Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section V. Configuring backups
  4. Creating backup policies
  5. Active Directory granular backups and recovery
  6. Creating a policy that allows Active Directory granular restores
Veritas NetBackup™ Administrator's Guide, Volume I

Creating a policy that allows Active Directory granular restores

A NetBackup policy that backs up the Active Directory can be configured to allow the restore of the objects and attributes in the Active Directory. The objects and attributes can be restored locally or remotely without the interruption of restarting the domain controllers where the restore is performed.

The Active Directory host properties offer additional configuration options for the backup of Windows Server 2008 computers. Specifically, whether or not NetBackup performs a consistency check if Microsoft Volume Shadow Copy Service (VSS) is used as the snapshot provider.

See Active Directory host properties.

To create a policy to allow Active Directory restores

  1. Check that the NetBackup Legacy Client Service (bpinetd) is running under the domain administrator account on the Active Directory domain controller. In this case, the Active Directory domain controller is the NetBackup client.

    See Configuring the NetBackup Client Service.

  2. In the Policy dialog box, on the Attributes tab, select MS-Windows as the policy type. Specify the other policy attributes as needed.
  3. Enable the Enable granular recovery option. If this option is not enabled, the backup still runs, but the backup cannot produce granular restores.
  4. In the Schedules tab, create schedules as needed.

    Other items in the policy may use a differential or cumulative incremental backup type, but the Active Directory items are always fully backed up.

    See Active Directory backups are full backups.

  5. In the Backup Selections tab, open the Select Directive dialog.
  6. For the Directive set, select Windows 2003 or Windows 2008.
  7. To back up the Active Directory, select any one of the following directives:
    • See System State:\ directive.

    • See Shadow Copy Components:\ directive.

    • See ALL_LOCAL_DRIVES directive.

    Note:

    Active Directory Application Mode (ADAM) is a lightweight directory service that runs as a user service. This directive can be used to back up ADAM data on computers where it is installed. However, it does not back up the Active Directory itself.

  8. In the Clients tab, select the clients as needed.
  9. Save the policy.

Feedback

Was this page helpful?
Previous

System requirements for Active Directory granular NetBackup backups and recovery

Next

Active Directory backups are full backups

Feedback

Was this page helpful?