have configured through the +[Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md). + +Click **Entra ID** in the left pane to open the Entra ID page. + +![Entra ID page](/images/recoveryforactivedirectory/3.1/product/entra_id/entra_id.png) + +Select a tenant from the drop-down menu and expand it to view the domain tree and container +structure, which is exactly the same as you get in Active Directory Users and Computers. Objects in +the domain are also available in the same hierarchical structure. + +The page displays the following information: + +- Name – The display name of the object +- Description – A description of the object +- Backup Time – The date and time of the last the backup + +You can perform the rollback and recover operations for objects. + +Search for an Object + +There are several ways to find an object: + +- Column Filters – Click a column header to organize the table alphabetically by the column header. + An arrow appears by the column name. Use it to arrange the entries by ascending or descending + order. +- Search box – Enter a text string in the search box to filter the table for results that contain + the text. + +Rollback an Object + +Select and expand a tenant in the left pane and locate the object you want to rollback. Right-click +this object and select **Rollback** on the menu. See the [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/entraid/rollback.md) topic for additional information. + +Recover Deleted Objects + +On expanding a tenant in the left pane, you will notice a Recycle Bin. This is a virtual container specific to Identity Recovery. Use the Recycle Bin to recover deleted objects in Entra. See the [Recover Objects](/docs/recoveryforactivedirectory/3.1/admin/entraid/recover.md) topic for +additional information. diff --git a/docs/recoveryforactivedirectory/3.1/admin/entraid/recover.md b/docs/recoveryforactivedirectory/3.1/admin/entraid/recover.md new file mode 100644 index 0000000000..8ae18deee9 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/entraid/recover.md @@ -0,0 +1,40 @@ +--- +title: "Restore Objects" +description: "Restore Objects" +sidebar_position: 11 +--- + +# Restore Objects + +You can revert an Entra ID object to its previous state. + +Follow the steps to restore an Entra ID object. + +**Step 1 –** Click Entra ID in the left pane to open the +[Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md). + +**Step 2 –** Select and expand a tenant in the left pane and locate the object you want to restore from the Deleted Objects container. + +![Object Restore wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore.png) + +**Step 3 –** Do one of the following: + +- Select the object to restore and click the **Restore** button. +- Right-click the object and select **Restore** on the shortcut menu. + +The Object Restore wizard opens. + +![Object Restore wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page1.png) + +**Step 4 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +![Object Restore wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page2.png) + + +**Step 5 –** A completed message is displayed when the rollback is successful. Click **OK**. + +![Object Restore Sucessful message](/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_finished.png) + +The object has been restored. diff --git a/docs/recoveryforactivedirectory/3.1/admin/entraid/rollback.md b/docs/recoveryforactivedirectory/3.1/admin/entraid/rollback.md new file mode 100644 index 0000000000..0e3b3882d6 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/entraid/rollback.md @@ -0,0 +1,39 @@ +--- +title: "Rollback Objects" +description: "Rollback Objects" +sidebar_position: 10 +--- + +# Rollback Objects + +You can revert an Entra ID object to its previous state. + +Follow the steps to roll back an Entra ID object, including user accounts, groups, and +organizational units. + +**Step 1 –** Click Entra ID in the left pane to open the +[Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md). + +**Step 2 –** Select and expand a tenant in the left pane and locate the object you want to rollback. + +**Step 3 –** Do one of the following: + +- Select the object to rollback and click the **Rollback** button. +- Right-click the object and select **Rollback** on the shortcut menu. + +The Object Rollback wizard opens. + +![Object Rollback wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page1.png) + +**Step 4 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +![Object Rollback wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page2.png) + + +**Step 5 –** A completed message is displayed when the rollback is successful. Click **OK**. + +![Object Rollback Sucessful message](/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_finished.png) + +The object has been rolled back. diff --git a/docs/recoveryforactivedirectory/3.1/admin/forest/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/forest/_category_.json new file mode 100644 index 0000000000..dfc0dd5d25 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/forest/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Forest Page", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "forest" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md b/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md new file mode 100644 index 0000000000..da454297e1 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md @@ -0,0 +1,198 @@ +--- +title: "Forest Page" +description: "Forest Page" +sidebar_position: 50 +--- + +# Forest Page + +The Forest page allows administrators to: + +- Configure and manage backups for domain controllers in a forest +- Carry out a forest recovery + +> +> You must add a forest first. See the [Add a Forest](/docs/recoveryforactivedirectory/3.1/admin/configuration/forest.md) topic for additional +> information. + +You can view the domain controllers in the forest and verify whether backups are +enabled for the domain controllers. You can also view the forest tree, +which represents the structure of the forest and its domains. + +Click **Forest** in the left pane to open the Forest page. + +> ![Forest Configuration page](/images/recoveryforactivedirectory/3.1/product/forest/forest.png) + + +The domains in the configured forests are shown in a hierarchal tree. The domain controllers for the +selected forest are shown in the adjacent pane, with information such as backup status and last +backup times. + +Expand a forest to view the domains under it. On selecting a domain, the domain controllers in the +domain are displayed in the adjacent pane. + +The following information is displayed for a domain controller: + +- Name – Name of the domain controller +- Operating System – Operating system for the domain controller, for example, Windows Server 2019 + Standard +- Agent Version – Version of the operating system +- Backup – Use the toggle button to enable or disable the backup for the domain controller. By + default, it is disabled. When you enable it, the Server backup Configuration wizard is displayed. + See the + [Add Backup Configurations for a Domain Controller](#add-backup-configurations-for-a-domain-controller) + topic to configure backup settings for the domain controller. +- Last Backup Time – Date and time when the last backup occurred +- Actions – Displays the following icons: + + - Start Backup – Starts a backup of the server on demand + - Edit Configuration – Launches the Server Backup Configuration wizard, enabling you to modify + the backup configurations for the domain controller + - Add Domain Controller to Restore Playbook – Adds the domain controller to the recovery + playbook. See the [Create a Recovery Playbook](recover#create-a-recovery-playbook) topic for + additional information. + + This is the only action displayed for a domain controller that has not been backed up. + + +## Add Backup Configurations for a Domain Controller + +When you configure backup settings for a domain controller, the system automatically installs the +Netwrix Server Backup Configuration agent on that domain controller. + +:::note +Ensure that the domain controller has the firewall rules configured before configuring +backup settings for it. See the +[Firewall Rules for Forest Server Backups](/docs/recoveryforactivedirectory/3.1/requirements/firewallrules.md) topic for additional +information. +::: + +Follow the steps to specify backup settings for a domain controller. + +**Step 1 –** On the Forest page, select a forest to view the domain controllers in it. To locate a +domain controller in a specific domain, expand the forest in the left pane and select a domain. The +adjacent pane displays the domain controllers in that domain. + +**Step 1 –** Enable the Backup toggle button for a domain controller to launch the Server Backup +Configuration wizard. + +![Server Backup Configuration wizard - Server page](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page1.png) + +**Step 2 –** In the Server field, the domain controller to be backed up is displayed as read-only in +the following format: server.domain.com. + +**Step 3 –** Specify an account to validate the server, install the Netwrix Server Backup +Configuration agent there, and perform server backups. This account must have read and write access +to a shared network location for storing the backups. (You will specify this network share location +on the Options page of this wizard.) + +- In the Account field, enter the username of an account to write the backup data of the domain + controller to the network share of the destination server in the following format: domain\account. +- Enter the password for the account in the Password field. + +:::note +The backup data is first stored locally on the server and copied to the storage location +using this account. +::: + +**Step 4 –** Click **Next**. + +![Server Backup Configuration wizard - Schedule page](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page2.png) + +**Step 5 –** Select the days of the week in the Run the backup on section to indicate the days when +backups will be run. + +**Step 6 –** Select a start time (UTC) in the Start the backup at field to begin the backup. The +default time is 12:00 AM. + +**Step 7 –** Click **Next**. + +![Server Backup Configuration wizard - Options page](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page3.png) + +**Step 9 –** In the Specify where you would like to store the backup data field, enter a path to a +network share on the domain controller to store the backup data. + +:::note +The path must be a network share. Do not provide the path to a local drive for storing the +backup. Doing so will prevent the system from restoring the domain using the playbook mechanism. +::: + +**Step 10 –** Click **Next**. + +![Server Backup Configuration wizard - Options page](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page4.png) + +**Step 11 –** The file can be encrypted by selecting the **Encrypt the generated backup data** +checkbox and entering a password. + +**Step 12 –** By default, backups are compressed. Clear the Compress the generated backup data +checkbox to uncompress the generated backup file. + +**Step 13 –** Click **Next**. + +![Server Backup Configuration wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page5.png) + +**Step 14 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Complete** +to finish the wizard. + +![Server Backup Configuration Saved](/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_finished.png) + +**Step 15 –** The Server backup configuration has been saved. Click **OK**. + +The domain controller will now be backed up according to the configured schedule. A backup can also +be initiated on demand from the Recovery Console. + +## Backup Files + +The backup of a domain controller is stored on a network share in the environment and includes all +essential data from the domain controller, ensuring that the entire forest can be restored in the +event of a disaster. The backup includes: + +- The Active Directory database (ntds.dit) +- Log files +- System hive of the registry +- The sysvol container + +## Disable Server Backup for a Domain Controller + +If you do not want a domain controller to be backed up, simply disable the backup for it. + +**Step 1 –** On the Forest page, select a forest to view the domain controllers in it. To locate a +domain controller in a specific domain, expand the forest in the left pane and select a domain. The +adjacent pane displays the domain controllers in that domain. + +**Step 2 –** Disable the Backup toggle button for a domain controller to disable its backup. + +On disabling the backup for a domain controller, all backup configuration saved earlier are lost. +However, any older backups are not deleted. + +To re-enable the backup for a domain controller, you have to perform all steps of the Server Backup +Configuration wizard again. + +## Domain Controller Backup History + +You can view the backup history for a domain controller, which includes information on all previous +domain controller backups. + +Follow the steps to view the backup history for a domain controller. + +**Step 1 –** On the Forest page, select a forest to view the domain controllers in it. To locate a +domain controller in a specific domain, expand the forest in the left pane and select a domain. The +adjacent pane displays the domain controllers in that domain. + +**Step 2 –** Click the arrow next to the name of a domain controller to expand it. + +![Forest Server Backup History](/images/recoveryforactivedirectory/3.1/product/forest/backup_history.png) + +On expanding a domain controller, you can view a list of backups for it. The following information +is displayed for each backup: + +- Backup Time – Date and time the backup was created +- Location – The network share path where the backup file is stored on the domain controller +- Size – The size of the backup file +- Status – Progress status of the backup; Queued, Running, or Finished +- Encrypted – Displays if the backup file is encrypted (True) or not encrypted (False) + +## Forest Recovery + +See the [Recover a Forest](/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md) topic for information on how to recover a forest. diff --git a/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md b/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md new file mode 100644 index 0000000000..c9668c6579 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md @@ -0,0 +1,169 @@ +--- +title: "Recover a Forest" +description: "Recover a Forest" +sidebar_position: 10 +--- + +# Recover a Forest + +You can recover a forest using the domain controller backups generated by Identity Recovery. A restore playbook, also called a recovery playbook, is used to restore a forest. Once the desired domain controllers have been added to the restore playbook, the forest recovery process can be initiated and the forest will be restored using the automated process provided by Identity Recovery. + +## Use Cases for Restoring Domain Controller Backups + +Administrators may need to bring a forest backup created by Identity Recovery online in +the following scenarios: + +- Stand up a duplicate of a domain controller, for example, stand up a duplicate in a lab + environment for testing purposes +- Restore a server or domain controller to a specific state-in-time image +- Restore lost or deleted data + +## Prerequisites + +To perform a forest recovery, the following prerequisites must be in place: + +- Configure backups for one or more domain controllers in each domain in a forest. +- Next, ensure that backups run as scheduled. You can also force-run a backup. + +See the [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md) topic for additional information. + +## Recover a Forest + +Follow the steps to recover a forest. + +- **Step 1 –** Prepare an isolated environment to restore the forest to. + + See the [Target Server Considerations](/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md) topic to understand the requirements for a target environment and target servers for restoring domain controllers. + +- **Step 2 –** Add the desired domain controllers to create a recovery playbook, also called a + restore playbook. + + For example, if you have a forest with one root domain and four child domains, you can add one + domain controller from the root domain and one from each of the child domains to the recovery + playbook, and restore your forest. + +- **Step 3 –** When your playbook is complete, use the "Start" command to start the forest recovery + process. + +The following restore capabilities are supported: + +- VM DC backup to VM +- VM DC backup to Physical +- Physical DC backup to VM +- Physical DC backup to Physical DC + +## Create a Recovery Playbook + +A recovery playbook is a list of domains and domain controllers for those domains that you want to +restore to an isolated environment. Ideally it should be a physical environment but a virtual +environment can work too. For example, you can choose a Hyper-V or a VMware environment hosted in +Azure or AWS, and isolated from the rest of the domain. + +Once the desired domain controllers have at least one backup to choose from, you can start the +forest recovery playbook by adding the domain controllers to it. + +:::note +You only need one backup of a domain controller for each domain in the forest. Any other +domains can then be added via the playbook or you should handle them manually using the "add DC to +the domain, let replication happen" model. +::: + +Follow the steps to create a recovery playbook. + +**Step 1 –** Click **Forest** in the left pane to open the Forest page. + +**Step 2 –** On the Forest page, select a forest to view the domain controllers in it. To locate a +domain controller in a specific domain, expand the forest in the left pane and select a domain. The +adjacent pane displays the domain controllers in that domain. + +**Step 3 –** Click the **Add Domain Controller to Restore Playbook** icon (**+**) for a domain +controller to add it to the recovery playbook. The Add to Recovery Playbook wizard opens, where you +can specify the restore settings for the domain controller. + +![Add to Recovery Playbook wizard - Domain Controller page](/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page1.png) + +**Step 4 –** On the Domain Controller page, the Source Domain Controller section displays +information for the domain controller that is being added to the playbook. It displays the domain it +is deployed to, its name, operating system, and the date and time of the most recent backup. + +In the Target Server section: + +- In the **Server** field, enter the IP address of the target server where you want to restore the + domain controller from the backup. +- Provide the credentials of an account in the Account and Password fields. This must be an + administrator account for the target server. + +See the +[Target Server and Operating System Requirements](/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md#target-server-and-operating-system-requirements) +topic for additional information. + +**Step 5 –** Click **Next**. + +![Add to Recovery Playbook wizard - Options page](/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page2.png) + +**Step 6 –** From the **Backup** drop-down menu, select the backup to use for restoring the domain +controller. The drop-down menu lists the backups available for the domain controller. + +:::note +If you do not choose a backup for a domain controller, an attempt will be made to join the +domain controller to the existing domain that was restored previously in the playbook using a backup +of another domain controller. +::: + +**Step 7 –** If the backup is encrypted, provide the password used for encryption in the Encryption +Password field. This would allow the recovery process to decrypt the backup. + +**Step 8 –** From the **Roles** drop-down menu, select the FSMO role(s) the domain controller will +acquire when it is restored. You can: + +- Select the Acquire All Roles option to assign all FSMO roles to the domain controller. +- Select one or more FSMO roles to assign to the domain controller. All five FSMO roles are listed. +- Select Restore original roles to retain the previously assigned roles that are defined in the + backup. +- Select Do not assign any roles if you do not want to assign any role to the domain controller. + This option is selected by default, because the first domain controller in your domain + automatically acquires all the FSMO roles. + +**Step 9 –** In the DSRM Password field, set the Directory Services Restore Mode (DSRM) password for +the to-be-restored domain controller. + +**Step 10 –** Click **Next**. + +![Add to Recovery Playbook wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page3.png) + +**Step 11 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Complete** +to finish the wizard. + +The playbook has been created with the domain controller added to it. + +Repeat this process for all the domain controllers you wish to restore in the target environment. +When you add another domain controller, it appears as a new tab added to the playbook. Click the tab +representing a domain controller to view its details. + +![Recovery Playbook created on the Forest Page](/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_finished.png) + +The following information is displayed for a domain controller in the playbook: + +- Original Server – The name of the server that you added to the playbook for restore +- Target Server – The server where the domain should be restored +- Domain – The domain the domain controller belongs to +- Operating System – The operating system of the original server (the domain controller to be + restored) +- Version – The operating system of the original server (the domain controller to be restored) +- Roles – The FSMO role(s) the domain controller will acquire when restored +- Backup Time – the date and time of the backup that will be restored for the domain controller + +### Run the Recovery Playbook + +When your playbook is ready, click **Start** to initiate the forest recovery process. The machine +will reboot once the recovery process is complete + +Your new forest is ready for you to log in using any Administrator credentials from the forest. + +Notice that the Forest page displays the operations performed during the restore process. + +![Forest page showing a restored forest](/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_playbook_finished.png) + +From here, you can proceed to restore additional domain controllers or promote new ones to the +forest. diff --git a/docs/recoveryforactivedirectory/3.1/admin/navigation.md b/docs/recoveryforactivedirectory/3.1/admin/navigation.md new file mode 100644 index 0000000000..440c9d204d --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/navigation.md @@ -0,0 +1,56 @@ +--- +title: "Navigate the Console" +description: "Navigate the Console" +sidebar_position: 10 +--- + +# Navigate the Console + +In the Recovery Console, navigation options are displayed in the: + +- Application header +- Left navigation pane + +![Navigation Options in the Recovery Console](/images/recoveryforactivedirectory/3.1/product/dashboard.png) + +## Application Header + +The application header contains the following icons in the top right corner: + +- Help Center – Click the **?