Active Directory Backup Using Change Notifications for Granular Recovery

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data protection systems struggle to provide granular recovery of active directory (AD) objects from virtual machine backups without requiring agents in the production environment, and they inefficiently manage backup schedules and resource consumption.

Innovation Solution

A backup server with AD listeners and recovery microservices tracks changes to AD objects using resilient change block tracking, manages backup schedules, and provides granular recovery from production tombstones or VM backups, optimizing listener installation based on change rates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If full backups of virtual machines are performed, then data protection is ensured, but granular recovery of specific application objects is not possible

Engineering Contradiction:

Improvedata protectionVSAvoidgranular recovery capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the virtual machine backup into application-level components by parsing VM backups to identify and extract specific application data (AD objects, databases, email items). This allows granular recovery of individual application objects from the consolidated VM backup without requiring separate application-level backups.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent extracts application-level data from the virtual machine backup by parsing the backup files and identifying application-specific objects. This extraction enables users to recover only the needed application objects (AD objects, database records, email items) rather than restoring the entire VM.

Inventive Principle:

Principle #2Taking out (Extraction)

2Ease of operation

If agents are installed in the production environment for tracking AD changes, then granular recovery of AD objects is enabled, but system complexity and resource consumption increase

Engineering Contradiction:

Improvegranular recovery of AD objectsVSAvoidsystem complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary component (backup server with AD listeners) that monitors AD changes without requiring agents in the production environment. The AD listeners subscribe to AD change notifications and track modifications, enabling granular recovery capability while avoiding the complexity of installing and managing agents in the production system.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent leverages the Active Directory service's built-in change notification capability to track AD object modifications. Instead of requiring external agents to monitor changes, the system uses AD's native event subscription mechanism, allowing the backup server to automatically detect and track changes without additional software in the production environment.

Inventive Principle:

Principle #25Self-service

3Loss of information

If frequent backups are performed to capture AD changes, then data freshness is improved, but resource consumption and backup time increase

Engineering Contradiction:

Improvedata freshnessVSAvoidbackup efficiency

Core Design Contradiction:

Loss of informationVSProductivity

Solution Approach 1:

The patent implements periodic backup actions triggered by AD change events rather than continuous or fixed-interval backups. The AD listeners monitor for changes and initiate backups only when modifications occur, ensuring data freshness while avoiding unnecessary backup operations during periods of no changes.

Inventive Principle:

Principle #19Periodic action

Solution Approach 2:

The patent uses feedback from AD change notifications to control the backup process. The AD listeners subscribe to change events and use this feedback information to determine when backups are needed, creating an event-driven backup system that maintains data freshness while optimizing resource usage by backing up only when changes occur.

Inventive Principle:

Principle #23Feedback

4Measurement precision

If AD listeners are continuously monitoring for changes, then change detection accuracy is improved, but resource consumption increases

Engineering Contradiction:

Improvechange detection accuracyVSAvoidresource consumption

Core Design Contradiction:

Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The patent implements periodic monitoring through event-driven AD listeners that activate only when changes occur. Instead of continuous monitoring, the listeners subscribe to AD change notifications and process events only when triggered, maintaining accurate change detection while reducing resource consumption during stable periods.

Inventive Principle:

Principle #19Periodic action

Data Source

PatentUS12488130B1Active directory data protection by leveraging virtual machine backup with change notification-based active directory backup

Publication Date: 2025.12.02 DELL PROD LP

AI summary

A method for managing data protection includes initiating, by a backup server, discovery for a new virtual machine (VM) in a production environment, performing, using an active directory listener (AD), listening on active directory (AD) applications in the production environment, wherein the new VM executes one of the AD applications, and wherein the one of the AD applications comprises a set of AD objects and a directory service for managing the set of AD objects, storing, based on the listening, monitored changes to obtain stored changes in the AD applications, generating a change report based on the stored changes, and using the change report to perform an incremental backup of the new VM and store a VM backup of the new VM and an AD application backup of the one of the AD applications in a backup storage system.