Active Directory
- By Orin Thomas
- 2/25/2026
Active Directory backup
AD DS is backed up when you perform a backup of the server’s system state. This occurs when you back up all critical volumes on a domain controller. The primary tool you use for backing up this data is Windows Server Backup, which is not installed by default on computers running Windows Server. You can install Windows Server Backup using the following PowerShell command:
The majority of restore operations occur because Active Directory objects were accidentally (rather than deliberately) deleted. You can configure objects to be protected from accidental deletion by editing the object properties. When you attempt to delete an object that is protected from accidental deletion, a dialog will inform you that the object can’t be deleted because it’s protected from accidental deletion. This protection option must be removed before you or anyone else can delete the object.
