Restoring Configurations
Restore Microsoft 365 configurations from backup
restorerecoverybackupdisaster recovery
Restoring Configurations
Restore Microsoft 365 configurations from backups to recover from errors, malicious changes, or failed migrations.
Understanding Restore
What Restore Does
Restore operations:
- Compare backup to current state
- Identify differences
- Apply backed-up configuration
- Document changes made
What Restore Doesn't Do
Restore cannot:
- Recover deleted users or data
- Restore mailbox content
- Undo license changes
- Modify Microsoft-managed settings
Restore modifies your Microsoft 365 configuration. Always test in a non-production environment first when possible.
Restore Process
Step 1: Select Backup
- Go to Backup > History
- Find the backup to restore from
- Click Restore
- Restore wizard opens
Step 2: Choose Restore Scope
Select what to restore:
| Scope | Description |
|---|---|
| Full Restore | All items in backup |
| Selective | Choose specific items |
| Single Item | One configuration only |
Step 3: Review Comparison
Before restoring, see the comparison:
| Section | Shows |
|---|---|
| Will Change | Items that differ from current |
| Will Add | Items in backup not in current |
| Will Remove | Items in current not in backup (optional) |
| No Change | Items that match |
Review each change carefully.
Step 4: Restore Options
| Option | Description |
|---|---|
| Preview Only | Show changes without applying |
| Create Pre-Restore Backup | Backup current state first |
| Notify on Completion | Send notification |
| Dry Run | Simulate restore |
Always enable "Create Pre-Restore Backup" for rollback capability.
Step 5: Confirm and Execute
- Review all settings
- Accept confirmation
- Click Restore
- Monitor progress
Restore Progress
Monitoring
During restore:
- Progress bar shows completion
- Current item displayed
- Success/failure counts
- Estimated time remaining
Restore States
| State | Meaning |
|---|---|
| In Progress | Restore running |
| Completed | All items restored |
| Partial | Some items failed |
| Failed | Restore couldn't complete |
| Rolled Back | Restore was reversed |
Restore Results
Viewing Results
After restore:
- Go to Backup > Restore History
- Select the restore operation
- View details
Result Details
| Section | Information |
|---|---|
| Summary | Success rate, duration |
| Restored Items | What was changed |
| Failed Items | What couldn't restore |
| Pre-Restore Backup | Link to before-state |
Verifying Restore
After restore completes:
- Check affected configurations in M365
- Verify expected state
- Test functionality
- Document outcome
Selective Restore
Single Resource Restore
Restore one configuration:
- Open backup
- Browse contents
- Find specific item
- Click Restore This Item
- Confirm and execute
Category Restore
Restore a type of resource:
- Open backup
- Select category (e.g., Conditional Access)
- Click Restore Category
- Review and confirm
Multi-Select Restore
Choose specific items:
- Open backup
- Check boxes for items to restore
- Click Restore Selected
- Review and confirm
Rollback
If Restore Causes Issues
If restoration creates problems:
- Go to Backup > Restore History
- Find the restore operation
- Click Rollback
- Confirm rollback
- Pre-restore backup is applied
Rollback Requirements
Rollback is available when:
- Pre-restore backup was created
- Rollback window hasn't expired (24 hours default)
- Original restore completed
Common Restore Scenarios
Accidental Policy Deletion
Conditional Access policy was deleted:
- Find backup containing the policy
- Select single-item restore
- Restore the specific policy
- Verify in Azure AD
Malicious Configuration Change
Unauthorized changes detected:
- Identify last known-good backup
- Review differences
- Selectively restore changed items
- Document incident
Failed Migration Rollback
Migration caused issues:
- Use pre-migration backup
- Full restore or selective
- Return to previous state
- Plan migration corrections
Compliance Remediation
Configuration drifted from compliance:
- Find compliant backup
- Compare to current state
- Restore specific controls
- Verify compliance
Best Practices
Before Restoring
- Review backup contents thoroughly
- Enable pre-restore backup
- Consider off-hours execution
- Notify affected teams
- Have rollback plan
During Restore
- Monitor progress
- Don't interrupt unless critical
- Document any issues
- Be available for verification
After Restore
- Verify configurations
- Test affected functionality
- Update documentation
- Communicate completion
Limitations
Not Restorable
Some items cannot be restored:
| Item | Reason |
|---|---|
| Deleted users | Users not in backup scope |
| Mailbox data | Not configuration data |
| Licenses | Require manual assignment |
| Microsoft defaults | System-managed settings |
Partial Support
Some items have limitations:
| Item | Limitation |
|---|---|
| Group membership | Members must exist |
| Role assignments | Users must exist |
| App permissions | May need re-consent |
Troubleshooting
Restore Fails
If restore doesn't complete:
- Check error messages
- Verify API permissions
- Ensure resources exist
- Try individual item restore
Items Won't Restore
If specific items fail:
- Check dependencies (users, groups)
- Verify license requirements
- Review Microsoft documentation
- Manual recreation may be needed
Unexpected Results
If restore produces unexpected state:
- Compare with backup contents
- Check for mid-restore changes
- Consider rollback
- Review detailed logs
What's Next?
- Creating Backups - Maintain restore points
- Schedules - Automated protection
- Drift Detection - Monitor for changes