Identrecovery

docs/recoveryforactivedirectory/3.1/admin/_category_.json

@@ -0,0 +1,10 @@
+{
+ "label": "Administration",
+ "position": 40,
+ "collapsed": true,
+ "collapsible": true,
+ "link": {
+ "type": "doc",
+ "id": "overview"
+ }
+}

docs/recoveryforactivedirectory/3.1/admin/activedirectory/_category_.json

@@ -0,0 +1,10 @@
+{
+ "label": "Active Directory Page",
+ "position": 40,
+ "collapsed": true,
+ "collapsible": true,
+ "link": {
+ "type": "doc",
+ "id": "overview"
+ }
+}

docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md

@@ -0,0 +1,118 @@
+---
+title: "Active Directory Page"
+description: "Active Directory Page"
+sidebar_position: 40
+---
+
+# Active Directory Page
+
+On the Active Directory page, you can access all the domains that you have configured through the
+[Domains Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/domain.md).
+
+Click **Active Directory** in the left pane to open the Active Directory page.
+
+![Active Directory page](/images/recoveryforactivedirectory/3.1/product/active_directory/active_directory.png)
+
+Select a domain from the drop-down menu and expand it to view the domain tree and container
+structure, which is exactly the same as you get in Active Directory Users and Computers. Objects in
+the domain are also available in the same hierarchical structure.
+
+The page displays the following information:
+
+- Name – The display name of the object
+- Distinguished Name – The unique name identifying the object in the directory
+- Description – A description of the object
+- Type – The object type, showing whether it is a container, organizational unit, computer, group,
+ user, etc.
+- Backup Time – The date and time of the last the backup
+
+You can perform the rollback and recover operations for objects.
+
+## Search for an Object
+
+There are several ways to find an object:
+
+- Column Filters – Click a column header to organize the table alphabetically by the column header.
+ An arrow appears by the column name. Use it to arrange the entries by ascending or descending
+ order.
+- Search box – Enter a text string in the search box to filter the table for results that contain
+ the text.
+
+## Rollback an Object
+
+Select and expand a domain in the left pane and locate the object you want to rollback. Right-click
+this object and select **Rollback** on the menu. See the [Rollback Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md) topic for
+additional information.
+
+## Recover Deleted Objects
+
+On expanding a domain in the left pane, you will notice that Recycle Bin is in blue, indicating that
+this is a virtual container specific to Identity Recovery. Use the Recycle Bin to
+recover deleted objects in Active Directory. See the [Recover Objects](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md) topic for
+additional information.
+
+## Integration with Threat Prevention
+
+When you right-click an object in a domain on the Active Directory page, the right-click menu is
+displayed as:
+
+![Right-click menu on the Active Directory page](/images/recoveryforactivedirectory/3.1/admin/activedirectory/rightclickmenu.webp)
+
+The Show audit history and Show activity options are enabled only when both the following conditions
+are met:
+
+- Threat Prevention data is tied with Identity Recovery data
+- The user is logged in with an account that is specified in the Account section of the
+ [Netwrix Integrations Page](/docs/recoveryforactivedirectory/3.1/admin/configuration/integration.md)
+
+These options display data from Threat Prevention.
+
+### View the Audit History for an Object
+
+You can view the changes made to an object by other users.
+
+On the Active Directory page, select and expand a domain in the left pane and locate the object you
+want to view the audit history for. Right-click this object and select **Show audit history** on the
+menu. The Audit History window is displayed.
+
+![Audit History window](/images/recoveryforactivedirectory/3.1/admin/activedirectory/audithistory.webp)
+
+The following information is displayed for every action performed on the object:
+
+- Who – The user who performed the action
+- What – The action performed
+- Success – Shows whether the action was successfully performed; _True_ indicates success and
+ _False_ indicates failure
+- Where – The object the action was performed on
+- When – The date and time of the action
+
+To view the details of an action, click the plus sign in the respective row to expand it.
+Information includes the object attribute that was affected, the type of change made, and the old
+and new values.
+
+### View the Activity Perpetrated by an Object
+
+You can view the activity performed by an object in the environment.
+
+On the Active Directory page, select and expand a domain in the left pane and locate the object
+whose activity you want to view. Right-click this object and select **Show activity** on the menu.
+The Audit Activity window is displayed.
+
+![Audit Activity window](/images/recoveryforactivedirectory/3.1/admin/activedirectory/auditactivity.webp)
+
+The following information is displayed for the actions performed by the object:
+
+- What – The action performed
+- Success – Shows whether the action was successfully performed; _True_ indicates success and
+ _False_ indicates failure
+- Where – The object the action was performed on
+- When – The date and time of the action
+
+To view the details of an action, click the plus sign in the respective row to expand it.
+Information includes the object attribute that was affected, the type of change made, and the old
+and new values.
+
+:::note
+For objects in the Recycle Bin, the Show activity option is not available.
+
+:::

