Solved!
Go to SolutionActive Directory data backups
Hello,
On page 22 of "Avamar 7.0 for Windows Server User Guide" it states:
To back up Active Directory data in preparation for disaster recovery, perform regular System State backups of the domain controllers:
◆ On a Windows Server 2012 or Windows Server 2008 computer, use the Windows VSS plug-in to perform the backup. When you perform the backup, clear the Create Disaster Recovery Backup checkbox on the Options tab. When you clear the checkbox, you can only use the backup for online restore, not BMR.
I am trying to understand if this is a requirement for Win2k8/12 system state backup, why is that option checked by default ? Is there any harm with leaving that option checked ?
Thank you
sconstable
60 Posts
7731
1
Posted March 18th, 2014 09:00
I am also confused by this.
So if I read the documentation correctly, you need 3 jobs to fully backup an AD server:
1. File system backup
2. VSS backup for BMR
3. VSS backup for AD?
If anyone can clear this up that would be great. I would also like to see granular restore capabilities on the AD data, but I hope to think that it's on the road map for future releases, if not it might be a sticking point for some companies.
ionthegeek
2 Intern
•
2049 Posts
4402
1
Posted March 18th, 2014 10:00
Is there any harm with leaving that option checked?
You should have a non-DR backup of at least one of your Domain Controllers in case you need to perform an Active Directory restore.
Ian Anderson wrote:
The "Disaster Recovery" checkbox invokes the Automated System Recovery (ASR) writer when performing a system state backup. Backups generated using the ASR writer can only be restored offline (i.e. by booting from a suitable WinPE image) so they are not suitable for restoring Active Directory (which must be done online) and vice-versa.
key sentence, that helps. All of our domain controllers are VMs so in addition to file system/VSS backup they will also be backed up at VM level backup. That should remove the requirement for BMR and for that option to be checked.
@sconstable_illumina is asking a good question, do we need to break up AD controllers backup into two datasets:
Dataset #1 - file system backup only
Dataset #2 - VSS backup only
Thank you Ian very much
ok, so you are saying for physical DC we would need 3 datasets:
Dataset #1 - file system backup only
Dataset #2 - VSS backup only
Dataset #3 - VSS with "Create Disaster Recovery Backup" option checked"
Dataset #1 could be used to restore individual files (let's say someone deleted something from sysvol)
Dataset #2 could be used to restore Active Directory when the server is still up and running (but let's say major corruption in AD)
Dataset #3 could be used in case of total datacenter meltdown, we order brand new servers and restore from Dataset #3 (using BMR/WinPE CD)
Am i on the right track Ian ?
Thank you
ionthegeek
2 Intern
•
2049 Posts
7757
0
Posted March 18th, 2014 13:00
I don't imagine there are many instances where you'd need to run a file restore on a Domain Controller but I guess you never know.
If file level backup and restore is required for physical DCs, you would need multiple datasets -- the DC would have to be protected using regular file system backups in addition to the non-DR VSS backup (and the DR VSS backup if enabled). For VMs, you have more options. If you're already protecting these systems at an image level, you could use VMware File Level Restore (FLR) in place of agent-level file system backup and restore. FLR has limitations on the number and size of files so make sure you test it and confirm that it meets your needs.
You're welcome!
ionthegeek
2 Intern
•
2049 Posts
7757
0
Posted March 18th, 2014 14:00
Any issues with combining Dataset #1 and Dataset #2 into one Dataset?
Shouldn't be a problem since they're using two different plug-ins.
ionthegeek
2 Intern
•
2049 Posts
7757
0
Posted March 18th, 2014 14:00
That's the idea, yes.
ionthegeek
2 Intern
•
2049 Posts
7757
0
Posted March 18th, 2014 10:00
The "Disaster Recovery" checkbox invokes the Automated System Recovery (ASR) writer when performing a system state backup. Backups generated using the ASR writer can only be restored offline (i.e. by booting from a suitable WinPE image) so they are not suitable for restoring Active Directory online and vice-versa.
This checkbox is checked by default because creating a bootable system state backup is the right thing to do for the majority of systems -- Active Directory is the exception.