** icon to open the + [](https://helpcenter.netwrix.com/)[Netwrix Technical Knowledge Center](https://helpcenter.netwrix.com/) + for the Identity Recovery documentation +- User Profile – On clicking the profile icon, the following options are displayed: + + - Manage – Click it to open the MFA page, where you can set up multi-factor authentication for + your Identity Recovery account. See the + [Configure Multi-Factor Authentication](/docs/recoveryforactivedirectory/3.1/admin/configuremfa.md) topic for additional information. + - Log out – Click it to sign out of the Recovery Console + +## Navigation Pane + +The navigation pane contains the following links: + +- [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Active Directory page lists the domains configured in Identity Recovery. You can perform object rollback and recovery operations on this page. +- [Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/entraid/overview.md) – The Active Directory page lists the domains configured in Identity Recovery. You can perform object rollback and recovery operations on this page. +- [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md) – The Forest page displays your Active Directory forest with its domains and domain controllers. Administrators can set up backup configurations for domain + controllers as well as recover the forest from those backups. +- [Audit Logs Page](/docs/recoveryforactivedirectory/3.1/admin/audit.md) – The Audit Logs page provides an audit trail of the actions performed by users in Identity Recovery. +- [Configuration Interface](/docs/recoveryforactivedirectory/3.1/admin/configuration/overview.md) – The Configuration interface provides access to configure the domains, users and roles, notifications, integrations, data retention policy, and licensing for Identity Recovery. +- [Utilities Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Active Directory page lists the domains configured in Identity Recovery. You can perform object rollback and recovery operations on this page. + + :::note + Only users with Administrator rights have access to the Configuration interface. + ::: + + - [Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md) – The Domains page provides a list of the domains backed up by Identity Recovery. It displays the backup schedule settings for each + added domain. You can also add and configure new domains. + - [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Forest page lists the domain controllers in the forest, whether backups are enabled for the domain controllers, and the last backup time. + - [Azure Storage Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) – The Azure Storage page lists the storage containers in Azure Storage. + - [Entra ID Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/entraid.md) – The Entra page provides a list of the Entra tenants backed up by Identity Recovery. It displays the backup schedule settings for each + added Entra tenant. You can also add and configure new Entra tenant. + - [Users and Roles Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md) – The Users and Roles page displays the accounts with access to Identity Recovery. + - [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) – The Notifications page allows the configuration of notifications, which is required for sending an email when a collection (backup) job is completed. + - [Netwrix Integrations Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md) – The Netwrix Integrations page provides the ability to configure access to the data in other Netwrix products. At present, only Netwrix Threat Prevention is supported. + - [Data Retention Policy Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/dataretention.md) – The Data Retention Policy page provides settings for deleting backup data that of domains and domain controllers has aged by X number of days, and for deleting backup data for tombstone objects that have been purged. + - [Licensing Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md) – The Licensing page provides an overview of the organization's license status and the ability to import a license file. diff --git a/docs/recoveryforactivedirectory/3.1/admin/okta/_category_.json b/docs/recoveryforactivedirectory/3.1/admin/okta/_category_.json new file mode 100644 index 0000000000..d14e3bb3e3 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/okta/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Okta Page", + "position": 41, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} diff --git a/docs/recoveryforactivedirectory/3.1/admin/okta/overview.md b/docs/recoveryforactivedirectory/3.1/admin/okta/overview.md new file mode 100644 index 0000000000..d54dbd77aa --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/okta/overview.md @@ -0,0 +1,41 @@ +--- +title: "Okta Page" +description: "Okta Page" +sidebar_position: 41 +--- + +# Okta Page + +On the Okta page, you can access all the Okta tenants that you have configured through the +[Okta Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/okta.md). + +Click **Okta** in the left pane to open the Okta page. + +![Okta page](/images/recoveryforactivedirectory/3.1/product/okta/okta.png) + +Select a tenant from the drop-down menu and expand it to view the supported object types. + +The page displays the following information: + +- Name – The display name of the object +- Description – A description of the object +- Backup Time – The date and time of the last the backup + +You can perform the rollback operations for objects. + +Search for an Object + +There are several ways to find an object: + +- Column Filters – Click a column header to organize the table alphabetically by the column header. + An arrow appears by the column name. Use it to arrange the entries by ascending or descending + order. +- Search box – Enter a text string in the search box to filter the table for results that contain + the text. + +Rollback an Object + +Select and expand a tenant in the left pane and locate the object you want to rollback. Right-click +this object and select **Rollback** on the menu. See the [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/okta/rollback.md) topic for additional information. + + diff --git a/docs/recoveryforactivedirectory/3.1/admin/okta/rollback.md b/docs/recoveryforactivedirectory/3.1/admin/okta/rollback.md new file mode 100644 index 0000000000..13f7e553c6 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/okta/rollback.md @@ -0,0 +1,39 @@ +--- +title: "Rollback Objects" +description: "Rollback Objects" +sidebar_position: 10 +--- + +# Rollback Objects + +You can revert an Okta object to its previous state. + +Follow the steps to roll back an Okta object, including users, groups, and +devices. + +**Step 1 –** Click Okta in the left pane to open the +[Okta Page](/docs/recoveryforactivedirectory/3.1/admin/okta/overview.md). + +**Step 2 –** Select and expand a tenant in the left pane and locate the object you want to rollback. + +**Step 3 –** Do one of the following: + +- Select the object to rollback and click the **Rollback** button. +- Right-click the object and select **Rollback** on the shortcut menu. + +The Object Rollback wizard opens. + +![Object Rollback wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page1.png) + +**Step 4 –** The Confirm page displays a summary of the settings you provided on the pages of the +wizard. Use the Back button to return to a previous page and change any setting. Click **Done** +to finish the wizard. + +![Object Rollback wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page2.png) + + +**Step 5 –** A completed message is displayed when the rollback is successful. Click **OK**. + +![Object Rollback Sucessful message](/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_finished.png) + +The object has been rolled back. diff --git a/docs/recoveryforactivedirectory/3.1/admin/overview.md b/docs/recoveryforactivedirectory/3.1/admin/overview.md new file mode 100644 index 0000000000..f4506c0cd7 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/admin/overview.md @@ -0,0 +1,37 @@ +--- +title: "Administration" +description: "Administration" +sidebar_position: 40 +--- + +# Administration + +Identity Recovery enables administrators to manage Active Directory in the following ways: + +- Perform Object-level Rollback and Recovery + + - Add Domains – Add an Active Directory domain and configure a backup schedule for it + - Rollback Objects – Quickly revert entire AD objects or just a single attribute to a known good + state from a backup + - Recover Objects – Restore tombstone objects to active state using the backup data. Recover + object attributes, group membership, DNS entries, Group Policy objects (GPOs) and more, thus + overcoming key limitations of the Recycle Bin. + +- Perform Forest Backup and Recovery + + - Add Forests – Add a forest and then configure a backup schedule for each of the domain + controllers in it + - Recover a Forest – In the event of a disaster scenario (ransomware, complete hardware failure, + etc.), leverage the backups with the automation capabilities in the product to restore the + forest back to its fully functional state prior to the disaster + +- View Audit Log – Track the actions performed by users in Identity Recovery +- Integrate with Netwrix products – Fetch specific data from other Netwrix products, such as Threat + Prevention, to display in Identity Recovery + +## DNS Records + +DNS records must be stored in Active Directory in order to backup, restore, and view DNS objects in +Identity Recovery. See the Microsoft +[Change the Zone Type](https://technet.microsoft.com/en-us/library/cc771150(v=ws.11).aspx) article +for additional information. diff --git a/docs/recoveryforactivedirectory/3.1/gettingstarted.md b/docs/recoveryforactivedirectory/3.1/gettingstarted.md new file mode 100644 index 0000000000..3c0df564ce --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/gettingstarted.md @@ -0,0 +1,54 @@ +--- +title: "Getting Started" +description: "Getting Started" +sidebar_position: 4 +--- + +# Getting Started + +This topic provides information on installing and configuring Netwrix Identity Recovery, +which enables organizations to quickly and easily roll back and recover unintended directory +changes. + +## Installation Requirements + +Before installing Identity Recovery, review the recommended configuration of the servers needed to install this product in a production environment. See the [Requirements](/docs/recoveryforactivedirectory/3.1/requirements/overview.md) topic for additional information. + +## Installation + +Install and configure Identity Recovery. See the +[Install the Application](/docs/recoveryforactivedirectory/3.1/install/application.md) topic for additional information. + +:::note +Installing the server automatically installs the RSAT Extension locally. +::: + +## First Launch + +Launch Identity Recovery using the desktop icon and sign in with the administrator role +account that was configured during installation. See the [First Launch](/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md) topic for additional information on signing in for the first time. + +## Initial Configuration + +Several Identity Recovery components require configuration after the first launch of the product. + +- Configure Domain Backup – Configure a domain and backup settings. It is recommended to start a backup of the domain after + configuring it. See the [Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md) topic for additional information on configuring a domain to backup. +- Configure Forest Backup – Configure a forest and then configure backup settings for domain + controllers in the forest. It is recommended a start a backup of the domain controllers after + configuring backup settings. See the [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md) topic for additional information on configuring a domain controller backup. +- _(Optional)_ Install RSAT Extension on Additional Servers – The `RSAT Extension.msi` is + automatically installed with the Identity Recovery application on the application + server. The extension can also be installed on other servers where ADUC is installed. See the + [Install the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/installation.md) topic for additional information. +- Configure Additional Users – The user or group configured during installation of the product has + administrator access to the Recovery Console. Additional users and groups can be added and + assigned roles. See the [Users and Roles Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/roles.md) topic for additional information. +- _(Optional)_ Configure Notifications – Email notifications require configuration before they can + be enabled. See the [Notifications Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/notifications.md) topic for additional information on configuring email notifications. + +## Rollback and Restore Operations + +Now that the initial configuration of Identity Recovery is complete and backups have +been created, you can rollback and recover Active Directory objects, as well as restore domain +controllers. diff --git a/docs/recoveryforactivedirectory/3.1/index.md b/docs/recoveryforactivedirectory/3.1/index.md new file mode 100644 index 0000000000..45a76ccd80 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/index.md @@ -0,0 +1,24 @@ +--- +title: "Netwrix Identity Recovery v3.1" +description: "Netwrix Identity Recovery v3.1" +sidebar_position: 1 +--- + +# Netwrix Identity Recovery v3.1 + +A single improper change to Microsoft Active Directory, whether accidental or deliberate, can lead +to disaster. + +- Alter the wrong Group Policy setting and suddenly users are free to install ransomware on their + machines or copy data to USB drives. +- Make the wrong person a member of an Active Directory group and they’ll be able to read, access or + delete files they shouldn’t. +- Delete the wrong account and an essential business process might come to a halt. + +Even more devastating, a cyberattack, hardware failure, internal error, or natural calamity can +bring down your entire Active Directory forest. + +Native tools don’t make it easy to revert these critical changes — but Netwrix Identity Recovery +does. Administrators can quickly rollback and recover Active Directory objects or just a +single attribute to a known good state, with little to no downtime. They can also restore a domain +controller or an entire forest to a specific state-in-time image. diff --git a/docs/recoveryforactivedirectory/3.1/install/_category_.json b/docs/recoveryforactivedirectory/3.1/install/_category_.json new file mode 100644 index 0000000000..f87e537fff --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Installation", + "position": 30, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/install/application.md b/docs/recoveryforactivedirectory/3.1/install/application.md new file mode 100644 index 0000000000..efa1e4916c --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/application.md @@ -0,0 +1,148 @@ +--- +title: "Install the Application" +description: "Install the Application" +sidebar_position: 10 +--- + +# Install the Application + +The following components are installed by the Identity Recovery installation package: + +- Netwrix Recovery Server +- Netwrix Recovery Web Console – Installed on the Recovery Application Server and used to perform + the operations the application offers +- RSAT Extension – Installed on the Recovery Application Server automatically. You can manually + install it on a remote machine to add the object rollback and restore functions to the Active + Directory Users and Computers console on that machine. +- Recovery Configuration Utility – Installed on the Recovery Application Server and used to register + the RSAT Extension on the server. It also provides the option to update the SQL database password. + +During a fresh installation, it is possible to modify both or either the application installation +directory and the SQL Server database location. The application installation directory can be +modified through the Destination Folder page in the Identity Recovery Setup Wizard. + +:::note +The `msoledbsql.msi` must be installed on the machine the Recovery Application Server will +be installed on, prior to installing the Recovery Application Server. This allows the Recovery +Application Server to connect with the SQL Server. If it is not installed, the installer fails on +the SQL Server Configuration page. The +[Microsoft OLE DB Driver for SQL Server](https://www.microsoft.com/en-us/download/details.aspx?id=56730) +can be downloaded directly from Microsoft. +::: + + +Follow the steps to install Identity Recovery. + +**Step 1 –** Run the `NetwrixRecovery_Setup.exe` executable as an administrator to launch the +Identity Recovery Setup wizard. + +![Recovery for Active Directory Setup wizard - Initial EULA page](/images/recoveryforactivedirectory/3.1/product/installers/product-installer.png) + +**Step 2 –** On the Netwrix Identity Recovery page, read the End User License Agreement. +Then check the **I agree to the license terms and conditions** checkbox and click **Install**. + +The Setup Progress page displays the setup progress bar and then the Welcome page is displayed. + +![Installation Welcome Page](/images/recoveryforactivedirectory/3.1/product/installers/installer_page1.png) + +**Step 3 –** On the Welcome page of the Identity Recovery Setup wizard, click Next to +begin the installation. + +![Installation Destination Folder Page](/images/recoveryforactivedirectory/3.1/product/installers/installer_page2.png) + +**Step 4 –** On the Destination Folder page, confirm the destination path where the wizard will +install Identity Recovery. The default installation location is: + +C:\Program Files\Netwrix\Identity Recovery\ + + +![Installation License File Page](/images/recoveryforactivedirectory/3.1/product/installers/installer_page3.png) + +**Step 5 –** On the License File page, select the licensing option for your installation. + +- Trial license – Use the 14-day license key that comes packaged with the Identity Recovery installation +- License file – Map to a customer license key file by clicking **Browse** and selecting the license + file with the name ending in **.key** + +Click Next. + +![Installation SQL Server Configuration](/images/recoveryforactivedirectory/3.1/product/installers/installer_page4.png) + +**Step 6 –** On the SQL Server Configuration page, specify the SQL server and credentials to use for +database communication. + +- SQL Server – Enter the SQL Server fully-qualified DNS location name or IP address of the SQL + Server machine. +- Choose between Windows Authentication or SQL Server Authentication credentials. If SQL Server + Authentication is selected, provide the login credentials for the provisioned account. Ensure that + this account has access to read and write to the tables with permissions to execute stored + procedures. + +:::note +Windows authentication will use the credentials of the account running the installer. Once the database +is created, Windows authentication will use the credentials of the account specified for the Identity Recovery service on the Netwrix Recovery Server Configuration page of the wizard. +::: + + +Click **Next**. + +![Installation SQL Server Database Name](/images/recoveryforactivedirectory/3.1/product/installers/installer_page5.png) + +**Step 7 –** On the SQL Server Database page, specify the SQL Server database to use. Use the +default database name or provide a unique, descriptive name in the box. Click **Next** to continue. + +![serverconfiguration](/images/recoveryforactivedirectory/3.1/product/installers/installer_page6.png) + +**Step 8 –** On the Netwrix Recovery Server Configuration page, enter the port and credentials to be +used for running the application server. + +- Port – The default port number for the Netwrix Recovery server is 9001. This port is used to + communicate from the Netwrix Recovery server and the domain. Modify the port, if needed. + +- Service Account – Enter the service account [DOMAIN\USERNAME] and password credentials used to + start and run the Recovery Console service. Ensure that this service account has the Log On As A + Service right in the Local Security Policies on the server where the console is installed. + +Click **Next**. + +![Installation Admin Role Page](/images/recoveryforactivedirectory/3.1/product/installers/installer_page7.png) + +**Step 9 –** On the Administrator Role page, specify the administrator account to use. By default, +this is set to the Domain Admins account from the domain the product is being installed into. + +- Account – Enter a user account or group [DOMAIN\ACCOUNT] that will be the default Identity Recovery administrator. Use the Browse option to search for a specific account. This account will be locked and cannot be modified after installation. + + The specified user or group will be responsible for configuring the applcation and managing + users' access to the console. + +Click **Next**. + +![Installation Web Host Configuration](/images/recoveryforactivedirectory/3.1/product/installers/installer_page8.png) + +**Step 10 –** On the Web Host page, specify the web host configuration for the Identity Recovery Console. + +- Port – Use the default port number or provide a unique one. +- Use HTTPS – To enable HTTPS encryption, select the Use HTTPS checkbox. This displays the + Certificate section on the page. Click **Select certificate...