SOLVED

Recovery of Domain Controller from Recovery Vault

%3CLINGO-SUB%20id%3D%22lingo-sub-2539608%22%20slang%3D%22en-US%22%3ERecovery%20of%20Domain%20Controller%20from%20Recovery%20Vault%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2539608%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20anyone%20aware%20of%20a%20document%20outlining%20whether%3A%3C%2FP%3E%3CP%3Ea)%20Supported%20to%20back%20up%20DC%20running%20in%20an%20Azure%20VM%20in%20Recovery%20Vault%3C%2FP%3E%3CP%3Eb)%20Specific%20instructions%20if%20any%20for%20recovery%20from%20the%20Recovery%20Vault%20if%20required%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2539719%22%20slang%3D%22en-US%22%3ERE%3A%20Recovery%20of%20Domain%20Controller%20from%20Recovery%20Vault%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2539719%22%20slang%3D%22en-US%22%3EHey%2C%20Gil.%20You%20can%20Backup%20a%20Domain%20Controller%20with%20Azure%20Backup%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fbackup%2Factive-directory-backup-restore%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fbackup%2Factive-directory-backup-restore%3C%2FA%3E%20Just%20have%20to%20keep%20an%20eye%20on%20the%20operational%20considerations%20around%20tombstone%20lifetime%20etc%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fget-started%2Fvirtual-dc%2Fvirtualized-domain-controllers-hyper-v%23operational-considerations-for-virtualized-domain-controllers%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fget-started%2Fvirtual-dc%2Fvirtualized-domain-controllers-hyper-v%23operational-considerations-for-virtualized-domain-controllers%3C%2FA%3E%20If%20your%20restoring%20a%20domain%20controller%2C%20at%20is%20at%20least%20a%20few%20weeks%20old%2C%20your%20restore%20plan%20could%20be%20to%20build%20a%20new%20one%20and%20remove%20the%20records%20still%20pointing%20to%20the%20old%20one.%3C%2FLINGO-BODY%3E
Occasional Contributor

Is anyone aware of a document outlining whether:

a) Supported to back up DC running in an Azure VM in Recovery Vault

b) Specific instructions if any for recovery from the Recovery Vault if required

1 Reply
best response confirmed by Gil Blumberg (Occasional Contributor)
Solution
Hey, Gil. You can Backup a Domain Controller with Azure Backup: https://docs.microsoft.com/en-us/azure/backup/active-directory-backup-restore Just have to keep an eye on the operational considerations around tombstone lifetime etc: https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/get-started/virtual-dc/virtualized-do... If your restoring a domain controller, at is at least a few weeks old, your restore plan could be to build a new one and remove the records still pointing to the old one.