Advanced Active Directory back up and recovery

  • Module
  • 9 Units
Advanced
Administrator
Security Engineer
Solution Architect
Windows Server

Learn how to perform advanced Active Directory Domain Services backup and recovery operations.

Learning objectives

After completing this module, you'll be able to:

  • Design secure AD DS backups around RTO, RPO, topology, retention, and Tier 0 trust boundaries.
  • Evaluate backup usability using health, replication, compatibility, security, and restore-test evidence.
  • Select the narrowest appropriate recovery scope: object, domain controller, domain, or forest.
  • Recover deleted objects, attributes, hierarchies, domain controllers, DNS, and SYSVOL correctly.
  • Plan domain and forest recovery sequencing, including operations master roles, RID state, global catalogs, and trusts.
  • Safely recover virtualized domain controllers using VM-Generation ID safeguards and controlled snapshot practices.
  • Validate replication, DNS, SYSVOL, time, authentication, security, applications, and business approval before reconnection.

Prerequisites

  • Advanced administration experience with Active Directory Domain Services.
  • Working knowledge of replication metadata, sites, directory partitions, operations master roles, global catalogs, DNS, Kerberos, trusts, and SYSVOL.
  • Experience with Windows Server Backup, Volume Shadow Copy Service, PowerShell, event logs, Directory Services Restore Mode, and Windows recovery options.
  • Familiarity with privileged access workstations, recovery time objectives, recovery point objectives, incident response, and change control.
Start