**. The Certificates window is + displayed. + +![Installation Certificates Window](/images/recoveryforactivedirectory/3.1/install/certificates.webp) + +- The Certificates window displays installed certificates on either the local machine or the current + user. Select the desired certificate and click **Use Selected Certificate**. This automatically + fills in the information for the Certificate section of the Web Host page. + +Click **Next**. Identity Recovery is ready to install. + +![Installation Ready to Install](/images/recoveryforactivedirectory/3.1/product/installers/installer_page9.png) + +**Step 11 –** Click **Install** to begin the installation process. + +![completed](/images/recoveryforactivedirectory/3.1/product/installers/installer_page10.png) + +**Step 12 –** The installation process begins and the Setup wizard displays the installation +progress. Depending on the Active Directory size, installation may take time to complete. When +installation is complete, click Finish to exit the wizard. + +The installer does not automatically open the Recovery Console web page after installation. The +Recovery Console icon is located on the desktop. See the [First Launch](/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md) topic for the next step. diff --git a/docs/recoveryforactivedirectory/3.1/install/configurationutility.md b/docs/recoveryforactivedirectory/3.1/install/configurationutility.md new file mode 100644 index 0000000000..23802ab9a5 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/configurationutility.md @@ -0,0 +1,88 @@ +--- +title: "Configuration Utility" +description: "Configuration Utility" +sidebar_position: 20 +--- + +# Configuration Utility + +On installing Identity Recovery, the Recovery Configuration Utility is installed on the +same server. This utility is used to register the RSAT Extension on the Recovery Application Server. + +To launch the Recovery Configuration Utility, double-click the Recovery_Config.exe executable at the +following location in the Identity Recovery installation directory: +`...Netwrix\IdentityRecovery\Recovery_Config.exe` + +![ Recovery Configuration Utility](/images/recoveryforactivedirectory/3.1/install/configurationutility.png) + +The Recovery Configuration Utility window has options to: + +- Register/unregister the RSAT Extension on the Recovery Application Server +- Update the Identity Recovery database information +- View product licensing information + +## Register/Unregister the RSAT Extension + +The RSAT Extension is an MMC snap-in that can be installed on domain joined machines. It extends the +Active Directory Users and Computers (ADUC) console with Identity Recovery specific right-click options for object rollback and recovery. Included in this extension is a Recycle Bin for restoring deleted objects. Consider the following: + +- The RSAT Extension is automatically installed with the Identity Recovery installation + package on the Recovery Application Server. The local Extension must be registered on the server + to enable the rollback and restore options in ADUC. +- The Extension can be manually installed on a remote server where ADUC is installed. The Extension + connects to the Recovery Application Server using the server name or IP address you provide while + installing the Extension on the remote machine. See the + [Install the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/installation.md) topic for additional information. + +### Register the RSAT Extension + +You must register the RSAT Extension on the Recovery Application Server to add the Rollback and +Restore options to the ADUC console. + +Follow the steps to register the RSAT Extension. + +**Step 1 –** On the Recovery Configuration Utility window, click the **Register** button to register +the RSAT Extension. On registration, the following message is displayed and the button changes to +Unregister. + +![RSAT Extension Registered message](/images/recoveryforactivedirectory/3.1/install/rsatextensionregistered.webp) + +**Step 2 –** Click **OK**. + +### Unregister the RSAT Extension + +Unregistering the RSAT Extension will remove the Rollback and Restore options from the Active +Directory Users and Computers console. + +Follow the steps to unregister the RSAT Extension. + +**Step 1 –** On the Recovery Configuration Utility window, click the **Unregister** button to +unregister the RSAT Extension. The following message is displayed and the button changes to +Register. + +![RSAT Extension Not Registered message](/images/recoveryforactivedirectory/3.1/install/rsatextensionunregistered.webp) + +**Step 2 –** Click **OK**. + +## View SQL Configurations + +The Recovery Configuration Utility window displays the following information for SQL configuration: + +- SQL Server – The fully-qualified DNS location name or IP address of the SQL Server machine that + hosts the Identity Recovery database +- Database – The name of the Identity Recovery database on the server +- Authentication – Choose between Windows Authentication or SQL Server Authentication credentials. + If SQL Server Authentication is selected, provide the login credentials for the provisioned + account in the Login and Password fields. +- Test – Click the **Test** button to verify the authentication connection +- Save – After making any changes, click the **Save** button to save the configuration + +To update the password for the SQL server service account, see the +[Update SQL Server Service Account Password](/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/sqlserverserviceaccount.md) +topic. + +## View License Information + +On the Recovery Configuration Utility window, click the **License Information** button to open the +License Information window that displays the validity of the Identity Recovery license, +its type, and expiration date. diff --git a/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md b/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md new file mode 100644 index 0000000000..9a64b107f7 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md @@ -0,0 +1,34 @@ +--- +title: "First Launch" +description: "First Launch" +sidebar_position: 30 +--- + +# First Launch + +To launch the Recovery Console, either: + +- Click the desktop icon +- Type `http://localhost:3005` in a web browser and press Enter + +## First Login + +On the first login to the Recovery Console, use the credentials configured on the Administrator Role +page during installation. This account has the Administrator role needed to manage the application. +If a group is used, any account with membership to this group can login. + +Follow the steps to login to Identity Recovery. + +**Step 1 –** Launch the Recovery Console. The Log in page is displayed. + +![ Recovery for Active Directory - Login page](/images/recoveryforactivedirectory/3.1/product/login.png) + +**Step 2 –** Log in with credentials configured on the Administrator Role page of the Identity Recovery Setup wizard during installation. See the [Install the Application](/docs/recoveryforactivedirectory/3.1/install/application.md) +topic for additional information on the administrator role. The username must be entered in the +following format: + +- Domain\Username + +**Step 3 –** Click **Log in**. + +Once logged in, the product is ready to be configured for use. diff --git a/docs/recoveryforactivedirectory/3.1/install/installation.md b/docs/recoveryforactivedirectory/3.1/install/installation.md new file mode 100644 index 0000000000..59432acd73 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/installation.md @@ -0,0 +1,62 @@ +--- +title: "Install the RSAT Extension" +description: "Install the RSAT Extension" +sidebar_position: 50 +--- + +# Install the RSAT Extension + +The RSAT Extension is installed automatically on the machine where the Recovery Application Server +and web console are installed. To use the RSAT Extension on a remote machine where Active Directory +Users and Computers (ADUC) is installed, you have to manually install it using the RSAT installer. +The installer is located in the following installation directory on the Recovery Application Server: + +...Netwrix\Identity Recovery\RSAT Extension\NetwrixRecovery_RSAT_Extension.msi + +Follow the steps to install the RSAT Extension. + +**Step 1 –** Copy the `NetwrixRecovery_RSAT_Extension.msi` file to the machine where you want to +install it. + +**Step 2 –** Run `NetwrixRecovery_RSAT_Extension.msi` . The RSAT Extension Setup wizard opens. + +![RSAT Extension Installation Wizard - Welcome Page](/images/recoveryforactivedirectory/3.1/product/installers/rsat_page1.png) + +**Step 3 –** On the Welcome page, click **Next**. + +![RSAT Extension Installation Wizard - License Agreement page](/images/recoveryforactivedirectory/3.1/product/installers/rsat_page2.png) + +**Step 4 –** On the End-User License Agreement page, read the End User License Agreement and check +the **I accept the terms in the License Agreement** box. Click **Next**. + +![RSAT Extension Installation Wizard - Destination Folder page](/images/recoveryforactivedirectory/3.1/product/installers/rsat_page3.png) + +**Step 5 –** On the Destination Folder page, specify the file path to install the RSAT Extension. +The default path is: + +C:\Program Files\Netwrix\Identity Recovery RSAT Extension\ + +![RSAT Extension Installation Wizard - Netwrix Recovery Server Connection page](/images/recoveryforactivedirectory/3.1/product/installers/rsat_page4.png) + +**Step 6 –** In the Server name field, enter the name or IP address of the Recovery Application +Server, so the RSAT Extension identifies it in the environment. + +:::note +9001 is the default port. If a different port is specified on the Netwrix Recovery Server +Configuration page of the Identity Recovery Setup wizard while installing the +application, then that specific port is applicable here. +::: + + +Click **Next**. + +![ready](/images/recoveryforactivedirectory/3.1/product/installers/rsat_page5.png) + +**Step 7 –** Click **Install** to begin the installation process. + +**Step 8 –** The installation process begins and the Setup Wizard displays the Setup Progress. When +installation is complete, click Finish to exit the wizard. + +After installation has completed, open a new instance of ADUC and verify that the RSAT Extension has +been successfully installed. Right-click on an object and ensure the **Rollback** option has been +added to the right-click menu. Also, a Recycle Bin node should be added to the root tree view. diff --git a/docs/recoveryforactivedirectory/3.1/install/login.md b/docs/recoveryforactivedirectory/3.1/install/login.md new file mode 100644 index 0000000000..9048666132 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/login.md @@ -0,0 +1,70 @@ +--- +title: "Log into the Recovery Console" +description: "Log into the Recovery Console" +sidebar_position: 40 +--- + +# Log into the Recovery Console + +When Identity Recovery is installed, the following icon is displayed on the desktop. + +![Recovery Desktop Icon](/images/recoveryforactivedirectory/3.1/product/shortcut.png) + +## Access the Recovery Console Locally + +Administrator and non-administrator users can access the Recovery Console on the Identity Recovery server using either of the following methods: + +- Click the desktop icon +- Type `http://localhost:3005` in a web browser and press Enter + +:::note +If the port number and web protocol was changed from default during the installation +process, use the port and protocol configured from the install. +::: + + +## Access the Recovery Console Remotely + +To access the Recovery Console remotely, open a web browser. Enter the host name or IP address of +the Identity Recovery application server followed by web port number into the address bar. For example: + +- http://[ServerName]:3005 + +:::note +If the port number and web protocol was changed from default during the installation +process, use the port and protocol configured from the install. +::: + + +## Sign In + +On [First Launch](/docs/recoveryforactivedirectory/3.1/install/firstlaunch.md) of the Recovery Console, the administrator must add users who can sign into the application and use it. + +Follow the steps to sign into the Recovery Console. + +**Step 1 –** Launch the Recovery Console. + +:::note +The URL may need to be added to the browser's list of trusted sites. +::: + + +![Recovery for Active Directory - Login page](/images/recoveryforactivedirectory/3.1/product/login.png) + +**Step 2 –** Enter your credentials in the Username and Password fields. The username must be in the +following format: + +- Domain\Username + +**Step 3 –** Click Log in. + +If you have enabled multi-factor authentication for your account, the following is displayed: + +![MFA at Login](/images/recoveryforactivedirectory/3.1/install/loginmfa.webp) + +**Step 4 –** Launch the Authenticator app on your phone to get the verification code generated for +the Recovery application account. + +**Step 5 –** Enter the code in the Authentication code field and click **Verify**. + +The Recovery Console opens. diff --git a/docs/recoveryforactivedirectory/3.1/install/overview.md b/docs/recoveryforactivedirectory/3.1/install/overview.md new file mode 100644 index 0000000000..52ddcffd62 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/overview.md @@ -0,0 +1,45 @@ +--- +title: "Installation" +description: "Installation" +sidebar_position: 30 +--- + +# Installation + +Identity Recovery consists of the following components: + +- Netwrix Recovery Server +- Netwrix Recovery Web Console – Installed on the Recovery Application Server and used to perform + the operations the application offers +- RSAT Extension – Installed on the Recovery Application Server automatically. You can manually + install it on a remote machine to add the object rollback and restore functions to the Active + Directory Users and Computers console on that machine. +- Recovery Configuration Utility – Installed on the Recovery Application Server and used to register + the RSAT Extension on the server. It also provides the option to update the SQL database password. + +The following services are also installed on the Recovery Application Server: + +- Netwrix Recovery Server service +- Netwrix Recovery Web Console service + +To install the application, see the following topics: + +- [Install the Application](/docs/recoveryforactivedirectory/3.1/install/application.md) +- [Configuration Utility](/docs/recoveryforactivedirectory/3.1/install/configurationutility.md) +- [Install the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/installation.md) + +Prior to installing, ensure that all prerequisites have been met, as described in the +[Requirements ](/docs/recoveryforactivedirectory/3.1/requirements/overview.md)topic. + +## Licensing + +Identity Recovery comes with a temporary 14-day license. Please contact the Netwrix sales +representative for a license. + +See the [Licensing Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/licensing.md) topic to license the product. + +## Software Download + +Current customers can log in to the Netwrix Customer Portal to download software binaries and +license keys for purchased products. See the +[Customer Portal Access](https://helpcenter.netwrix.com/bundle/NetwrixCustomerPortalAccess/page/Customer_Portal_Access.html) topic for information on how to register for a Customer Portal account. diff --git a/docs/recoveryforactivedirectory/3.1/install/upgrade.md b/docs/recoveryforactivedirectory/3.1/install/upgrade.md new file mode 100644 index 0000000000..1251295a48 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/install/upgrade.md @@ -0,0 +1,21 @@ +--- +title: "Upgrade Procedure" +description: "Upgrade Procedure" +sidebar_position: 60 +--- + +# Upgrade Procedure + +This topic describes the steps needed to upgrade the Netwrix Identity Recovery database to version 3.1. + +## Upgrade Recovery for Active Directory to v3.1 + +Run the `NetwrixRecovery_Setup.exe` on the Netwrix Identity Recovery server to upgrade +to the newer version of the product. See the [Install the Application](/docs/recoveryforactivedirectory/3.1/install/application.md) topic for additional information. + +:::note +The database will be updated to the new version. Do not uninstall or remove the existing database. +::: + + +Identity Recovery has now been upgraded to v3.1. diff --git a/docs/recoveryforactivedirectory/3.1/requirements/_category_.json b/docs/recoveryforactivedirectory/3.1/requirements/_category_.json new file mode 100644 index 0000000000..8a00596580 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Requirements", + "position": 20, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/requirements/firewallrules.md b/docs/recoveryforactivedirectory/3.1/requirements/firewallrules.md new file mode 100644 index 0000000000..ed74bd304f --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/firewallrules.md @@ -0,0 +1,23 @@ +--- +title: "Firewall Rules for Forest Server Backups" +description: "Firewall Rules for Forest Server Backups" +sidebar_position: 60 +--- + +# Firewall Rules for Forest Server Backups + +The following firewall settings are required for communicating with Identity Recovery +and the domain controller when executing a domain controller backup. The firewall rules must be +configured on both the domain controller and the application server. + +| Communication Direction | Protocol | Ports | Description | +| --------------------------------------- | -------- | ----- | ---------------------- | +| Domain Controller to Application Server | TCP | 9001 | Outbound Communication | +| Application Server to Domain Controller | TCP | 9001 | Inbound Communication | + +:::note +9001 is the default port. If a different port is specified on the Netwrix Recovery Server +Configuration page of the Identity Recovery Setup wizard while installing the +application, then that specific port is applicable here. + +::: diff --git a/docs/recoveryforactivedirectory/3.1/requirements/overview.md b/docs/recoveryforactivedirectory/3.1/requirements/overview.md new file mode 100644 index 0000000000..90d1167379 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/overview.md @@ -0,0 +1,46 @@ +--- +title: "Requirements" +description: "Requirements" +sidebar_position: 20 +--- + +# Requirements + +This topic describes the recommended configuration of the servers needed to install Identity Recovery +in a production environment. + +:::info +Review your environment and requirements with a Netwrix support engineer prior to +deployment to ensure all exceptions are covered. +::: + + +## Architecture Overview + +The following servers are required for installation of the application: + +Core Component + +- Netwrix Identity Recovery Application Server – This is where the application is installed +- SQL Server for Identity Recovery Database – As a data-intensive application, a well-provisioned, dedicated SQL Server is recommended +- RSAT Extension – Active Directory Users and Computers extension enabling Identity Recovery features from within Microsoft management utilities + +See the following topics for server requirements: + +- [Application Server Requirements](/docs/recoveryforactivedirectory/3.1/requirements/server.md) +- [SQL Server Requirements](/docs/recoveryforactivedirectory/3.1/requirements/sqlserver.md) +- [RSAT Extension Requirements](/docs/recoveryforactivedirectory/3.1/requirements/rsatextension.md) + +Target Domain Considerations + +The target domains include the Active Directory domains that can be added through the +[Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md). See the following topic for target domain considerations: + +- [Target Domains](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md) + +Target Server Considerations + +Target servers include the servers and environments where you want to restore a domain controller or +an entire forest. See the following topic for target server requirements: + +- [Target Server Considerations](/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md) diff --git a/docs/recoveryforactivedirectory/3.1/requirements/rsatextension.md b/docs/recoveryforactivedirectory/3.1/requirements/rsatextension.md new file mode 100644 index 0000000000..beda884b0b --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/rsatextension.md @@ -0,0 +1,11 @@ +--- +title: "RSAT Extension Requirements" +description: "RSAT Extension Requirements" +sidebar_position: 30 +--- + +# RSAT Extension Requirements + +The following prerequisite is required to run the RSAT Extension: + +- Remote Server Administration Tools (RSAT) must be installed diff --git a/docs/recoveryforactivedirectory/3.1/requirements/server.md b/docs/recoveryforactivedirectory/3.1/requirements/server.md new file mode 100644 index 0000000000..d1b2b68831 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/server.md @@ -0,0 +1,64 @@ +--- +title: "Application Server Requirements" +description: "Application Server Requirements" +sidebar_position: 10 +--- + +# Application Server Requirements + +The Windows Server can be physical or virtual. The following Windows Server operating systems are +supported: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +Additionally the server must meet these requirements: + +- Domain-joined server +- .NET 10.0.1 or above +- 2.0 GHz or faster dual core 64-bit (x64) processor + +RAM and Disk Space + +These are dependent upon the total number of Active Directory objects. + +| Environment | Large | Medium | Small | +| ----------- | ---------------------------- | ---------------------------------- | ------------------------ | +| Definition | Greater than 100,000 objects | Between 25,000 and 100,000 objects | Less than 25,000 objects | +| RAM | 32 GB | 16 GB | 8 GB | +| Disk Space | 1 TB \*SSD preferred | 250 GB | 100 GB | + +Additional Server Requirements + +- The Identity Recovery installer checks if .NET 9.0.2 or higher is installed on the machine. If + not, it is installed as part of the Recovery Application Server installation process. +- Install the `msoledbsql.msi` to enable the application server to connect to the SQL Server prior + to starting installation + + :::note + The latest `msoledbsql.msi` can be obtained from Microsoft's website. Netwrix does not + redistribute this file. + ::: + + +- Group Policy Management Console (required to backup and to recover GPOs) +- _Optional_: SQL Server Management Studio installed on the application server + +Permissions for Installation + +The following permission is required to install the application: + +- Membership in the local Administrators group +- Log on as a service right from the Local Security Policy (Local Policies > User Rights + Assignment > Log on as a service policy) +- SQL Server permissions – Domain account needs to be granted SQL Server permissions. +- Recovery Configuration Utility – Must have Domain Admin rights to use all options in this utility + +## Virtual Environment Recommendations + +While physical machines are always preferred, we fully support the use of virtual machines. +Microsoft® Hyper-V® and VMWare® ESX®/ESXi™ are supported hyper visors. diff --git a/docs/recoveryforactivedirectory/3.1/requirements/sqlserver.md b/docs/recoveryforactivedirectory/3.1/requirements/sqlserver.md new file mode 100644 index 0000000000..cb52cfc836 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/sqlserver.md @@ -0,0 +1,60 @@ +--- +title: "SQL Server Requirements" +description: "SQL Server Requirements" +sidebar_position: 20 +--- + +# SQL Server Requirements + +The Windows server can be physical or virtual. The following Windows server operating systems are +supported: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +The server requirements for the SQL Server databases are: + +- SQL Server 2025 +- SQL Server 2022 +- SQL Server 2019 +- SQL Server 2017 +- SQL Server 2016 +- SQL Server 2014 +- SQL Server 2012 + +RAM, CPU, and Disk Space + +These depend on the size of the target environment. + +| Environment | Large | Medium | Small | +| ----------- | ------------------------------ | ------------------------- | ---------------------- | +| Definition | 15,000 - 1 million+ AD objects | 2,000 - 15,000 AD objects | Up to 2,000 AD objects | +| RAM | 64+ GB | 32 GB | 16 GB | +| Cores | 4+ CPU | 4 CPU | 2 CPU | +| Disk Space | 256 GB | 64 GB | 16 GB | + +Additional Server Requirements + +The following are additional requirements for the SQL Server: + +- All SQL Server databases configured to use ‘Simple Recovery Model’ + +Database Permissions + +The following permissions are required on the databases for the accounts used to run Identity Recovery: + +- Create a database +- Create Tables +- Read/Write + +Additional Considerations + +The following additional considerations are recommended for the SQL Server: + +- Microsoft SQL Server supports TLS 1.2, which requires the Identity Recovery server to + have either SQL Server Native Client 11 or Microsoft Ole DB 18 installed. +- _Optional_: SQL Server Management Studio installed on the Identity Recovery server diff --git a/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md b/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md new file mode 100644 index 0000000000..cc8193e900 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md @@ -0,0 +1,82 @@ +--- +title: "Target Domains" +description: "Target Domains" +sidebar_position: 40 +--- + +# Target Domains + +Target domains include the Active Directory domains that can be added through the +[Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md). You can rollback and recover objects in these +domains through the [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). + +Identity Recovery can backup domains on servers with the Active Directory role on the +following operating system versions: + +- Windows Server 2025 +- Windows Server 2022 +- Windows Server 2019 +- Windows Server 2016 +- Windows Server 2012 R2 +- Windows Server 2012 + +## Service Account Permissions + +The service account used to run backups, and perform rollback and recovery tasks for a domain is +specified on the Domain page of the Add Domain Configuration wizard. This account must be: + +- A member of the Domain Administrators group in the target domain + +There is a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery. + +### Least Privilege Access Model + +It is strongly suggested that the Identity Recovery service account be provided Domain +Admin privileges; however, there are situations where security policies prevent an organization from +providing Domain Admin privileges. In those situations, please contact your Netwrix service +representative to work with you to develop a tailored Least Privilege Access model based on your +environment. + +The privileges necessary to facilitate normal backup and recovery operations of an Active Directory +environment, which are normally available to the Domain Administrators security group, include the +following permissions: + +- Membership in the Schema Admins group is necessary to facilitate backups of objects within the + domain's Schema Container +- The following permissions on the domain's default naming context are necessary to facilitate + backups and rollbacks of its Active Directory objects: + + - ALLOW – Write Property right (SelfAndChildren) + - ALLOW – Create Child right (SelfAndChildren) + - ALLOW – Replicating Directory Changes extended right (SelfAndChildren) + - ALLOW – Reanimate Tombstones extended right (SelfAndChildren) + +- The following permissions on the domain's DomainDnsZones and ForestDnsZones partitions are + necessary to facilitate backups and rollbacks of Active Directory DNS objects: + - ALLOW – Write Property right (SelfAndChildren) + - ALLOW – Create Child right (SelfAndChildren) + - ALLOW – Replicating Directory Changes extended right (SelfAndChildren) + - ALLOW – Reanimate Tombstones extended right (SelfAndChildren) +- The following permissions on the domain's Sites container are necessary to facilitate backups and + rollbacks of Active Directory Sites and Services objects: + - ALLOW – Generic Read right (SelfAndChildren) + - ALLOW – Generic Write right (SelfAndChildren) + - ALLOW – Create Child right (SelfAndChildren) + - ALLOW – Replicating Directory Changes extended right (SelfAndChildren) + - ALLOW – Reanimate Tombstones extended right (SelfAndChildren) +- The following Group Policy access rights are necessary to facilitate backups and rollbacks of + Group Policy Objects: + - READ + - WRITE + - CREATE CHILD OBJECT + - DELETE CHILD OBJECT + - DELETE + - MODIFY PERMISSIONS + - MODIFY OWNER + +:::warning +Additional permissions may be necessary to allow Identity Recovery to +function properly in an organization’s environment. + +::: diff --git a/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md b/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md new file mode 100644 index 0000000000..0a5cbc5183 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/requirements/targetserver.md @@ -0,0 +1,49 @@ +--- +title: "Target Server Considerations" +description: "Target Server Considerations" +sidebar_position: 50 +--- + +# Target Server Considerations + +This topic lists the requirements for the target servers where you want to restore the domain +controllers for performing a forest recovery. See the [Recover a Forest](/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md) +topic for additional information. + +:::tip +Remember, target server refers to a server where you intent to restore a domain controller. +::: + + +## Target Server and Operating System Requirements + +Consider the following when restoring domain controllers. + +- The target servers must be isolated from the environment in such a way that they cannot + name-resolve the domain that is restored. The process of restoring a domain will fail if the + server is able to see that a domain of that name already exists. Typically, DNS in the target + environment used for forest recovery should be configured in a way that allows each server in that + environment to see each other. +- The target server must be a base installation of the Windows Server operating system (OS). +- The target server OS version should be the same version as the source domain controllers from + which the backups were created. For example, a backup from a Windows Server 2022 domain controller + would need to be restored to a Windows Server 2022 target server. +- While restoring a domain controller, things such as the ADDS role and configuration are done with + the product, so there is no requirement to have those in place. + +### When the Target Server is a Virtual Machine + +Following are some considerations when the target server is a virtual machine. + +- Memory and storage configuration for the virtual machine should match the hardware configuration + of the domain controller where the backup was performed. +- The virtual machine should be in an isolated environment (i.e., should not be able to contact the + source forest or domains). +- The virtual machines should allow File and Print Sharing through the firewall as well as Remote + Management, if possible. + +## Network Bandwidth Requirement for the Restore Operation + +Network bandwidth should be as fast as available but can operate efficiently with 100 Mbps. Slower +bandwidth will result in a longer setup stage for the restore as the backup container has to be +copied to the target server. diff --git a/docs/recoveryforactivedirectory/3.1/rsatextension/_category_.json b/docs/recoveryforactivedirectory/3.1/rsatextension/_category_.json new file mode 100644 index 0000000000..7a19b122ca --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/rsatextension/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "RSAT Extension", + "position": 50, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "overview" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/rsatextension/overview.md b/docs/recoveryforactivedirectory/3.1/rsatextension/overview.md new file mode 100644 index 0000000000..f8882afb95 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/rsatextension/overview.md @@ -0,0 +1,23 @@ +--- +title: "RSAT Extension" +description: "RSAT Extension" +sidebar_position: 50 +--- + +# RSAT Extension + +The RSAT Extension is an MMC snap-in that can be installed on domain joined machines. It extends the +Active Directory Users and Computers (ADUC) console with Identity Recovery specific +right-click options for object rollback and recovery. Included in this extension is a Recycle Bin +for restoring deleted objects. Consider the following: + +- The RSAT Extension is automatically installed with the Identity Recovery installation + package on the Recovery Application Server. The local Extension must be registered on the server + to enable the rollback and restore options in ADUC. +- The Extension can be manually installed on a remote server where ADUC is installed. The Extension + connects to the Recovery Application Server using the server name or IP address you provide while + installing the Extension on the remote machine. See the + [Install the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/installation.md) topic for additional information. + +You must register the RSAT Extension on the Recovery Application Server to add the Rollback and +Restore options to the ADUC console. diff --git a/docs/recoveryforactivedirectory/3.1/rsatextension/recovery.md b/docs/recoveryforactivedirectory/3.1/rsatextension/recovery.md new file mode 100644 index 0000000000..87c6daecb1 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/rsatextension/recovery.md @@ -0,0 +1,133 @@ +--- +title: "Restore an Object" +description: "Restore an Object" +sidebar_position: 20 +--- + +# Restore an Object + +The Restore feature recovers deleted objects (users, computers, groups, OUs, etc.) from the Recycle +Bin in Active Directory Users and Computers (ADUC). + +## Prerequisites + +The following prerequisites must be met before you can rollback or recover an object using ADUC: + +- You must register the RSAT Extension on the Recovery Application Server to add the Rollback and + Restore options to the ADUC console. See the + [Register/Unregister the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/configurationutility.md#registerunregister-the-rsat-extension) + topic for additional information. +- At least one backup of the domain must be available in the Identity Recovery Console. + See the [Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md) topic for additional information. + +## Restore an Object Using ADUC + +Follow the steps to restore a deleted object. + +**Step 1 –** Open ADUC and select the Recycle Bin. + +![ADUC with the Restore option selected](/images/recoveryforactivedirectory/3.1/rsatextension/aducrestore.webp) + +**Step 2 –** In the Recycle Bin, right-click on the object to be restored and select **Restore** on +the menu. The Object Recovery wizard opens. + +![Object Recovery Wizard - Object Backups page](/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups_1.webp) + +**Step 3 –** On the Object Backups page, select the desired date timestamp to identify the backup +for recovery. Multiple backups may be available for a single day depending on the configured +schedule. Click **Next** to continue. + +![Object Recovery Wizard - Recovery Options page](/images/recoveryforactivedirectory/3.1/rsatextension/recoveryoptions.webp) + +**Step 4 –** On the Recovery Options page, select the Container and Naming Conflict actions for the +recovery process. + +- Container – When a container is deleted in Active Directory, all child objects are also deleted. + Select a container restore option from the drop-down menu: + + - Only restore the container object – Restores the container object but no children + - Restore the container object and the immediate children – Restores the container object and + its immediate children + - Restore the entire sub-tree – Restores the container object and all children + + :::note + Selecting the Restore the container object and the immediate children or the Restore + the entire sub-tree option enables the User Options page. + ::: + +- Naming Conflict – A naming conflict can occur if an object was created post-deletion that has + identical values to the original object. From the drop-down menu, select an option to implement if + a naming conflict occurs: + + - Skip the object – If there is a conflict with naming, do not restore and skip the object + - Automatically use alternative values – If there is a conflict with naming, a numeric value + will be appended to the name of the object being restored to create a unique name + +Click **Next**. + +![Object Recovery Wizard - User Options page](/images/recoveryforactivedirectory/3.1/rsatextension/useroptions.webp) + +**Step 5 –** The User Options page is displayed when user objects are being restored. When a user +object is included as a child object being restored, this page is also displayed. Consider the +following configurations in ADUC before choosing the options for deleted user objects: + +- Passwords are not persisted – User account is disabled and will have no password, and be disabled + after restoration +- Passwords are persisted – User password is restored and ADUC automatically sets the _User must + change password at next logon_ flag + +Select the desired checkboxes relating to the state of a user password upon restoration: + +- Enable user – Enables the user in Active Directory +- Clear 'User must change password' flag upon restoration – Restored users do not receive an alert + to change their password upon first login after a recovery. Instead, their old password prior to + deletion is still active. +- Set new password – Implement a new password upon recovery. Type the new password in the text box. + + :::tip + Remember, when a new password is created, the user needs it to login the first time. The + password should be copied and given to the restored user. + ::: + + +Click **Next**. + +![Object Recovery Wizard - Domain Controller page](/images/recoveryforactivedirectory/3.1/rsatextension/domaincontroller.webp) + +**Step 6 –** On the Domain Controller page, select the Domain Controller to run the restoration +action. This page consists of two sections: + +- Domain Controller + + - Use the current domain controller + - Use any writable domain controller + - Use the selected domain controller – Select a domain controller from the drop-down menu + +- Details – Provides information about the selected domain controller + +Click **Next**. + +![Object Recovery Wizard - Alternate Credentials page](/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials.webp) + +**Step 7 –** The account performing the operation must have Domain Admin privileges to access the +domain tree area where the object resides. On the Alternate Credentials page: + +- If the account specified during domain configuration has Domain Admin privileges, click **Next**. +- If the domain account does not have Domain Admin privileges, select the **Use alternate + credentials for the recovery operation** checkbox and enter an account with Domain Admin + privileges, then click **Next**. + +For a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery, see the +[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model) topic. + +![Object Recovery Wizard - Confirm page](/images/recoveryforactivedirectory/3.1/rsatextension/confirm_1.webp) + +**Step 8 –** On the