Active Directory Backups

In this section, you will install the Windows Server Backup feature and perform a System State backup to protect Active Directory.

1. Click on the ... button on the Windows Server Remote Desktop screen.
2. Click Ctrl+Alt+Del button.
3. Type for the user Administrator the password: password123.

NOTE: You can click on the ... button on the Remote Desktop screen to hide the menu.

4. From Server Manager, click Manage, and select Add Roles and Features.
5. Click Next until you reach the Features section
6. Select Windows Server Backup, and click Next, and click Install.
7. Click Close to exit the installation wizard.
8. Click Check step down below to proceed.

Creating a shared folder provides a network-accessible location where the System State backup can be securely stored and retrieved.

1. Open File Explorer and navigate to the C:\ drive.
2. Create a new folder named backup.
3. Right-click the backup folder and select Properties.
4. Go to the Sharing tab and click Advanced Sharing...
5. Check Share this folder and ensure the share name is set to backup.
6. Click Permissions, add Everyone, and grant Full Control, then click OK.
7. Click OK again to close the sharing settings.
8. Click Close to close the backup properties window.
9. Click Check step to proceed.

A System State backup captures critical system components, including Active Directory, to enable recovery of the server’s core configuration.

1. From Server Manager, click Tools, and select Windows Server Backup.
2. In the left pane, click Local Backup.
3. In the right pane, click Backup Once....
4. Select Different options and click Next.
5. Choose Custom, then click Next.
6. Click Add Items, select System State, and click OK.
7. Click Next to continue.
8. Select the backup destination Remote shared folder and click Next.
9. Enter the path \\localhost\backup.
10. Click Next to continue.
11. Review the backup configuration and click Backup to start the process.
12. Wait for the backup to complete, then click Close.
13. Click Check Step.

Simulate accidental deletion of Active Directory objects to demonstrate the importance of System State backups.

1. From Server Manager open Active Directory Users and Computers.
2. Right click and delete the DNSAdmins group from Active Directory.
3. Click Check step to continue.

In this task, you will restore Active Directory using a System State backup to recover previously deleted objects.

1. Restart the server.
2. During boot, press F8 (or use recovery options) to access Advanced Startup Options.
3. Select Directory Services Restore Mode (DSRM) and press Enter.
4. Log in using the DSRM Administrator password.
5. Open Command Prompt as Administrator.
6. Launch Windows Server Backup recovery wizard by running: wbadmin start systemstaterecovery
7. When prompted, specify the backup location: Remote shared folder \localhost\backup
8. Select the appropriate backup version (usually the most recent).
9. Confirm that you want to perform the System State recovery.
10. When prompted, type: Y to start the recovery process.
11. Wait for the restore operation to complete.
12. After the restore finishes, restart the server normally.
13. Log in with your domain administrator account and password.
14. Open Active Directory Users and Computers. 15 Confirm that deleted objects (e.g., DNSAdmins group) have been restored.
15. Click Check Step.