docs/recoveryforactivedirectory/3.1/admin/activedirectory/recover.md

@@ -0,0 +1,144 @@
+---
+title: "Recover Objects"
+description: "Recover Objects"
+sidebar_position: 20
+---
+
+# Recover Objects
+
+The Recycle Bin enables you to view the objects deleted in domains monitored by Identity Recovery. You can recover these deleted Active Directory objects from the Recycle Bin.
+
+Click **Active Directory** in the left pane to open the [Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md). Select
+and expand a domain in the left pane and click Recycle Bin to get a list of deleted objects in the
+domain.
+
+![Recycle Bin](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery.png)
+
+You can recover deleted objects.
+
+The page displays the following information:
+
+- Name – The display name of the object
+- Distinguished Name – The unique name identifying the object in the directory
+- Last Known Parent – The path of the parent of the object
+- Type – The object type, showing whether it is a container, organizational unit, computer, group,
+ user, etc.
+- Deleted On – The time and date when the object was deleted
+- Time Left – The time remaining until the object is no longer recoverable
+
+## Search for an Object
+
+There are several ways to find an object:
+
+- Column Filters – Click a column header to organize the table alphabetically by the column header.
+ An arrow appears by the column name. Use it to arrange the entries by ascending or descending
+ order.
+- Search box – Enter a text string in the search box to filter the table for results that contain
+ the text.
+
+## Recover an Object
+
+Follow the steps to recover a deleted object.
+
+**Step 1 –** Click Active Directory in the left pane to open the
+[Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md).
+
+**Step 2 –** Select and expand a domain in the left pane and click Recycle Bin.
+
+**Step 3 –** Do one of the following
+
+- Select the object to restore and click the **Restore** button.
+- Right-click the object and select **Restore** on the shortcut menu.
+
+The Object Restore wizard opens.
+
+![Object Restore wizard - Object Backups page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page1.png)
+
+**Step 4 –** In the Backup Data section, select a backup date to restore from. Then click **Next**.
+
+![Object Restore wizard - Domain Controller page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page2.png)
+
+**Step 5 –** Select a domain controller where the restore operation will take effect. Options are:
+
+- Use any writable domain controller – The system picks any writable domain controller in the domain
+ for the restore operation
+- Use a specific domain controller – Select a domain controller from the drop-down menu for the
+ restore operation
+
+**Step 6 –** Click **Next**.
+
+![Object Restore wizard - Recovery Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page3.png)
+
+**Step 7 –** On the Recovery Options page, select the Container and Naming Conflict actions for the
+recovery process.
+
+- Container – When a container is deleted in Active Directory, all child objects are also deleted.
+ Select a container restore option from the drop-down menu:
+
+ - Only restore the container object – Restores the container object but no children
+ - Restore the container object and the immediate children – Restores the container object and
+ its immediate children
+ - Restore the entire sub-tree – Restores the container object and all children
+
+ :::note
+ Selecting the Restore the container object and the immediate children or the Restore
+ the entire sub-tree option enables the User Options page.
+ :::
+
+
+- Naming Conflict – A naming conflict can occur if an object was created post-deletion that has
+ identical values to the original object. From the drop-down menu, select an option to implement if
+ a naming conflict occurs:
+
+ - Skip the object – If there is a conflict with naming, do not restore and skip the object
+ - Automatically use alternative values – If there is a conflict with naming, a numeric value
+ will be appended to the name of the object being restored to create a unique name
+
+**Step 8 –** Click **Next**.
+
+![Object Restore wizard - User Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page4.png)
+
+**Step 9 –** The User Options page is displayed when user objects are being restored. When a user
+object is included as a child object being restored, this page is also displayed. Select the check
+boxes to configure the necessary options for the user.
+
+- Enable user – Enables the user in Active Directory
+- Clear 'User must change password' flag upon restoration – Restored users do not receive an alert
+ to change their password upon first login after a recovery. Instead, their old password prior to
+ deletion is still active.
+- Set new password – Implement a new password upon recovery. Type the new password in the text box.
+
+ :::tip
+ Remember, when a new password is created, the user needs it to login the first time. The
+ password should be copied and given to the restored user.
+ :::
+
+
+**Step 10 –** Click **Next**.
+
+![Object Restore wizard - Credentials page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page5.png)
+
+**Step 11 –** The account performing the operation must have Domain Admin privileges to access the
+domain tree area where the object resides. On the Credentials page:
+
+- If the account specified during domain configuration has Domain Admin privileges, click **Next**.
+- If the domain account does not have Domain Admin privileges, select the **Use alternate
+ credentials to perform the object restore** checkbox and enter an account with Domain Admin
+ privileges, then click **Next**.
+
+For a Least Privilege Access Model to provision an Active Directory security group with the
+permissions that are necessary to perform backups, rollbacks and recovery, see the
+[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model)
+topic.
+
+![Object Restore wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_page6.png)
+
+**Step 12 –** The Confirm page displays a summary of the settings you provided on the pages of the
+wizard. Use the Back button to return to a previous page and change any setting. Click **Done**
+to finish the wizard.
+
+![Object Restore Complete message](/images/recoveryforactivedirectory/3.1/product/active_directory/recovery/active_directory_recovery_finished.png)
+
+**Step 13 –** A completed message is displayed when the restore is successful. Click **OK**.
+
+The deleted object has now been restored.

docs/recoveryforactivedirectory/3.1/admin/activedirectory/rollback.md

@@ -0,0 +1,67 @@
+---
+title: "Rollback Objects"
+description: "Rollback Objects"
+sidebar_position: 10
+---
+
+# Rollback Objects
+
+You can revert an Active Directory object to its previous state.
+
+Follow the steps to roll back an Active Directory object, including user accounts, groups, and
+organizational units.
+
+**Step 1 –** Click Active Directory in the left pane to open the
+[Active Directory Page](/docs/recoveryforactivedirectory/3.1/admin/activedirectory/overview.md).
+
+**Step 2 –** Select and expand a domain in the left pane and locate the object you want to rollback.
+
+**Step 3 –** Do one of the following:
+
+- Select the object to rollback and click the **Rollback** button.
+- Right-click the object and select **Rollback** on the shortcut menu.
+
+The Object Rollback wizard opens.
+
+![Object Rollback wizard - Object Backup page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page1.png)
+
+**Step 4 –** In the Backup Date section, select a backup to use for the rollback operation. Then
+select the checkbox(es) for the attributes you want to roll back. Click **Next**.
+
+![Object Rollback wizard - Options page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page2.png)
+
+**Step 5 –** Select a domain controller where the rollback changes will get affected. Options are:
+
+- Use any writable domain controller – The system picks any writable domain controller in the domain
+ for the rollback operation
+- Use a specific domain controller – Select a domain controller from the drop-down menu for the
+ rollback operation
+
+**Step 6 –** Click **Next**.
+
+![Object Rollback wizard - Credentials page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page3.png)
+
+**Step 7 –** The account performing the operation must have Domain Admin privileges to access the
+domain tree area where the object resides. On the Credentials page:
+
+- If the account specified during domain configuration has Domain Admin privileges, click **Next**.
+- If the domain account does not have Domain Admin privileges, select the **Use alternate
+ credentials to perform the object rollback** checkbox and enter an account with Domain Admin
+ privileges, then click **Next**.
+
+For a Least Privilege Access Model to provision an Active Directory security group with the
+permissions that are necessary to perform backups, rollbacks and recovery, see the
+[Least Privilege Access Model](/docs/recoveryforactivedirectory/3.1/requirements/targetdomain.md#least-privilege-access-model)
+topic.
+
+![Object Rollback wizard - Confirm page](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_page4.png)
+
+**Step 8 –** The Confirm page displays a summary of the settings you provided on the pages of the
+wizard. Use the Back button to return to a previous page and change any setting. Click **Complete**
+to finish the wizard.
+
+![Object Rollback Sucessful message](/images/recoveryforactivedirectory/3.1/product/active_directory/rollback/active_directory_rollback_finished.png)
+
+**Step 9 –** A completed message is displayed when the rollback is successful. Click **OK**.
+
+The object has been rolled back.

docs/recoveryforactivedirectory/3.1/admin/audit.md

@@ -0,0 +1,22 @@
+---
+title: "Audit Logs Page"
+description: "Audit Logs Page"
+sidebar_position: 70
+---
+
+# Audit Logs Page
+
+The Audit Logs page provides an audit trail of the actions performed by users in Identity Recovery.
+
+Click **Audit Logs** in the left pane to open the Audit Logs page.
+
+![Audit Logs Page](/images/recoveryforactivedirectory/3.1/product/auditing.png)
+
+The following information is displayed for an event:
+
+- Action – The action perpetrated by the account
+- Object – The name of the object affected by the change
+- Account – The account that made the change
+- Event Time – The time the action was performed
+
+To view the details of an event, click the arrow next to it to expand it.

docs/recoveryforactivedirectory/3.1/admin/configuration/_category_.json

@@ -0,0 +1,10 @@
+{
+ "label": "Configuration Interface",
+ "position": 60,
+ "collapsed": true,
+ "collapsible": true,
+ "link": {
+ "type": "doc",
+ "id": "overview"
+ }
+}