Skip to content

Commit 8022870

Browse files
Merge pull request #284963 from AbhishekMallick-MS/Aug-19-2024-Freshness
Freshness - AD support matrix
2 parents 5da7661 + 996e015 commit 8022870

File tree

1 file changed

+8
-6
lines changed

1 file changed

+8
-6
lines changed

articles/backup/active-directory-backup-restore.md

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Back up and restore Active Directory
33
description: Learn how to back up and restore Active Directory domain controllers.
44
ms.topic: conceptual
5-
ms.date: 08/09/2023
5+
ms.date: 08/20/2024
66
author: AbhishekMallick-MS
77
ms.author: v-abhmallick
88
ms.custom: engagement-fy24
@@ -19,6 +19,8 @@ This article outlines the proper procedures for backing up and restoring Active
1919
2020
## Best practices
2121

22+
Before you start protection of Active Directory, check the following best practices:
23+
2224
- Make sure at least one domain controller is backed up. If you back up more than one domain controller, make sure all the ones holding the [FSMO (Flexible Single Master Operation) roles](/windows-server/identity/ad-ds/plan/planning-operations-master-role-placement) are backed up.
2325

2426
- Back up Active Directory frequently. The backup age should never be older than the tombstone lifetime (TSL) because objects older than the TSL will be "tombstoned" and no longer considered valid.
@@ -38,13 +40,13 @@ This article outlines the proper procedures for backing up and restoring Active
3840
>
3941
>For information about performing an authoritative restore of SYSVOL, see [this article](/windows-server/identity/ad-ds/manage/ad-forest-recovery-authoritative-recovery-sysvol).
4042
41-
## Backing up Azure VM domain controllers
43+
## Back up Azure VM domain controllers
4244
4345
If the domain controller is an Azure VM, you can back up the server using [Azure VM Backup](backup-azure-vms-introduction.md).
4446
4547
Read about [operational considerations for virtualized domain controllers](/windows-server/identity/ad-ds/get-started/virtual-dc/virtualized-domain-controllers-hyper-v#operational-considerations-for-virtualized-domain-controllers) to ensure successful backups (and future restores) of your Azure VM domain controllers.
4648
47-
## Backing up on-premises domain controllers
49+
## Back up on-premises domain controllers
4850
4951
To back up an on-premises domain controller, you need to back up the server's System State data.
5052
@@ -54,7 +56,7 @@ To back up an on-premises domain controller, you need to back up the server's Sy
5456
>[!NOTE]
5557
> Restoring on-premises domain controllers (either from system state or from VMs) to the Azure cloud is not supported. If you would like the option of failover from an on-premises Active Directory environment to Azure, consider using [Azure Site Recovery](../site-recovery/site-recovery-active-directory.md).
5658
57-
## Restoring Active Directory
59+
## Restore Active Directory
5860
5961
Active Directory data can be restored in one of two modes: **authoritative** or **nonauthoritative**. In an authoritative restore, the restored Active Directory data will override the data found on the other domain controllers in the forest.
6062
@@ -65,7 +67,7 @@ During the restore, the server will be started in Directory Services Restore Mod
6567
>[!NOTE]
6668
>If the DSRM password is forgotten, you can reset it using [these instructions](/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc754363(v=ws.11)).
6769
68-
### Restoring Azure VM domain controllers
70+
### Restore Azure VM domain controllers
6971
7072
To restore an Azure VM domain controller, see [Restore domain controller VMs](backup-azure-arm-restore-vms.md#restore-domain-controller-vms).
7173
@@ -78,7 +80,7 @@ If you're restoring the last remaining domain controller in the domain, or resto
7880
>[!NOTE]
7981
> Virtualized domain controllers, from Windows 2012 onwards use [virtualization based safeguards](/windows-server/identity/ad-ds/introduction-to-active-directory-domain-services-ad-ds-virtualization-level-100#virtualization-based-safeguards). With these safeguards, Active directory understands if the VM restored is a domain controller, and performs the necessary steps to restore the Active Directory data.
8082
81-
### Restoring on-premises domain controllers
83+
### Restore on-premises domain controllers
8284
8385
To restore an on-premises domain controller, follow the directions in for restoring system state to Windows Server, using the guidance for [special considerations for system state recovery on a domain controller](backup-azure-restore-system-state.md#special-considerations-for-system-state-recovery-on-a-domain-controller).
8486

0 commit comments

Comments
 (0)