Case Study: Global Manufacturer achieves rapid ransomware recovery and minimized downtime with Quest Recovery Manager for Active Directory Disaster Recovery Edition

Global Manufacturer Overcomes Ransomware Attack with Quest Recovery Manager for Active Directory Disaster Recovery Edition

A global manufacturing company with about 7,000 employees was hit by ransomware that impacted 17 Domain Controllers across multiple continents, scrambling Active Directory passwords for roughly 98% of users and many service and privileged accounts. Encrypted files found in SYSVOL raised concerns about propagation and hidden malware, forcing the IT team to both restore AD and protect systems from reinfection under severe time pressure.

Using Quest Recovery Manager for Active Directory Disaster Recovery Edition, the team performed phased recoveries and restored AD to clean OSs, reset privileged account passwords, and recovered user accounts from a five-day backup. The approach let them prioritize critical sites and eliminate cross-team dependencies — the first DC was back in one hour, the second in 12 minutes, and three more across two continents in 36 minutes — dramatically reducing downtime and accelerating recovery.