Confirm page, review the summarized object restore settings. Click **Finish** to +start the recovery. + +![Recovery Success Status](/images/recoveryforactivedirectory/3.1/rsatextension/recvoerysuccessful.webp) + +**Step 9 –** The Recovery window displays the action status. Click **Close** to exit. + +The ADUC object has been successfully recovered from the Recycle Bin. diff --git a/docs/recoveryforactivedirectory/3.1/rsatextension/rollback.md b/docs/recoveryforactivedirectory/3.1/rsatextension/rollback.md new file mode 100644 index 0000000000..0a5e7b86d0 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/rsatextension/rollback.md @@ -0,0 +1,97 @@ +--- +title: "Object Rollback" +description: "Object Rollback" +sidebar_position: 10 +--- + +# Object Rollback + +The Rollback feature in the Active Directory Users and Computers (ADUC) console allows you to revert +an Active Directory object to a previous state of a Identity Recovery backup. + +## Prerequisites + +The following prerequisites must be met before you can rollback or recover an object using ADUC: + +- You must register the RSAT Extension on the Recovery Application Server to add the Rollback and + Restore options to the ADUC console. See the + [Register/Unregister the RSAT Extension](/docs/recoveryforactivedirectory/3.1/install/configurationutility.md#registerunregister-the-rsat-extension) + topic for additional information. +- At least one backup of the domain must be available in the Identity Recovery Console. + See the [Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md) topic for additional information. + +## Rollback an Object Using ADUC + +Follow the steps to roll back an Active Directory object, including user accounts, groups, and +organizational units. + +:::note +Repeat these steps as needed after a multi-select for rolling back multiple objects. +::: + +**Step 1 –** Open ADUC and select one or more objects to rollback. Right-click on the object(s) and +select **Rollback** on the menu. + +![Rollback selection in ADUC](/images/recoveryforactivedirectory/3.1/rsatextension/aducrollback.webp) + +The Object Rollback wizard opens. + +![Object Rollback wizard - Object Backups Page](/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups.webp) + +**Step 2 –** On the Object Backups page, select a backup date and then select the object and +attribute(s) to rollback. This page consists of two sections: + +- Objects – Lists the objects selected for rollback +- Backups – Lists the backup(s) with their respective details + + - Backup Date – Select the desired date timestamp to identify the backup for rollback. Multiple + backups may be available for a single day depending on the configured schedule. + - Attribute List – Select the attribute(s) to rollback. The table displays the current value and + backup value. Attributes where these two values are different are highlighted in blue. + - Only show attributes that have changed – Select this option to display only blue highlighted + attributes that were changed when the selected backup was performed + +You can click on different backup dates to see attribute values for each of those points in time. +However, only one backup date can be selected in order to select attributes for rollback. + +Click **Next**. + +![Object Rollback wizard - Domain Controller Page](/images/recoveryforactivedirectory/3.1/rsatextension/domiancontroller.webp) + +**Step 3 –** On the Domain Controller page, select the Domain Controller to run the rollback action. +This page consists of two sections: + +- Domain Controller + + - Use the current domain controller + - Use any writable domain controller + - Use the selected domain controller – Select a domain controller from the drop-down menu + +- Details – Provides information about the selected domain controller + +Click **Next**. + +![Object Rollback wizard - Alternate Credentials Page](/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials.webp) + +**Step 4 –** The account performing the operation must have Domain Admin privileges to access the +domain tree area where the object resides. On the Alternate Credentials page: + +- If the account specified during domain configuration has Domain Admin privileges, click **Next**. +- If the domain account does not have Domain Admin privileges, select the **Use alternate + credentials for the rollback operation** checkbox and enter an account with Domain Admin + privileges, then click **Next**. + +For a Least Privilege Access Model to provision an Active Directory security group with the +permissions that are necessary to perform backups, rollbacks and recovery, see the +[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model) topic. + +![Object Rollback wizard - Confirm Page](/images/recoveryforactivedirectory/3.1/rsatextension/confirm.webp) + +**Step 5 –** On the Confirm page, review the object information, changes, and the domain controller +selection. Click **Finish** to rollback the object. + +![Successful Rollback window](/images/recoveryforactivedirectory/3.1/rsatextension/rollbacksuccessful.webp) + +**Step 6 –** The Rollback window displays the action status. Click **Close** to exit. + +The ADUC object has been successfully rolled back to a previous state. diff --git a/docs/recoveryforactivedirectory/3.1/troubleshooting/_category_.json b/docs/recoveryforactivedirectory/3.1/troubleshooting/_category_.json new file mode 100644 index 0000000000..dc1b1f0177 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/troubleshooting/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Troubleshooting", + "position": 60, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "troubleshooting" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/_category_.json b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/_category_.json new file mode 100644 index 0000000000..2195cfe476 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Update Account Passwords", + "position": 10, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "credentialpasswords" + } +} \ No newline at end of file diff --git a/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/credentialpasswords.md b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/credentialpasswords.md new file mode 100644 index 0000000000..8a8925f688 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/credentialpasswords.md @@ -0,0 +1,29 @@ +--- +title: "Update Account Passwords" +description: "Update Account Passwords" +sidebar_position: 10 +--- + +# Update Account Passwords + +Account passwords occasionally need to be updated due to various reasons, such as security policies +that require passwords to be reset on a regular basis. The following types of credentials may be +impacted by password changes or security policies: + +- SQL Server Service Account +- Recovry Service Account +- Domain Controller Backup Service Account + +## SQL Server Service Account + +The SQL Server service account grants access to the SQL Server database. It can be updated through +the Identity Recovery Configuration Utility. See the +[Update SQL Server Service Account Password](/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/sqlserverserviceaccount.md) topic for additional information. + +## Recovery Service Account + +The Recovery service account is used to run the Recovery Console service and preform the domain +backups. It can be updated on the Domains page in the Recovery Console. See the +[Edit Domain Configuration](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md#edit-domain-configuration) topic for additional information. + + diff --git a/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/sqlserverserviceaccount.md b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/sqlserverserviceaccount.md new file mode 100644 index 0000000000..a65486fc50 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/troubleshooting/credentialpasswords/sqlserverserviceaccount.md @@ -0,0 +1,33 @@ +--- +title: "Update SQL Server Service Account Password" +description: "Update SQL Server Service Account Password" +sidebar_position: 20 +--- + +# Update SQL Server Service Account Password + +Follow the steps to update the password for the SQL Server service account. + +**Step 1 –** To launch the Recovery Configuration Utility, double-click the Recovery_Config.exe +executable at the following location in the Identity Recovery installation directory: +`...Netwrix\Identity Recovery\Recovery_Config.exe` + +![ Recovery Configuration Utility](/images/recoveryforactivedirectory/3.1/product/config_utility.png) + +**Step 2 –** Update the account password for SQL Server Authentication in the Login and Password +fields. + +**Step 3 –** Click the **Test** button to validate the connection. On success, the following message +is displayed: + +![Connection Test Successful](/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/connectiontest.webp) + +**Step 4 –** Click **OK**. + +**Step 5 –** Once the connection has been established, click **Save** to update the account. + +![Configuration Utility Saved Confirm](/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/sqlsettings.webp) + +**Step 6 –** Click **OK**. + +The SQL Server service account password has been updated and saved. diff --git a/docs/recoveryforactivedirectory/3.1/troubleshooting/troubleshooting.md b/docs/recoveryforactivedirectory/3.1/troubleshooting/troubleshooting.md new file mode 100644 index 0000000000..6caa9404c3 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/troubleshooting/troubleshooting.md @@ -0,0 +1,92 @@ +--- +title: "Troubleshooting" +description: "Troubleshooting" +sidebar_position: 60 +--- + +# Troubleshooting + +This topic provides steps for troubleshooting common issues for the following Identity Recovery components: + +- RSAT Extension Recovery Diagnostics +- RSAT Extension Rollback Diagnostics +- RSAT Extension Registration Diagnostics +- Recovery Application Server Diagnostics + +## RSAT Extension Recovery + +The RSAT Extension Recovery Diagnostics flow chart helps diagnose issues when the Recycle Bin is +missing or empty in Active Directory Users and Computers (ADUC). + +![RSAT Extension Recover Diagnostics](/images/recoveryforactivedirectory/3.1/troubleshooting/recoverrsat.webp) + +## RSAT Extension Rollback + +The RSAT Extension Rollback Diagnostics flow chart helps diagnose issues when the rollback +right-click menu option is missing in ADUC. + +![RSAT Extension Rollback Diagnostics](/images/recoveryforactivedirectory/3.1/troubleshooting/rollbackrsat.webp) + +## RSAT Extension Registration Validation + +In the Recovery Configuration Utility, the RSAT Extension Register/Unregister button is used to +activate the new right-click menu options in ADUC. This is done once per domain. The registration +status is displayed as either Registered or Unregistered. + +Follow the steps to validate the registration status of the RSAT Extension by finding the presence +of a specific GUID in ADSI Edit. + +**Step 1 –** On the domain joined machine or domain controller, ensure the user is logged in as a +Domain Administrator. + +**Step 2 –** Open ADSI (Active Directory Services Interfaces Editor) by navigating to +C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools. The ADSI Edit window +opens. + +**Step 3 –** If the Configuration naming context does not display automatically, navigate to +**Action** **> Connect to...** and the Connection Settings window opens. + +**Step 4 –** On the Connection Settings window, select **Configuration** under the Select a well +known Naming Context radio button. Click **OK**. The Connection Settings window closes and the AD +Configuration Partition (also called naming context) opens on the left hand pane. + +**Step 5 –** Navigate from the AD Configuration Partition folder until **CN=DisplaySpecifiers** is +selected. In this folder, select either **CN=409** which is the code for US English or another code +for the active locale of the operating system if not using US English. + +**Step 6 –** Double-click on the proper locale (such as CN=409). A list is displayed in the middle +pane. Right click on any of the Display Specifiers and select **Properties** from the menu. The +Properties window is displayed. Select the adminContextMenu attribute or click Edit to show the +Multi-valued String Editor listing known GUIDs. In the list, the RSAT Extension GUID entry is: + +`{50fb3a3c-5700-4232-ae3b-c6d49a6a97ab}` + +:::note +The adminContextMenu attribute of every object in the active locale (i.e. CN=409 for US +English), should have the GUID above. +::: + +**Step 7 –** Verify the GUID. + +If the GUID matches the number above, the RSAT Extension is successfully registered. + +## Recovery Application Server + +The Recovery Application Server Diagnostics flow chart helps diagnose issues when the Netwrix +Recovery Server service is not running. + +![Application Server Diagnostics](/images/recoveryforactivedirectory/3.1/troubleshooting/applicationserver.webp) + +## Log Files + +Log files are available at the following locations: + +On the Identity Recovery server + +- ...\Netwrix\Recovery for Active Directory\Logs +- ...\Netwrix\Recovery for Active Directory\ModuleEngine.exe.log +- ...\Netwrix\Recovery for Active Directory\TaskServer.exe.log + +On the domain controllers for backups + +- ...\Netwrix\Netwrix Recovery Server Backup\Logs diff --git a/docs/recoveryforactivedirectory/3.1/usecases.md b/docs/recoveryforactivedirectory/3.1/usecases.md new file mode 100644 index 0000000000..f014b910f2 --- /dev/null +++ b/docs/recoveryforactivedirectory/3.1/usecases.md @@ -0,0 +1,96 @@ +--- +title: "Use Cases" +description: "Use Cases" +sidebar_position: 3 +--- + +# Use Cases + +Identity Recovery enables you to rollback and recover both accidental and malicious +changes to Active Directory. This topic outlines common use cases as examples. + +## Recover a Deleted Object + +Deleted objects can be difficult to recover natively without the Active Directory Recycle Bin +enabled, which is not enabled by default. While enabling the Recycle Bin enhances the restore +process, it is not a requirement for Identity Recovery. An example of when a deleted +object may need to be restored is: + +- A user account has been accidentally deleted and it needs to be reinstated + +Restoring a deleted object can be accomplished through the following interface in the Identity Recovery Console: + +- [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) + - Locate the desired object in the Recycle Bin. + - Recover the object by following the steps in the + [Recover an Object](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md#recover-an-object) topic. + +## Rollback Changes to an Object + +Active Directory does not offer native ways to undo changes made to objects. Identity Recovery can rollback object changes to any state captured within a backup. An example of when a +change to an object may need to be rolled back is: + +- Someone made a group membership change that impacted a user’s access + +Rolling back object changes can be accomplished through the following interface in the Identity Recovery Console: + +- [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) + - Locate the desired object + - Rollback changes to the object by following the steps in the + [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) topic + +## Rollback Attribute Changes + +A massive number of attributes changes in Active Directory can cause significant security and +operational issues. Identity Recovery can rollback attribute changes to any state +captured within a backup. Some examples of when a change to an attribute may need to be rolled back +are: + +- Joe’s department attribute was changed and needs to be rolled back to what it was originally +- A user’s display name was changed and needs to be rolled back + +Rolling back attribute changes can be accomplished through the following interface within the +Identity Recovery Console: + +- [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) + - Locate the desired object + - Rollback changes to the object by following the steps in the + [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) topic + +> Remember to select the desired attribute for rollback + +## Rollback Group Policy Object Changes + +Group Policy Objects (GPOs) control many aspects of operations, security, and software deployment. +Identity Recovery can rollback GPOs to any state captured within a backup. For this, +Group Policy Management Console must be installed on the Identity Recovery server. See +Steps 9 and 10 in the [Add a Domain](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md#add-a-domain) topic for +additional information. An example of when a GPO change may need to be rolled back is: + +- A GPO change caused users to lose access to a server or application + +Rolling back GPO changes can be accomplished through the following interface in the Identity Recovery Console: + +- [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md) + - Locate the desired object + - Rollback changes to the object by following the steps in the + [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) topic + +## Domain Controller Backup and Forest Restore from Backup + +Identity Recovery can backup domain controllers to prevent data loss. The +[Forest Page](/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md) allows administrators to configure and manage backups for a domain controller. You can then restore a domain controller backup using the backup file created by Identity Recovery. To restore a forest, you can create a playbook to restore the domain +controllers in a desired sequence. Some examples of when a server may need to be backed up or +restored are: + +- Stand up a duplicate of a domain controller, for example, stand up a duplicate in a lab + environment for testing purposes +- Restore a domain controller to a specific state-in-time image +- Restore lost or deleted data + +Server backup and restore can be accomplished through the following interfaces: + +- [Forest Page](/docs/recoveryforactivedirectory/3.1/admin/forest/forest.md) + - Configure backup settings for domain controllers + - Restore one or more domain controllers in a forest by following the steps in the + [Create a Recovery Playbook](/docs/recoveryforactivedirectory/3.1/admin/forest/recover.md#create-a-recovery-playbook) topic diff --git a/sidebars/recoveryforactivedirectory/3.1.js b/sidebars/recoveryforactivedirectory/3.1.js new file mode 100644 index 0000000000..aaf16428a2 --- /dev/null +++ b/sidebars/recoveryforactivedirectory/3.1.js @@ -0,0 +1,16 @@ +const generateKBSidebar = require('../../src/utils/generateKBSidebar'); + +module.exports = { + sidebar: [ + { + type: 'autogenerated', + dirName: '.', + }, + { + type: 'category', + label: 'Knowledge Base', + collapsed: true, + items: generateKBSidebar('recoveryad') + }, + ], +}; diff --git a/src/config/products.js b/src/config/products.js index be025a1182..7d1679e7b7 100644 --- a/src/config/products.js +++ b/src/config/products.js @@ -528,8 +528,8 @@ export const PRODUCTS = [ }, { id: 'recoveryforactivedirectory', - name: 'Recovery for Active Directory', - description: 'Active Directory backup and recovery', + name: 'Identity Recovery', + description: 'Identity backup and recovery', path: 'docs/recoveryforactivedirectory', categories: ['Identity Threat Detection & Response (ITDR)'], icon: '', @@ -537,11 +537,17 @@ export const PRODUCTS = [ { version: '2.6', label: '2.6', - isLatest: true, + isLatest: false, sidebarFile: './sidebars/recoveryforactivedirectory/2.6.js', }, + { + version: '3.1', + label: '3.1', + isLatest: true, + sidebarFile: './sidebars/recoveryforactivedirectory/3.1.js', + }, ], - defaultVersion: '2.6', + defaultVersion: '3.1', }, { id: 'threatmanager', diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory.png new file mode 100644 index 0000000000..8808eaaec3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory1.png new file mode 100644 index 0000000000..de6b5f788b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ActiveDirectory1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/AddForest.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/AddForest.png new file mode 100644 index 0000000000..2ee931fce8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/AddForest.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Auditing.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Auditing.png new file mode 100644 index 0000000000..1e2ffd3354 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Auditing.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Domain.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Domain.png new file mode 100644 index 0000000000..4a9da0ca13 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Domain.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainAdd.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainAdd.png new file mode 100644 index 0000000000..eb4253a99c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainAdd.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainBackupSchedule.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainBackupSchedule.png new file mode 100644 index 0000000000..da9d6269ac Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainBackupSchedule.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainConfirm.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainConfirm.png new file mode 100644 index 0000000000..0327163f7e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainConfirm.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit1.png new file mode 100644 index 0000000000..de037965f6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit2.png new file mode 100644 index 0000000000..fe193c74c7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit3.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit3.png new file mode 100644 index 0000000000..4f5cfd48a7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit4.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit4.png new file mode 100644 index 0000000000..d6bb34f3aa Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit5.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit5.png new file mode 100644 index 0000000000..71b8805c1b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainEdit5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainNotification.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainNotification.png new file mode 100644 index 0000000000..12c16358a7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainNotification.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainOptions.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainOptions.png new file mode 100644 index 0000000000..6711d75db7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/DomainOptions.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit1.png new file mode 100644 index 0000000000..04281ab4a9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit2.png new file mode 100644 index 0000000000..c30cd1e264 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit3.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit3.png new file mode 100644 index 0000000000..f2b1b2a03e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit4.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit4.png new file mode 100644 index 0000000000..92962be839 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/EntraEdit4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Integrations.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Integrations.png new file mode 100644 index 0000000000..b36f789730 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/Integrations.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/config.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/config.png new file mode 100644 index 0000000000..b6fe894190 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Configuration/config.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DataRetention.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DataRetention.png new file mode 100644 index 0000000000..50a48c7704 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DataRetention.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domain.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domain.png new file mode 100644 index 0000000000..4a9da0ca13 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domain.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DomainBackupConfigPage.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DomainBackupConfigPage.png new file mode 100644 index 0000000000..10ad73196b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/DomainBackupConfigPage.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domains.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domains.png new file mode 100644 index 0000000000..2dcf5d3e25 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Domains.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra.png new file mode 100644 index 0000000000..1026119f7c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1.png new file mode 100644 index 0000000000..2353eb673a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1_trimmed.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1_trimmed.png new file mode 100644 index 0000000000..82124df72c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra1_trimmed.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2.png new file mode 100644 index 0000000000..48f4743c20 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2_trimmed.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2_trimmed.png new file mode 100644 index 0000000000..9b9399b077 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra2_trimmed.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3.png new file mode 100644 index 0000000000..f134cabddd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3_trimmed.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3_trimmed.png new file mode 100644 index 0000000000..105a324e91 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra3_trimmed.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4.png new file mode 100644 index 0000000000..ef7dab7a1a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4_trimmed.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4_trimmed.png new file mode 100644 index 0000000000..a2189e7b7b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra4_trimmed.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra5.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra5.png new file mode 100644 index 0000000000..d298c228ed Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra6.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra6.png new file mode 100644 index 0000000000..4352dead02 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra6.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra7.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra7.png new file mode 100644 index 0000000000..ddb60238cb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Entra7.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback.png new file mode 100644 index 0000000000..e9d5d6e77f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback1.png new file mode 100644 index 0000000000..1b5d08d4ee Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/EntraRollback1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest.png new file mode 100644 index 0000000000..30a562bb2c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest9.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest9.png new file mode 100644 index 0000000000..b779cbd14a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Forest9.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestAdd.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestAdd.png new file mode 100644 index 0000000000..9d22076313 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestAdd.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestBackupLocation.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestBackupLocation.png new file mode 100644 index 0000000000..28f7bf789c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestBackupLocation.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestConfirm.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestConfirm.png new file mode 100644 index 0000000000..ee6fa23cef Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestConfirm.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestOptions.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestOptions.png new file mode 100644 index 0000000000..346e90c249 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestOptions.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestSchedule.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestSchedule.png new file mode 100644 index 0000000000..5b2f21a4e6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestSchedule.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServer.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServer.png new file mode 100644 index 0000000000..d66fc5883a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServer.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServerBackupConfiguration.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServerBackupConfiguration.png new file mode 100644 index 0000000000..63c89dc300 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ForestServerBackupConfiguration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Licensing.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Licensing.png new file mode 100644 index 0000000000..6fb3480f04 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Licensing.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Notifications.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Notifications.png new file mode 100644 index 0000000000..778e7169dc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Notifications.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ObjectRollbackCompleted.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ObjectRollbackCompleted.png new file mode 100644 index 0000000000..83afab5dce Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/ObjectRollbackCompleted.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook.png new file mode 100644 index 0000000000..6a563e23c1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook1.png new file mode 100644 index 0000000000..0ffc88dcb4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook2.png new file mode 100644 index 0000000000..97f4f0b49a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook3.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook3.png new file mode 100644 index 0000000000..85bb7efcff Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook4.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook4.png new file mode 100644 index 0000000000..1b1cd73864 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook5.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook5.png new file mode 100644 index 0000000000..b78cdc2cb5 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook6.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook6.png new file mode 100644 index 0000000000..d039b8de6c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook6.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook7.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook7.png new file mode 100644 index 0000000000..7e0de77d0b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Playbook7.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Restore.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Restore.png new file mode 100644 index 0000000000..d08d328e8a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Restore.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackConfirm.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackConfirm.png new file mode 100644 index 0000000000..3456f4a505 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackConfirm.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackCredentials.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackCredentials.png new file mode 100644 index 0000000000..bf74e688cf Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackCredentials.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackDomainController.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackDomainController.png new file mode 100644 index 0000000000..08e52c1979 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackDomainController.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackObjectBackups.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackObjectBackups.png new file mode 100644 index 0000000000..6b698984fd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RollbackObjectBackups.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPLaybook2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPLaybook2.png new file mode 100644 index 0000000000..6ba55b7748 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPLaybook2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook1.png new file mode 100644 index 0000000000..31b5ae6276 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook3.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook3.png new file mode 100644 index 0000000000..f8c5596f8b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook4.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook4.png new file mode 100644 index 0000000000..8fdf54cbe4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/RunningPlaybook4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage.png new file mode 100644 index 0000000000..8fed484beb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage1.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage1.png new file mode 100644 index 0000000000..5533d6900b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage2.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage2.png new file mode 100644 index 0000000000..e853eac1b6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/Storage2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/UserRoles.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/UserRoles.png new file mode 100644 index 0000000000..036616cbb8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/UserRoles.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/forests.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/forests.png new file mode 100644 index 0000000000..ebdf0c3dd9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/forests.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/home.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/home.png new file mode 100644 index 0000000000..8d1098dca5 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/home.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/login.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/login.png new file mode 100644 index 0000000000..7c1277216f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/login.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/utilities.png b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/utilities.png new file mode 100644 index 0000000000..915f9d9cc1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/IdentityImages_LatestDocs/utilities.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/activedirectory.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/activedirectory.webp new file mode 100644 index 0000000000..25eeb6709e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/activedirectory.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/auditactivity.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/auditactivity.webp new file mode 100644 index 0000000000..cd034fe49d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/auditactivity.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/audithistory.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/audithistory.webp new file mode 100644 index 0000000000..b5b9d4c37b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/audithistory.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm.webp new file mode 100644 index 0000000000..3894b90415 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm_1.webp new file mode 100644 index 0000000000..d9d0b1dcae Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/confirm_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials.webp new file mode 100644 index 0000000000..a04e841e9a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials_1.webp new file mode 100644 index 0000000000..461cf87eeb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/credentials_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domainbackupconfig.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domainbackupconfig.webp new file mode 100644 index 0000000000..cada07f688 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domainbackupconfig.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domaincontroller.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domaincontroller.webp new file mode 100644 index 0000000000..6c9d67c7c7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/domaincontroller.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups.webp new file mode 100644 index 0000000000..3249c336b0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups_1.webp new file mode 100644 index 0000000000..c4e575cabc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectbackups_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrestorecompleted.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrestorecompleted.webp new file mode 100644 index 0000000000..e62e93f109 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrestorecompleted.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrollbackcompleted.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrollbackcompleted.webp new file mode 100644 index 0000000000..158957c2b8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/objectrollbackcompleted.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/options.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/options.webp new file mode 100644 index 0000000000..3a37a338fc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/options.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recoveryoptions.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recoveryoptions.webp new file mode 100644 index 0000000000..8038a0021b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recoveryoptions.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.png b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.png new file mode 100644 index 0000000000..ef22be28fd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.webp new file mode 100644 index 0000000000..43a6a270ae Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/recyclebin.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/rightclickmenu.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/rightclickmenu.webp new file mode 100644 index 0000000000..39e6027988 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/rightclickmenu.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/useroptions.webp b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/useroptions.webp new file mode 100644 index 0000000000..7df2030f1c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/activedirectory/useroptions.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/auditeventdetails.webp b/static/images/recoveryforactivedirectory/3.1/admin/auditeventdetails.webp new file mode 100644 index 0000000000..19d592d037 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/auditeventdetails.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/auditlog.webp b/static/images/recoveryforactivedirectory/3.1/admin/auditlog.webp new file mode 100644 index 0000000000..2115e113b6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/auditlog.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra.png new file mode 100644 index 0000000000..1026119f7c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra5.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra5.png new file mode 100644 index 0000000000..d298c228ed Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/Entra5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/account.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/account.webp new file mode 100644 index 0000000000..c18947fd20 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/account.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/account_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/account_1.webp new file mode 100644 index 0000000000..dcfc678159 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/account_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule.webp new file mode 100644 index 0000000000..cef57ba547 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule_1.webp new file mode 100644 index 0000000000..72b403c045 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/backupschedule_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm.webp new file mode 100644 index 0000000000..3fe4e73e92 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_1.webp new file mode 100644 index 0000000000..bbe6800997 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_2.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_2.webp new file mode 100644 index 0000000000..dbb6c1b9ca Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_2.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_3.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_3.webp new file mode 100644 index 0000000000..0c50f260a3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/confirm_3.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.png new file mode 100644 index 0000000000..50a48c7704 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.webp new file mode 100644 index 0000000000..9f1cbcdd4e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/dataretention.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/deleterole.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/deleterole.webp new file mode 100644 index 0000000000..605b17b95a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/deleterole.