Hello,

I want to backup my Active Directory and really haven't done this before. Appreciate if anyone could tell me how to backup Active Directory and how to deploy back the backup so that the system starts running normally in case if there is anything bad with the active directory.

Regards,

Backup Windows Server 2003 Active Directory (http://www.petri.co.il/backup-windows-server-2003-active-directory.htm)

Active Directory data is stored in two paths and also in the registry of each Domain Controller. Any backup program that is used (including the NTBackup) must be able to perform a System State backup as well as the files in use. Not all backup programs are able to get files in use.

The SYSVOL and NTDS are the critical folders for AD.

The desirable scenario is to have at least two domain controllers for your domain. One will be set as the primary Global Catalog server and the other should be set as the Infrastructure Master. The roles can be balanced among the two controllers and should one of them fail, the other roles can be assumed by the remaining controller. Once the failed controller is repaired, it can receive replication of the current data from the running controller and the roles can then be redistributed as desired.

Counting on cached credentials during a rebuild is suspect at best. Having a redundant domain controller ensures that recovery is expedient and reliable.

Sorry, it was too difficult for me to understand what you are exactly explaining on your note.

What I need is a simple way/procedure of backing up the AD and restoring it back when needed.

Please help

Backup Windows Server 2003 Active Directory (http://www.petri.co.il/backup-windows-server-2003-active-directory.htm)

Thanks, it really helped me a lot.

Sorry, it was too difficult for me to understand what you are exactly explaining on your note.

What I need is a simple way/procedure of backing up the AD and restoring it back when needed.

Please help

Backup of AD is quite simple. Just follow the instructions in the link that Mouse51180 provided.

Restore of AD is NOT so simple because AD is more like a database than just a bunch of files. This is why I suggested that you use a second server acting as a Domain Controller for redundancy.

Active Directory has builtin replication that will duplicate the AD Infrastructure and Security to every Domain Controller. If one of them fails, the other partners will continue to operate. In the event of a restore from backup, the failed partner will then get a copy of the latest AD Infrastructure and Security from the other running Domain Controllers.

Active Directory is a centralized security for your network domain. Every file/folder, printer, computer, server/share, etc. is controlled by Active Directory for security and ownership. Without understanding the complexity of Active Directory, is may be difficult for you to grasp the total impact of what is entaled in a successful recovery from backup. To be quite frank with you, the thought of having to recover AD from backup is frightening to me.

Active adminsitrator (http://www.scriptlogic.com/products/activeadmin) can assist you with this.

The tool can backup and recover active directory objects when needed, even without rebooting into directory services restore mode while keeping the domain controller online.

We've just upgraded to the new vesrion 5.1 that offers some great features and enhancements.

Active adminsitrator (http://www.scriptlogic.com/products/activeadmin) can assist you with this.

The tool can backup and recover active directory objects when needed, even without rebooting into directory services restore mode while keeping the domain controller online.

We've just upgraded to the new vesrion 5.1 that offers some great features and enhancements.


SriptLogic is a fantastic suite of tools. A bit pricey but very good.