We help IT Professionals succeed at work.

Backup on Domain Controller  Windows Server 2008 R2

Last Modified: 2018-10-17
what is the recommended way to backup Active Directory on Windows Server 2008 R2?
I mean: I would like to backup things and be able to rebuild from scratch a brand new server, if the old one is completely unavailable (eg. hardware failure).

Thank you!
Watch Question

System Admin
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
Distinguished Expert 2019

use windows server backup tool to backup AD system state backup on daily basis
If changes to AD are rare, then do it weekly basis

Also note that backup you use for restore is not older than 180 days, i.e. beyond tombstone period

Restoration strategy depends upon how many DCs you have?
If this is the only DC you have and if it gone down or crashed, you can restore system state backup by taking server in DSRM mode
If server is offline permanently, create new workgroup server with same hostname as dies DC, keep same partitions as died DC and restore system state backup on this server

If u have multiple AD servers, probably you never need need to restore server from system state backup as you can promote new ADC
You may need to restore AD system state backup on ADC non authoritatively followed by restore objects authoritatively if you have accidentally deleted ad objects and AD recycle bin is not enabled

restoration is situation specific