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.png new file mode 100644 index 0000000000..4a9da0ca13 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.webp new file mode 100644 index 0000000000..8e3ae2e1d7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain_1.webp new file mode 100644 index 0000000000..1d5af3c3f0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domain_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/domains.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domains.webp new file mode 100644 index 0000000000..96db876cac Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/domains.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra1.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra1.png new file mode 100644 index 0000000000..82124df72c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra2.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra2.png new file mode 100644 index 0000000000..9b9399b077 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra3.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra3.png new file mode 100644 index 0000000000..105a324e91 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra4.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra4.png new file mode 100644 index 0000000000..a2189e7b7b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/entra4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/integrations.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/integrations.webp new file mode 100644 index 0000000000..dce721b2e7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/integrations.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.png new file mode 100644 index 0000000000..6fb3480f04 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.webp new file mode 100644 index 0000000000..e11027d363 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/licensing.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification.webp new file mode 100644 index 0000000000..d4a232a628 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification_1.webp new file mode 100644 index 0000000000..e11d6084d7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notification_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.png new file mode 100644 index 0000000000..778e7169dc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.webp new file mode 100644 index 0000000000..b6b7548ced Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/notifications.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/options.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/options.webp new file mode 100644 index 0000000000..586292fce9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/options.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/options_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/options_1.webp new file mode 100644 index 0000000000..7adc6f7787 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/options_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/role.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/role.webp new file mode 100644 index 0000000000..ed0e878242 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/role.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/roles.webp b/static/images/recoveryforactivedirectory/3.1/admin/configuration/roles.webp new file mode 100644 index 0000000000..16806bbed4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/roles.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configuration/userroles.png b/static/images/recoveryforactivedirectory/3.1/admin/configuration/userroles.png new file mode 100644 index 0000000000..036616cbb8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configuration/userroles.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/configure.webp b/static/images/recoveryforactivedirectory/3.1/admin/configure.webp new file mode 100644 index 0000000000..e392f655ec Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/configure.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/disablemfa.webp b/static/images/recoveryforactivedirectory/3.1/admin/disablemfa.webp new file mode 100644 index 0000000000..7b49fe13b6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/disablemfa.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/enablemfa.webp b/static/images/recoveryforactivedirectory/3.1/admin/enablemfa.webp new file mode 100644 index 0000000000..e971723e25 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/enablemfa.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra1.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra1.png new file mode 100644 index 0000000000..82124df72c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra2.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra2.png new file mode 100644 index 0000000000..9b9399b077 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra3.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra3.png new file mode 100644 index 0000000000..105a324e91 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra4.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra4.png new file mode 100644 index 0000000000..a2189e7b7b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra6.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra6.png new file mode 100644 index 0000000000..4352dead02 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra6.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra7.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra7.png new file mode 100644 index 0000000000..ddb60238cb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/Entra7.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback.png new file mode 100644 index 0000000000..e3c36a911a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback1.png b/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback1.png new file mode 100644 index 0000000000..1b5d08d4ee Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/entra/EntraRollback1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/add.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/add.webp new file mode 100644 index 0000000000..eff0eb72f4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/add.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/addforest.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/addforest.webp new file mode 100644 index 0000000000..7f82d8ffc2 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/addforest.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm.webp new file mode 100644 index 0000000000..c7887aab21 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm_1.webp new file mode 100644 index 0000000000..12773ac6d4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/confirm_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/domaincontroller.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/domaincontroller.webp new file mode 100644 index 0000000000..565e87d6a0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/domaincontroller.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/forest.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/forest.webp new file mode 100644 index 0000000000..bd5e28e90d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/forest.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/forestrecovered.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/forestrecovered.webp new file mode 100644 index 0000000000..4aaa89d7dc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/forestrecovered.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/options.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/options.webp new file mode 100644 index 0000000000..0cb34deb50 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/options.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/options_1.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/options_1.webp new file mode 100644 index 0000000000..90dfccb869 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/options_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/recoveryplaybook.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/recoveryplaybook.webp new file mode 100644 index 0000000000..66ddc4c359 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/recoveryplaybook.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/schedule.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/schedule.webp new file mode 100644 index 0000000000..d9d3d40381 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/schedule.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/server.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/server.webp new file mode 100644 index 0000000000..77af207107 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/server.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackupconfiguration.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackupconfiguration.webp new file mode 100644 index 0000000000..d5b6adb522 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackupconfiguration.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackuphistory.webp b/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackuphistory.webp new file mode 100644 index 0000000000..7a1e0c4efb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/forest/serverbackuphistory.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/admin/navigation.webp b/static/images/recoveryforactivedirectory/3.1/admin/navigation.webp new file mode 100644 index 0000000000..8595c75da7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/admin/navigation.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/administratorrole.webp b/static/images/recoveryforactivedirectory/3.1/install/administratorrole.webp new file mode 100644 index 0000000000..7c610f05ed Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/administratorrole.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/certificates.webp b/static/images/recoveryforactivedirectory/3.1/install/certificates.webp new file mode 100644 index 0000000000..f9e8242f86 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/certificates.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/changedestinationfolder.webp b/static/images/recoveryforactivedirectory/3.1/install/changedestinationfolder.webp new file mode 100644 index 0000000000..2efd0bd6d1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/changedestinationfolder.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/completed.webp b/static/images/recoveryforactivedirectory/3.1/install/completed.webp new file mode 100644 index 0000000000..e2a5d7880c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/completed.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/configurationutility.png b/static/images/recoveryforactivedirectory/3.1/install/configurationutility.png new file mode 100644 index 0000000000..0823f581c5 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/configurationutility.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/configurationutility.webp b/static/images/recoveryforactivedirectory/3.1/install/configurationutility.webp new file mode 100644 index 0000000000..1827b2bb8b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/configurationutility.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/desktopicon.webp b/static/images/recoveryforactivedirectory/3.1/install/desktopicon.webp new file mode 100644 index 0000000000..bdf2ba828a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/desktopicon.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/destinationfolder.webp b/static/images/recoveryforactivedirectory/3.1/install/destinationfolder.webp new file mode 100644 index 0000000000..e1b329ed3d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/destinationfolder.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/eula.webp b/static/images/recoveryforactivedirectory/3.1/install/eula.webp new file mode 100644 index 0000000000..bcc2ee8b9f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/eula.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/licensefile.webp b/static/images/recoveryforactivedirectory/3.1/install/licensefile.webp new file mode 100644 index 0000000000..711239d14f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/licensefile.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/login.webp b/static/images/recoveryforactivedirectory/3.1/install/login.webp new file mode 100644 index 0000000000..81b6799b99 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/login.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/loginmfa.webp b/static/images/recoveryforactivedirectory/3.1/install/loginmfa.webp new file mode 100644 index 0000000000..8d05716390 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/loginmfa.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/ready.webp b/static/images/recoveryforactivedirectory/3.1/install/ready.webp new file mode 100644 index 0000000000..c66d9f8040 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/ready.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/rsatextensionregistered.webp b/static/images/recoveryforactivedirectory/3.1/install/rsatextensionregistered.webp new file mode 100644 index 0000000000..a99eb2c39a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/rsatextensionregistered.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/rsatextensionunregistered.webp b/static/images/recoveryforactivedirectory/3.1/install/rsatextensionunregistered.webp new file mode 100644 index 0000000000..d415a61c2b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/rsatextensionunregistered.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/serverconfiguration.webp b/static/images/recoveryforactivedirectory/3.1/install/serverconfiguration.webp new file mode 100644 index 0000000000..17815d1f05 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/serverconfiguration.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/sqlserverconfiguration.webp b/static/images/recoveryforactivedirectory/3.1/install/sqlserverconfiguration.webp new file mode 100644 index 0000000000..62d7318bdd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/sqlserverconfiguration.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/sqlserverdatabase.webp b/static/images/recoveryforactivedirectory/3.1/install/sqlserverdatabase.webp new file mode 100644 index 0000000000..02fb0f9293 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/sqlserverdatabase.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/webhost.webp b/static/images/recoveryforactivedirectory/3.1/install/webhost.webp new file mode 100644 index 0000000000..f9f1fca428 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/webhost.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/install/welcome.webp b/static/images/recoveryforactivedirectory/3.1/install/welcome.webp new file mode 100644 index 0000000000..22e1b8d050 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/install/welcome.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/active_directory.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/active_directory.png new file mode 100644 index 0000000000..c8c0e89107 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/active_directory.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery.png new file mode 100644 index 0000000000..c770fafac8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_finished.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_finished.png new file mode 100644 index 0000000000..001fd321fa Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page1.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page1.png new file mode 100644 index 0000000000..279d24e5b3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page2.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page2.png new file mode 100644 index 0000000000..83effc2d47 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page3.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page3.png new file mode 100644 index 0000000000..f509657db0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page4.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page4.png new file mode 100644 index 0000000000..6936e6e63c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page5.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page5.png new file mode 100644 index 0000000000..3398f56931 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page6.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page6.png new file mode 100644 index 0000000000..3d0902c679 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page6.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished.png new file mode 100644 index 0000000000..bcf197c7f0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished1.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished1.png new file mode 100644 index 0000000000..7a9fcd0432 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page1.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page1.png new file mode 100644 index 0000000000..27c753a47c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page2.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page2.png new file mode 100644 index 0000000000..35201b3abc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page3.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page3.png new file mode 100644 index 0000000000..76955a968b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page4.png b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page4.png new file mode 100644 index 0000000000..cb2cedc997 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/auditing.png b/static/images/recoveryforactivedirectory/3.1/product/auditing.png new file mode 100644 index 0000000000..31b19da960 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/auditing.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/config_utility.png b/static/images/recoveryforactivedirectory/3.1/product/config_utility.png new file mode 100644 index 0000000000..a6afd33897 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/config_utility.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration.png new file mode 100644 index 0000000000..9d43f72c4e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_finished.png new file mode 100644 index 0000000000..67358f571c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page1.png new file mode 100644 index 0000000000..966a7c2e01 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page2.png new file mode 100644 index 0000000000..4ab4da6791 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page3.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page3.png new file mode 100644 index 0000000000..ea90942fc7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page4.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page4.png new file mode 100644 index 0000000000..7e45ab0997 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page5.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page5.png new file mode 100644 index 0000000000..952889de7f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/active_directory/active_directory_configuration_page5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration.png new file mode 100644 index 0000000000..ad82fc9494 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_finished.png new file mode 100644 index 0000000000..ee95b0528d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page1.png new file mode 100644 index 0000000000..89906cfd8f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page2.png new file mode 100644 index 0000000000..21247506c5 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page3.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page3.png new file mode 100644 index 0000000000..5241dacc85 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/azure_storage/azure_storage_configuration_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/data_retention_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/data_retention_configuration.png new file mode 100644 index 0000000000..6b9bf233ce Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/data_retention_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration.png new file mode 100644 index 0000000000..af2efb801c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_finished.png new file mode 100644 index 0000000000..70c3b6b7dd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page1.png new file mode 100644 index 0000000000..8b82be030e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page2.png new file mode 100644 index 0000000000..11cbbb8140 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page3.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page3.png new file mode 100644 index 0000000000..213a7bcf94 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page4.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page4.png new file mode 100644 index 0000000000..a05d736576 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/entra_id/entra_id_configuration_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration.png new file mode 100644 index 0000000000..62225bcf72 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_finished.png new file mode 100644 index 0000000000..b64a6f2a3d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_page1.png new file mode 100644 index 0000000000..75f0b7719e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/forest/forest_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration.png new file mode 100644 index 0000000000..503b6e5770 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page1.png new file mode 100644 index 0000000000..a8564f0f82 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page2.png new file mode 100644 index 0000000000..02981210a2 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/integrations/integrations_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/licensing_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/licensing_configuration.png new file mode 100644 index 0000000000..5305e46ee3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/licensing_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/notifications_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/notifications_configuration.png new file mode 100644 index 0000000000..9c3441b5a3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/notifications_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration.png new file mode 100644 index 0000000000..85fb051a5b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_finished.png new file mode 100644 index 0000000000..d0ee3924c1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page1.png new file mode 100644 index 0000000000..3ed85f3d04 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page2.png new file mode 100644 index 0000000000..a8b064bb19 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page3.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page3.png new file mode 100644 index 0000000000..213a7bcf94 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page4.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page4.png new file mode 100644 index 0000000000..ffee62c325 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/okta/okta_configuration_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration.png new file mode 100644 index 0000000000..dc67af1a04 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_finished.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_finished.png new file mode 100644 index 0000000000..d18becd450 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page1.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page1.png new file mode 100644 index 0000000000..b4aa8ee494 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page2.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page2.png new file mode 100644 index 0000000000..ef1898c969 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page3.png b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page3.png new file mode 100644 index 0000000000..1831544014 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/configuration/users_and_roles/users_and_roles_configuration_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/dashboard.png b/static/images/recoveryforactivedirectory/3.1/product/dashboard.png new file mode 100644 index 0000000000..8462c3e2c3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/dashboard.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/entra_id.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/entra_id.png new file mode 100644 index 0000000000..66c66f3379 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/entra_id.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore.png new file mode 100644 index 0000000000..114f8172a8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_finished.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_finished.png new file mode 100644 index 0000000000..d5282b1109 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page1.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page1.png new file mode 100644 index 0000000000..80dc00267e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page2.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page2.png new file mode 100644 index 0000000000..026f0d892b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/restore/entra_id_restore_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_finished.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_finished.png new file mode 100644 index 0000000000..c8fdba0463 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page1.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page1.png new file mode 100644 index 0000000000..cf4c8b5921 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page2.png b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page2.png new file mode 100644 index 0000000000..b488ca9860 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/entra_id/rollback/entra_id_rollback_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup.png new file mode 100644 index 0000000000..bf8da719ef Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_finished.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_finished.png new file mode 100644 index 0000000000..f26c80fb2c Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page1.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page1.png new file mode 100644 index 0000000000..9f131b5a2b Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page2.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page2.png new file mode 100644 index 0000000000..ad92c8830d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page3.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page3.png new file mode 100644 index 0000000000..c81a3064a4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page4.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page4.png new file mode 100644 index 0000000000..3631729ca2 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page5.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page5.png new file mode 100644 index 0000000000..27f02d75b1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup/forest_backup_page5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/backup_history.png b/static/images/recoveryforactivedirectory/3.1/product/forest/backup_history.png new file mode 100644 index 0000000000..cc5cbd6aa6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/backup_history.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/forest.png b/static/images/recoveryforactivedirectory/3.1/product/forest/forest.png new file mode 100644 index 0000000000..915e9bee29 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/forest.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/playbooks.png b/static/images/recoveryforactivedirectory/3.1/product/forest/playbooks.png new file mode 100644 index 0000000000..44d66931c8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/playbooks.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_confirmed.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_confirmed.png new file mode 100644 index 0000000000..51730ef4dc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_confirmed.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_finished.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_finished.png new file mode 100644 index 0000000000..56563ad9f7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page1.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page1.png new file mode 100644 index 0000000000..8bf4e332b9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page2.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page2.png new file mode 100644 index 0000000000..f7aafc9cd5 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page3.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page3.png new file mode 100644 index 0000000000..97a565ee39 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_playbook_finished.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_playbook_finished.png new file mode 100644 index 0000000000..42dbefdb49 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_playbook_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_start.png b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_start.png new file mode 100644 index 0000000000..73698bc78e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/forest/recovery/forest_recovery_start.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page1.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page1.png new file mode 100644 index 0000000000..7b697d47c7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page10.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page10.png new file mode 100644 index 0000000000..d1c2351dfa Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page10.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page2.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page2.png new file mode 100644 index 0000000000..ba0108528a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page3.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page3.png new file mode 100644 index 0000000000..1b07c1b6b3 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page4.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page4.png new file mode 100644 index 0000000000..c01ca0d255 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page5.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page5.png new file mode 100644 index 0000000000..102a4f3eb9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page6.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page6.png new file mode 100644 index 0000000000..df206f08b2 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page6.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page7.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page7.png new file mode 100644 index 0000000000..9a3d5e3ce0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page7.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page8.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page8.png new file mode 100644 index 0000000000..4ea8a00f52 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page8.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page9.png b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page9.png new file mode 100644 index 0000000000..f93665d359 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/installer_page9.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/product-installer.png b/static/images/recoveryforactivedirectory/3.1/product/installers/product-installer.png new file mode 100644 index 0000000000..85af4c63e0 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/product-installer.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page1.png b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page1.png new file mode 100644 index 0000000000..0ea06dd44e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page2.png b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page2.png new file mode 100644 index 0000000000..8b3be37bbb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page3.png b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page3.png new file mode 100644 index 0000000000..710c930a69 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page3.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page4.png b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page4.png new file mode 100644 index 0000000000..210e0981f6 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page4.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page5.png b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page5.png new file mode 100644 index 0000000000..f8ed387535 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/installers/rsat_page5.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/login.png b/static/images/recoveryforactivedirectory/3.1/product/login.png new file mode 100644 index 0000000000..cff359377f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/login.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/mfa_authenticator.png b/static/images/recoveryforactivedirectory/3.1/product/mfa_authenticator.png new file mode 100644 index 0000000000..a43445463a Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/mfa_authenticator.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/mfa_disable.png b/static/images/recoveryforactivedirectory/3.1/product/mfa_disable.png new file mode 100644 index 0000000000..3693a5f882 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/mfa_disable.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/mfa_enable.png b/static/images/recoveryforactivedirectory/3.1/product/mfa_enable.png new file mode 100644 index 0000000000..e6675fe825 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/mfa_enable.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/okta/okta.png b/static/images/recoveryforactivedirectory/3.1/product/okta/okta.png new file mode 100644 index 0000000000..8356840977 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/okta/okta.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_finished.png b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_finished.png new file mode 100644 index 0000000000..9719941d75 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_finished.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page1.png b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page1.png new file mode 100644 index 0000000000..277e06a69f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page1.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page2.png b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page2.png new file mode 100644 index 0000000000..cd6aeb32b9 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/okta/rollback/okta_rollback_page2.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/shortcut.png b/static/images/recoveryforactivedirectory/3.1/product/shortcut.png new file mode 100644 index 0000000000..4bec3fb81e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/shortcut.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/product/utilities.png b/static/images/recoveryforactivedirectory/3.1/product/utilities.png new file mode 100644 index 0000000000..423cf776bc Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/product/utilities.png differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrestore.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrestore.webp new file mode 100644 index 0000000000..3b1f386b49 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrestore.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrollback.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrollback.webp new file mode 100644 index 0000000000..12332ed300 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/aducrollback.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials.webp new file mode 100644 index 0000000000..803981f9c7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials_1.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials_1.webp new file mode 100644 index 0000000000..e933a15d77 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/alternatecredentials_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/changedestinationfolder.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/changedestinationfolder.webp new file mode 100644 index 0000000000..1fa70f7b4e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/changedestinationfolder.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/completed.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/completed.webp new file mode 100644 index 0000000000..9b0134a87d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/completed.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm.webp new file mode 100644 index 0000000000..b339683fa7 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm_1.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm_1.webp new file mode 100644 index 0000000000..9e3239b86d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/confirm_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/destinationfolder.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/destinationfolder.webp new file mode 100644 index 0000000000..ab806531a2 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/destinationfolder.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/domaincontroller.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/domaincontroller.webp new file mode 100644 index 0000000000..5d878e9c57 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/domaincontroller.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/domiancontroller.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/domiancontroller.webp new file mode 100644 index 0000000000..a55f0d92b8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/domiancontroller.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/licenseagreement.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/licenseagreement.webp new file mode 100644 index 0000000000..9a199e820f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/licenseagreement.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups.webp new file mode 100644 index 0000000000..03e60721f4 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups_1.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups_1.webp new file mode 100644 index 0000000000..c97b067d20 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/objectbackups_1.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/ready.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/ready.webp new file mode 100644 index 0000000000..935073b2be Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/ready.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/recoveryoptions.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/recoveryoptions.webp new file mode 100644 index 0000000000..95b35cfd93 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/recoveryoptions.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/recvoerysuccessful.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/recvoerysuccessful.webp new file mode 100644 index 0000000000..c809909c05 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/recvoerysuccessful.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/rollbacksuccessful.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/rollbacksuccessful.webp new file mode 100644 index 0000000000..7e39f9182f Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/rollbacksuccessful.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/serverconnection.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/serverconnection.webp new file mode 100644 index 0000000000..51d0c279fb Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/serverconnection.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/useroptions.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/useroptions.webp new file mode 100644 index 0000000000..5445e1a08d Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/useroptions.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/rsatextension/welcome.webp b/static/images/recoveryforactivedirectory/3.1/rsatextension/welcome.webp new file mode 100644 index 0000000000..e8a6454604 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/rsatextension/welcome.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/applicationserver.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/applicationserver.webp new file mode 100644 index 0000000000..e47f6a199e Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/applicationserver.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/recoverrsat.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/recoverrsat.webp new file mode 100644 index 0000000000..5ccac846b8 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/recoverrsat.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/rollbackrsat.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/rollbackrsat.webp new file mode 100644 index 0000000000..a5a6838bde Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/rollbackrsat.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/connectiontest.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/connectiontest.webp new file mode 100644 index 0000000000..c8e349cfdd Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/connectiontest.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/server.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/server.webp new file mode 100644 index 0000000000..2a10885b43 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/server.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/serverbackupconfiguration.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/serverbackupconfiguration.webp new file mode 100644 index 0000000000..4e9b61ad67 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/serverbackupconfiguration.webp differ diff --git a/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/sqlsettings.webp b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/sqlsettings.webp new file mode 100644 index 0000000000..ef6c96c2d1 Binary files /dev/null and b/static/images/recoveryforactivedirectory/3.1/troubleshooting/updatepassword/sqlsettings.webp differ