{"id":54925,"date":"2023-11-14T14:23:36","date_gmt":"2023-11-14T14:23:36","guid":{"rendered":"https:\/\/infrasos.com\/?p=54925"},"modified":"2023-11-14T14:23:38","modified_gmt":"2023-11-14T14:23:38","slug":"active-directory-disaster-recovery-best-practices","status":"publish","type":"post","link":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/","title":{"rendered":"Active Directory Disaster Recovery (Best Practices)"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"54925\" class=\"elementor elementor-54925\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-8562766 e-con-boxed e-con\" data-id=\"8562766\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-79cd800 elementor-widget elementor-widget-text-editor\" data-id=\"79cd800\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as the central repository for<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\"> user accounts<\/a>, permissions, and network configurations. However, unforeseen disasters such as fires, floods, malware attacks, or even misconfiguration disrupt the operation of AD, leading to data loss and downtime. To mitigate these risks, it&#8217;s essential to establish a robust disaster recovery plan for Active Directory. In this article, we explore best practices for AD disaster recovery, emphasizing the importance of proper documentation, testing, and considering various disaster scenarios.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-188c548 elementor-widget elementor-widget-text-editor\" data-id=\"188c548\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-forest-vs-domain-whats-the-difference\/\">Active Directory Forest vs Domain \u2013 What\u2019s the Difference?<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8e6924 elementor-widget elementor-widget-heading\" data-id=\"c8e6924\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h3 class=\"elementor-heading-title elementor-size-default\">General recommendations for Disaster Recovery<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-565812a e-con-boxed e-con\" data-id=\"565812a\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3aa4c7c elementor-widget elementor-widget-text-editor\" data-id=\"3aa4c7c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>While preparing the recovery plan, the following general recommendations should be considered:<\/p><ul><li>The recovery strategy heavily depends on the backup, therefore, the proper backup plan is required. Follow this article for <a href=\"https:\/\/infrasos.com\/active-directory-backup-strategies-and-tools\/\" rel=\"noopener\">best practices<\/a>.<\/li><li>The recovery process must be well-documented. The proper guideline helps to ensure all steps are performed properly and in right order.<\/li><li>The dependency map should be drawn, to show all services that depend on Active Directory:<ul><li>Services that use AD for authentication, both internal and external (e.g., using Active Directory Federation Services)<\/li><li>Services that use AD<a href=\"https:\/\/infrasos.com\/install-and-configure-dns-server-on-windows-server\/\"> DNS<\/a> (all internal servers and <a href=\"https:\/\/infrasos.com\/create-active-directory-computer-reports-with-powershell\/\">user computers<\/a>)<\/li><li>Services that need access to the directory using LDAP (Configuration Manager, Exchange Server, etc.)<\/li><\/ul><\/li><li>The disaster recovery plan must be tested regularly. The result of the test must be reviewed accurately, and the necessary adjustments must be added to the plan, to keep it in tact with the changing environment.<\/li><li>The plan must include steps for recovery in several possible scenarios. Usual scenarios are the unavailability of a physical site (in case of fire, flood, social unrest, etc.) and the failure of Active Directory itself (due to misconfiguration, malware, schema issues, etc.).<\/li><\/ul><p>Let\u2019s have a look at possible restoration plans during these disaster scenarios.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ed0a791 e-con-boxed e-con\" data-id=\"ed0a791\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-db8df97 elementor-widget elementor-widget-text-editor\" data-id=\"db8df97\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">Try Active Directory Reporting Tool by InfraSOS<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-970bd2e elementor-widget elementor-widget-heading\" data-id=\"970bd2e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Active Directory Restoration Plans <\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c94f862 elementor-widget elementor-widget-heading\" data-id=\"c94f862\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Unavailability of the physical site (single site infrastructure)<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1f3d46d e-con-boxed e-con\" data-id=\"1f3d46d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-cc65ab6 elementor-widget elementor-widget-text-editor\" data-id=\"cc65ab6\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In a scenario where all <a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\">domain controllers<\/a> are in a single data center (or a server room), the following must be taken into the consideration:<\/p><ul><li>Ensure that the backup is not affected in case of a disaster. For example, if you store your backup data in the same server room as the production servers, a single fire can destroy both. Therefore, follow the best practice of <a href=\"https:\/\/www.techtarget.com\/searchdatabackup\/definition\/3-2-1-Backup-Strategy\" target=\"_blank\" rel=\"noopener\">storing one copy of backup data separately<\/a> \u2013 with at least 8 km distance. For a small company with a single office \u2013 consider uploading backup in the cloud storage.