# Commvault recovering Active Directory faster — retained record

> Retained news record from news:blocksandfiles.

Canonical: https://highsignal.app/data/records/3ae08dd21ddf0e36

[← sources](https://highsignal.app/data)


source: [news](https://highsignal.app/data/news) (news:blocksandfiles)  published 2026-09-10 13:08 ingested 2026-09-10 22:21

[original source ↗](https://www.blocksandfiles.com/security/2026/09/10/commvault-recovering-active-directory-faster/5295537)

## retained text



```
Commvault recovering Active Directory faster
Commvault’s Active Directory Pre Recover reduces the time it takes to recover Active Directory (AD) from hours to minutes.
Active Directory Pre Recover creates a clean, standby copy of AD in an isolated, air-gapped environment, using existing Commvault technologies, such as Commvault Cleanroom and Threat Scan. Threat Scan continuously scans AD backups so the standby copy is free of malicious content. Customers need not wait for a full forest recovery or rely on complex identity synchronisation, and can fail over to a clean copy within minutes.
Rajiv Kottomtharayil, Chief Products Officer at Commvault, said: “Identity is foundational to every enterprise application, user, and business process. Commvault has already made significant progress reducing identity recovery times from weeks to hours, and now we are extending that progress toward near-real-time availability. The result is faster access to critical business systems and greater confidence during cyber recovery.”
At present, Commvault says, organizations facing an AD outage can only have their apps continue authenticating against trusted identity services through having complicated replication of accounts in alternate Identity and Access Management Systems or waiting for a full forest restore to complete. But, with an AD standby copy stored in Cleanroom, customers can know that, in the event production identity services are unavailable, trusted access to critical systems can continue a few minutes later.
Commvault Active Directory Pre Recover will be available for early access in the coming months, delivered as part of Commvault's Identity Resilience portfolio. All enterprise AD customers will receive Active Directory Pre Recover as part of their existing license, including a lite version of Cleanroom. This offering will be available globally through Commvault's partner ecosystem.
Alternatives
Cayosoft Guardian pre-builds and daily-tests a clean standby forest, for example in Azure or AWS. Failover to the standby environment is positioned as near-instant rather than a traditional restore cycle. It also covers Entra ID and related Microsoft 365/Intune objects.
Rubrik offers Identity Recovery on Rubrik Security Cloud, with unified hybrid AD + Entra ID recovery and orchestrated forest workflows, immutable backups, and clean-room options. It claims recovery of identity services to a clean state can happen in minutes.
Druva provides a fully managed SaaS platform and claims single-object restore in under 3 minutes and domain-controller recovery in under an hour, plus automated forest reconstruction. Immutable, air-gapped protection.
Semperis has Active Directory Forest Recovery / ADFR, offering purpose-built forest recovery. It automates the process (including metadata cleanup and FSMO handling), restores to a known-clean state to avoid reinfecting malware, and claims up to 90 percent faster recovery - often minutes to hours even in multi-forest environments. Backups can go to immutable Azure storage. Cohesity often partners with Semperis for AD forest work.
```



document fetched 2026-09-11 02:59 · canonical https://blocksandfiles.com/security/2026/09/10/commvault-recovering-active-directory-faster/5295537