Windows Server 2003 AD backup and restore using ntbackup

Home > Windows > Windows Server 2003 > Windows Server 2003 AD backup and restore using ntbackup

We can take backup of Windows Server 2003 AD using "ntbackup" utility. While using this utility if we take backup of "system state" then that is sufficient to role back AD in case of AD crash.

To restore, we need the actual password configured while configuring AD. Sometimes AD server is quite old and no one remembers the initial password. In such cases password can be reset using following steps:

1. Open 'cmd' as administrator
2. Run ntdsutil command
3. Type set dsrm password
4. Type reset password on server null
5. Type new password twice
6. Type q to exit dsrm
7. Type q to exit ntdsutil
8. Type exit to exit CMD

Once password is reset (or known) reboot computer while pressing 'F8'. From boot menu choose "Directory Service Restore Mode". Let the system boot into safe mode for some time. Login as administrator with password reset in previous steps.

Then wait for 2-3 minutes for system to stabilize. Then run "ntbackup" and restore "System state" from backup when AD was functioning properly. Do not worry about last modified date/time shown against "AD configuration". Also do not worry about loosing user accounts, computer information, etc. The restore should be able to restore things to date of backup without any issue.

Refer:

• https://support.microsoft.com/en-in/help/322672/how-to-reset-the-directory-services-restore-mode-administrator-account

Home > Windows > Windows Server 2003 > Windows Server 2003 AD backup and restore using ntbackup