<\/li><li>Be ready to restore the entire Active Directory Infrastructure from backup in case of a disaster. It requires major outage and you need to have a detailed plan which includes the restoration of an<a href=\"https:\/\/infrasos.com\/active-directory-forest-vs-domain-whats-the-difference\/\"> entire forest<\/a> (described later in this article)<\/li><\/ul>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a661124 e-con-boxed e-con\" data-id=\"a661124\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3c3bd25 elementor-widget elementor-widget-image\" data-id=\"3c3bd25\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer.jpg\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"service recovery\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU1MDQ4IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTFcL3lvdW5nLWl0LXNlcnZpY2UtbWFuLXJlcGFpcmluZy1jb21wdXRlci5qcGcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"512\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-768x512.jpg\" class=\"attachment-medium_large size-medium_large wp-image-55048\" alt=\"service recovery\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-768x512.jpg 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-300x200.jpg 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-1024x683.jpg 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-720x480.jpg 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer.jpg 1120w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-eded77f e-con-boxed e-con\" data-id=\"eded77f\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d3d44b3 elementor-widget elementor-widget-text-editor\" data-id=\"d3d44b3\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Image Source: <a href=\"http:\/\/freepik.com\/free-photo\/young-it-service-man-repairing-computer_6427086.htm\" target=\"_blank\" rel=\"noopener\">Freepik.com<\/a><\/p><p>The scenario with all domain controllers in the same data center should be avoided whenever possible. It increases the recovery time significantly and doesn\u2019t allow using the built-in Active Directory high availability.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-b41131d e-con-boxed e-con\" data-id=\"b41131d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-216f1aa elementor-widget elementor-widget-template\" data-id=\"216f1aa\" data-element_type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"7917\" class=\"elementor elementor-7917\">\n\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-30c8dcce ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"30c8dcce\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-19a106e2 ot-flex-column-vertical\" data-id=\"19a106e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ca1a12e elementor-widget elementor-widget-heading\" data-id=\"ca1a12e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c539a35 elementor-widget elementor-widget-text-editor\" data-id=\"4c539a35\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-16296eed ot-flex-column-vertical\" data-id=\"16296eed\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-65568df5 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"65568df5\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"7917\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"65568df5\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ea80efe elementor-widget elementor-widget-text-editor\" data-id=\"ea80efe\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-backup-strategies-and-tools\/\">Active Directory Backup Strategies and Tools (Best Practices)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-804c6a6 elementor-widget elementor-widget-heading\" data-id=\"804c6a6\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Unavailability of the physical site (multi-site infrastructure)<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2d5097a e-con-boxed e-con\" data-id=\"2d5097a\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-472f508 elementor-widget elementor-widget-text-editor\" data-id=\"472f508\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>\u00a0Let\u2019s imaging the following scenario: a company has two physical locations, each of them has domain controllers. The first step of the planning of disaster recovery requires ensuring that in case of failure of servers in the first location, the services and user computers seamlessly reconnect to the second site. It is achieved using the proper DNS configuration planning:<\/p><ol><li>The first DNS server in network interface card configuration should be the domain controller from the local site<\/li><li>The second DNS server should be another domain controller from the local site. To ensure that the local server is used in case of the failure of the first domain controller<\/li><li>The third DNS server should be the domain controller from the <a href=\"https:\/\/infrasos.com\/how-to-add-domain-controller-to-an-existing-domain\/\">remote site<\/a>. In case disaster causes both local domain controllers to become unavailable, the remote domain controller is used.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-cac7c4c e-con-boxed e-con\" data-id=\"cac7c4c\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2045b74 elementor-widget elementor-widget-image\" data-id=\"2045b74\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR1.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"DNS configuration\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU0OTM1IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTFcL0FERFIxLnBuZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"596\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR1.png\" class=\"attachment-medium_large size-medium_large wp-image-54935\" alt=\"DNS configuration\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR1.png 624w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR1-300x287.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c341611 e-con-boxed e-con\" data-id=\"c341611\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-86e25c9 elementor-widget elementor-widget-text-editor\" data-id=\"86e25c9\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Additionally, configure firewalls to allow cross-site connections for ports and protocols used by Active Directory services, such as DNS, LDAP, Kerberos, etc., as described in <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/networking\/service-overview-and-network-port-requirements#ports-and-protocols\" target=\"_blank\" rel=\"noopener\">this article<\/a>. If your forest contains several domains, ensure that domain controllers from each domain are presented in both sites.<\/p><p>In case some of your services are hardcoded to use specific domain controllers (for example, Exchange Server could be set to use specific domain controller using the StaticDomainControllers parameter of the Set-ExchangeServer cmdlet) you need manual intervention to change the configuration. All such services must be assessed and the required intervention must be included in the disaster recovery plan documentation.<\/p><p>The next step after ensuring the high availability is to plan the restoration of the service itself. If the servers are not affected (for example, the disaster only caused unavailability of the network in one of the data centers), there is no need for specific restoration \u2013 domain controllers are available automatically when the site is brought back online. It only requires some time for the replication process.<\/p><p>In case servers are failed and you need to restore them, the high-level process is the following:<\/p><ol><li>Check whether any Flexible Single Master Operations (FSMO) roles were hosted in the failed site. If they did, transfer the roles to the available controller using NTDSutil tool or PowerShell cmdlets, as shown in <a href=\"https:\/\/learn.microsoft.com\/en-us\/troubleshoot\/windows-server\/identity\/transfer-or-seize-operation-master-roles-in-ad-ds\" target=\"_blank\" rel=\"noopener\">this article<\/a>.<\/li><li>Remove the servers from the failed site from the domain and cleanup their metadata (the detailed instruction is available <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/itops-talk-blog\/step-by-step-manually-removing-a-domain-controller-server\/ba-p\/280564\" target=\"_blank\" rel=\"noopener\">here<\/a>)<\/li><li>When the site is restored, deploy <a href=\"https:\/\/infrasos.com\/how-to-add-domain-controller-to-an-existing-domain\/\">new domain controllers<\/a> (at this step, one domain controller per domain is enough) with the same name and IP address.<\/li><li>Promote the new servers to the domain controller role. Use <a href=\"https:\/\/infrasos.com\/active-directory-sites-and-services-best-practices\/\">Active Directory Sites and Services<\/a> snap-in to configure proper replication routes.<\/li><li>After the replication is completed, redeploy other domain controllers.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-08b4e90 e-con-boxed e-con\" data-id=\"08b4e90\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-faeb63a elementor-widget elementor-widget-text-editor\" data-id=\"faeb63a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-sites-and-services-best-practices\/\">Active Directory Sites and Services Best Practices<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65d18a9 elementor-widget elementor-widget-heading\" data-id=\"65d18a9\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Failure of the Active Directory Forest<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-a9d41b5 e-con-boxed e-con\" data-id=\"a9d41b5\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-70ae297 elementor-widget elementor-widget-text-editor\" data-id=\"70ae297\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In case of failure of Active Directory, the forest recovery steps must be performed. The complexity of the restoration process depends on the tools used for backing up the system and on the topology of Active Directory. It is only possible if you have a proper reserve copy and necessary passwords (domain admin password for each domain and Directory Services Restore Mode password for at least one domain controller for each domain). The main steps that is included in the process are:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-54fae00 elementor-widget elementor-widget-heading\" data-id=\"54fae00\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Main Steps<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e05af75 elementor-widget elementor-widget-text-editor\" data-id=\"e05af75\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol><li>Identify the proper backup to use for restore \u2013 use the latest backup made before the problem appeared, to minimize the data loss.<\/li><li>Shut down all domain controller, if they are still running.<\/li><li>Restore one domain controller from the root domain. It is important because the root domain contains the Schema Admins and Enterprise Admins groups (these groups are required for the step 4). During the restoration perform a nonauthoritative restore of AD DS and an authoritative restore of SYSVOL, as described <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-perform-nonauthoritative-restore\" target=\"_blank\" rel=\"noopener\">here<\/a>. At this point, keep the server disconnected from the network.<\/li><li>Use the recovered domain controller to seize all FSMO roles.<\/li><li>Remove all other domain controllers from the root domain and cleanup their metadata.<\/li><li>Raise the value of the relative ID (RID) pool, to avoid the RID conflicts after the domain recovery (more details are <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-raise-rid-pool\" target=\"_blank\" rel=\"noopener\">here<\/a>), and then <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-invaildate-rid-pool\" target=\"_blank\" rel=\"noopener\">invalidate<\/a> the current pool.<\/li><li>Reset the computer account password of the restored domain controller, as it described in <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-reset-computer-account-dc\" target=\"_blank\" rel=\"noopener\">this article<\/a>, and <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-reset-the-krbtgt-password\" target=\"_blank\" rel=\"noopener\">Kerberos Ticket Granting Ticket (KRBTGT) password<\/a>. It should be done twice, since KRBTGT has password history that saves the last 2 passwords, so reset twice to ensure that the old password is erased.<\/li><li>Remove the global catalog from the restored domain controller, to avoid conflicts with other domains within the forest (the step can be ignored if you only have one domain).<\/li><li>Repeat steps 3-8 for one writable domain controller from each of the other domains, keeping in mind that you should always recover the parent domain before starting to recover the child. For example, in a forest shown on below image, you should recover one domain controller from domain.local domain, then child01.domain.local and child02.domain.local domains to be recovered simultaneously, and then sub.child01.domain.local should be restored.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2f4930d e-con-boxed e-con\" data-id=\"2f4930d\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c929d01 elementor-widget elementor-widget-image\" data-id=\"c929d01\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR2.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"AD DS Forest\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU0OTM2IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyM1wvMTFcL0FERFIyLnBuZyJ9\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"624\" height=\"382\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR2.png\" class=\"attachment-medium_large size-medium_large wp-image-54936\" alt=\"AD DS Forest\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR2.png 624w, https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/ADDR2-300x184.png 300w\" sizes=\"(max-width: 624px) 100vw, 624px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-baa4109 e-con-boxed e-con\" data-id=\"baa4109\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2819598 elementor-widget elementor-widget-text-editor\" data-id=\"2819598\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"10\"><li>Reconnect each restored domain controller to the network, ensure that the <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-server\/identity\/ad-ds\/manage\/forest-recovery-guide\/ad-forest-recovery-verify-replication\" target=\"_blank\" rel=\"noopener\">replication is working<\/a>.<\/li><li>When the forest-wide replication is completed, redeploy other domain controllers from scratch.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-eddf68a e-con-boxed e-con\" data-id=\"eddf68a\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-b43e3da elementor-widget elementor-widget-text-editor\" data-id=\"b43e3da\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\">Domain Controller Security Best Practices \u2013 Hardening (Checklist)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-209368e elementor-widget elementor-widget-heading\" data-id=\"209368e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Active Directory Disaster Recovery (Best Practices)  Conclusion<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-21e3f59 e-con-boxed e-con\" data-id=\"21e3f59\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-999246f elementor-widget elementor-widget-text-editor\" data-id=\"999246f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>In today&#8217;s interconnected world, the uninterrupted functioning of Active Directory is vital for organizations to maintain their daily operations. Implementing effective disaster recovery practices for Active Directory ensures that when the unexpected occurs, an organization quickly and efficiently restore its critical services. By following best practices such as comprehensive backups, thorough documentation, regular testing, and addressing specific disaster scenarios, businesses significantly reduce the impact of disasters and maintain business continuity. It is crucial to invest in disaster recovery planning for Active Directory to safeguard the heart of your organization&#8217;s IT infrastructure and preserve data integrity.