Active Directory backup

Do i use DISASTER_RECOVERY:\ or SYSTEM_COMPONENTS or WINDOWS_FEATURES_AND_ROLES saveset?  Is it possible to just backup the registry, NTDS, or whatever AD components are needed without backing up the whole drive?

You could backup only WINDOWS_FEATURES_AND_ROLES to backup all the system state but again this would be more of a file system restore. To backup the AD you could use the NMM and backup the saveset - APPLICATIONS:\ADAM instance_name. Refer the NMM admin guide for more details. 

NMM supports granular backup and recovery of the following Active Directory objects:

◆ Users

◆ Groups

◆ Organizational units

◆ Computer

◆ Contact

◆ InetOrgPerson

◆ Shared folder

◆ MSMQ queue alias

What is EMC recommended best practice?

I am not sure what EMC has to say.

But since there is always going to more than one DC in a enterprise environment which replicate to each other a real DC DR scenario is hardly ever required. As protecting the items in the AD you could go for the NMM option.

And if you ever need to tape a backup of the schema on your primary DC you could go for the backup of the entire system which could be recovered as a bare metal recovery incase of a disaster.

I am not much a DC expert but here are my 2 cents. 

Hello chandlerbing

The recommendation would be to use both methods, granular for object level recovery if needed and WINDOWS ROLES AND FEATURES to have a DR backup available for reliable and full protection of your DC's however this is eventually your call based on your needs, RPO and RTO.

My take on this would be indeed create 2 groups to run a full BMR/DR backup and a second one to benefit from the granular restore option of nsradsave so that you can restore a single or multiple objects without the need to restore the entire AD.

Thank you,

Carlos