Backing up AD zones

Posted on 2005-04-20
Last Modified: 2010-04-18
I have a WIN 2k3 AD environment. I am running some AD Integrated Zones( ADIZ) and some stub zones.  I need to create a backup of all the zones. When I go into the dns folder in  c:\WINDOWS\system32\dns i don't see my AD integrazed zones and some of my stub zones. I know ADIZ are part of ADm, but just want to make sure I get a backup of all them?
How can I accomplish this?

Question by:jibarra
    1 Comment
    LVL 70

    Accepted Solution


    As implied, AD Integrated Zones are stored in the Active Directory Structure.

    If you open up Active Directory Users and Computers, Select View and Advanced Features you will see a System container. Within that is another called MicrosoftDNS. Inside there are the zones. However, you'll notice that each is a dnsNode type record stored in LDAP, and they can't be exported directly.

    All is not lost of course! There are at least three other options for getting the zone files (depending on what you want them for):

    1. Select on of the AD Integrated zones and change the type to Standard Primary. Now you'll have the file in %systemroot%\System32\dns

    The zone type can be changed back afterwards, making this great for one-off copies but no fun to keep up to date.

    2. Backup System State on a Domain Controller - Not a particularly accessible solution but great if all you need it for is Disaster Recovery.

    3. Create a Slave DNS Server / Zone (not AD Integrated) for your domain on a server. This should be setup to Transfer the zone from the a master.

    To allow that hop back onto one of the AD Integrated DNS Servers, select the properties for your zone (inside DNS Manager) and select the Zone Transfers tab.

    If your (AD) server is on an internal network and not at all open to the public then it's probably easiest to allow transfers to any server.

    If it's a little more public than that then you don't want to allow just anyone to pick up the zone and either adding the Slave DNS to the Name Servers tab or just allowing transfers only to a specific IP.

    This method is probably the best if you want a continually updated copy of the live DNS zone; you'll find the file in %systemroot%\system32\dns as usual.



    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Join & Write a Comment

    Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now