![]() Conform to Microsoft's own documented best practices.This guidance is divided into 2 sections.:įor Domains with a single domain controller only: This list covers recovery options from best to worse in terms of recovery speed as well as flexibility of recovery taking into account what you may have to recover your DC onto:ġ) Windows Replicas on a VMWare or Hyper-V host created from File Agent backups are best for systems not in VMWare The best thing to consider when deciding how to back up a Domain Controller is to determine where any why it will be recovered. Regardless of which scenario below may apply to your environment, please understand the use cases for and additionally leverage Microsoft's own backups for AD in addition to Unitrends backups of your DC to ensure all possible recovery scenarios can be leveraged. ![]() This includes granular recovery of deleted AD objects, or rebuild of a DC on a new host manually. ![]() That said, the direct recovery of a DC does need to be planned for, specifically in scenarios where all DCs have failed, replicated corruption, where critical data is deleted and cannot be re-linked using Microsoft tools, or where a specific DC also runs additional services or contains business data against Microsoft's best practices that must be recovered.Īdditional Actions: Independent of Unitrends Backups used for complete AD server recovery, there are numerous scenarios which require the use of a Microsoft wbadmin System State backup of AD to recover properly. Wherever this possibility exists it will be encouraged by Unitrends Support. Typically, when a DC fails, the safest process is instead to build a new clean DC and join it to your still running domain and migrate FSMO roles between remaining servers as necessary. Note, the Per Microsoft itself, best practice to restore a DC is to NOT restore a DC. Our general Best Practice for AD is to leverage Image backups + wbadmin backups for single DC domains, and File level backups for all other AD scenarios, however, if certain recovery options are available to you, and considering RTO as a priority over simplicity, the list below sorts these in that order instead. Should I protect an Asset using VM, File Agent, or image Agent backups? The remainder of this article will further discuss this topic as it specifically applies to AD servers in more depth, as well as provide sample scenarios to assist you in choosing the best backup method for your local DC protection scenario.ĭo be aware, the listing in this article is sorted by the best method to recover. Questions regarding general best practices for server backup mode by type of server are centrally located in the following KB, which should be the correct reference for all such queries. How do these various backup methods impact the recovery of AD? RESOLUTION When an Active Directory Domain Controller (AD DC) is created as a VM, the question often arises should you back it up as a VM, or use an installed agent? With release 10.3 Unitrends now offers agent based image backups as well as file agent and VM host backup types. How should I back up a Domain Controller? ISSUE ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |