backup and restoring of virtual server 2019 domain controllers (all in forest)

[c0mical]

Hi,

I've been reading though the other threads to get an idea of whats possible with regards to a full DR restore of AD

Id like to find a way to be able to completely restore AD in a DR situation where every DC in the forest is dead, ideally without needing to use a domain admin account

from what I can understand. I can backup domain controllers without needing to use application aware processing (negating the requirement for a domain admin account)

my loss from not doing AAP would be than more manual work is required in the restore process of the 1st DC (with fsmo roles) in doing a non-authorative DC restore and then doing an authorative restore of sysvol (setting msDFSR-Options attribut to 1)

is my understanding along the right lines?

thanks,

[HannesK]

Hello,

I can backup domain controllers without needing to use application aware processing (negating the requirement for a domain admin account)

you can. But if you do that, you have to ensure that you are not running into USN rollback problems. Veeam application aware image processing removes this burden (also modern Windows versions). I'm still not a fan of that approach (maybe I'm just too old ).

If I would want to avoid domain admin credentials in the VBR server (which seems to be your goal), then I would simply use the Veeam Agent for Windows in standalone / with pre-installed agents mode.

Best regards,
Hannes

[c0mical]

thank you Hannes