Restore primary DC

[davide.depaoli]

Hello,
Today I discovered by accident that a client's primary domain controller (physical server) was encrypted.
I have Veeam recovery iso image and daily agent backup.
Let me preface this by saying that I am not an Active Directory expert.

Secondary DC is on VM and it seems that he was not attacked.

The question is whether full system restore restores domain controller functionality or is it better to make installation from scratch, promoting the secondary and join the physical server as new secondary DC.

thanks in advance
Regards
Davide

[Dima P.]

Hello Davide,

Be default we restore DC backup in non-authorative to prevent replication of the outdated entries. Please review this KB article Restoring Domain Controller from an Application-Aware backup. Thank you!

[davide.depaoli]

Hello,
finally, given the non-complexity of the active directory, we decided to install from scratch a new VM as Backup Domain controller.