Active Directory Forest Recovery - Procedures

Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016, Windows Server 2012 R2 and 2012

This section contains procedures related to the forest recovery process.

The following is a list of procedures that are used in backing up and restoring domain controllers and Active Directory.

• Back up a full server
• Back up the System State data
• Perform a full server recovery
• Perform an authoritative synch of DFSR-replicated SYSVOL
• Perform a nonauthoritative restore of Active Directory Domain Services

These steps explain how to perform an authoritative restore of SYSVOL at the same time.

• Configure the DNS Server service
• Removethe global catalog
• Raise the value of available RID pools
• Invalidate the current RID pool
• Seize an operations master role
• Clean up after a restore
• Clean the metadata of removed writable domain controllers
• Reset the computer account password of the domain controller
• Reset the krbtgt password
• Reset a trust password on one side of the trust
• Add the global catalog
• Resources to verify replication is working

Next steps

• AD Forest Recovery - Prerequisites
• AD Forest Recovery - Devise a custom forest recovery plan
• AD Forest Recovery - Steps to restore the forest
• AD Forest Recovery - Identify the problem
• AD Forest Recovery - Determine how to recover
• AD Forest Recovery - Perform initial recovery
• AD Forest Recovery - Procedures
• AD Forest Recovery - Frequently Asked Questions (FAQ)
• AD Forest Recovery - Recover a single domain within a multidomain forest
• AD Forest Recovery - Redeploy remaining DCs
• AD Forest Recovery - Virtualization
• AD Forest Recovery - Cleanup