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-229ba983 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"229ba983\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-be06542 ot-flex-column-vertical\" data-id=\"be06542\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2d0bab70 elementor-widget elementor-widget-image\" data-id=\"2d0bab70\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7ec005e7 ot-flex-column-vertical\" data-id=\"7ec005e7\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-2d734ffa elementor-widget elementor-widget-heading\" data-id=\"2d734ffa\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2a9283a elementor-widget elementor-widget-text-editor\" data-id=\"2a9283a\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2c0c6cb1 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"2c0c6cb1\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"54925\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"2c0c6cb1\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48365bd5 elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"48365bd5\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting &amp; Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as the central repository for user accounts, permissions, and network configurations. However, unforeseen disasters such as fires, floods, malware attacks, or even misconfiguration disrupt the operation of AD, leading to data loss and downtime. To [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[47,117],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Active Directory Disaster Recovery (Best Practices)<\/title>\n<meta name=\"description\" content=\"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Active Directory Disaster Recovery (Best Practices)\" \/>\n<meta property=\"og:description\" content=\"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-11-14T14:23:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-11-14T14:23:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-768x512.jpg\" \/>\n<meta name=\"author\" content=\"Marat M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marat M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\"},\"author\":{\"name\":\"Marat M\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\"},\"headline\":\"Active Directory Disaster Recovery (Best Practices)\",\"datePublished\":\"2023-11-14T14:23:36+00:00\",\"dateModified\":\"2023-11-14T14:23:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\"},\"wordCount\":1519,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"active directory\",\"Active Directory Disaster Recovery\"],\"articleSection\":[\"Active Directory\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\",\"url\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\",\"name\":\"Active Directory Disaster Recovery (Best Practices)\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2023-11-14T14:23:36+00:00\",\"dateModified\":\"2023-11-14T14:23:38+00:00\",\"description\":\"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Active Directory Disaster Recovery (Best Practices)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\",\"name\":\"Marat M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"caption\":\"Marat M\"},\"description\":\"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.\",\"url\":\"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Active Directory Disaster Recovery (Best Practices)","description":"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/","og_locale":"en_US","og_type":"article","og_title":"Active Directory Disaster Recovery (Best Practices)","og_description":"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as","og_url":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2023-11-14T14:23:36+00:00","article_modified_time":"2023-11-14T14:23:38+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2023\/11\/young-it-service-man-repairing-computer-768x512.jpg"}],"author":"Marat M","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Marat M","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/"},"author":{"name":"Marat M","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86"},"headline":"Active Directory Disaster Recovery (Best Practices)","datePublished":"2023-11-14T14:23:36+00:00","dateModified":"2023-11-14T14:23:38+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/"},"wordCount":1519,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["active directory","Active Directory Disaster Recovery"],"articleSection":["Active Directory"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/","url":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/","name":"Active Directory Disaster Recovery (Best Practices)","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2023-11-14T14:23:36+00:00","dateModified":"2023-11-14T14:23:38+00:00","description":"Active Directory Disaster Recovery (Best Practices). Active Directory (AD) plays a critical role in the infrastructure of many organizations, serving as","breadcrumb":{"@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/active-directory-disaster-recovery-best-practices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Active Directory Disaster Recovery (Best Practices)"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86","name":"Marat M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","caption":"Marat M"},"description":"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.","url":"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/54925"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=54925"}],"version-history":[{"count":29,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/54925\/revisions"}],"predecessor-version":[{"id":55054,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/54925\/revisions\/55054"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=54925"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=54925"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=54925"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}