Backup on Domain Controller  Windows Server 2008 R2

Armitage318
Armitage318 used Ask the Experts™
on
Hi,
what is the recommended way to backup Active Directory on Windows Server 2008 R2?
I mean: I would like to backup things and be able to rebuild from scratch a brand new server, if the old one is completely unavailable (eg. hardware failure).

Thank you!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
Keep the system statedata backup...

if small office... with single domain you can keep vhd...


or else you can use 3rd party backup solutions ... like veritas backups exec... veem etc.

some details about the backup and recovery

https://docs.microsoft.com/en-us/system-center/dpm/back-up-system-state-and-bare-metal?view=sc-dpm-1807

all the best
MaheshArchitect
Distinguished Expert 2018

Commented:
use windows server backup tool to backup AD system state backup on daily basis
If changes to AD are rare, then do it weekly basis

Also note that backup you use for restore is not older than 180 days, i.e. beyond tombstone period

Restoration strategy depends upon how many DCs you have?
If this is the only DC you have and if it gone down or crashed, you can restore system state backup by taking server in DSRM mode
If server is offline permanently, create new workgroup server with same hostname as dies DC, keep same partitions as died DC and restore system state backup on this server

If u have multiple AD servers, probably you never need need to restore server from system state backup as you can promote new ADC
You may need to restore AD system state backup on ADC non authoritatively followed by restore objects authoritatively if you have accidentally deleted ad objects and AD recycle bin is not enabled

restoration is situation specific

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial