Active Directory recovery options overview
Overview
AD failures range from single object deletion to full forest compromise—options differ wildly.
Tiers
- Recycle bin + snapshot restore of single objects.
- Authoritative restore from DC backup for subtree issues.
- Forest recovery with new hardware and validated backups—rare, high drama.
Must-haves
System state backups more frequent than yearly; secure storage offline.
Testing
Lab restore of DC yearly minimum; document time to domain functionality.
Coordination
Inform app owners relying on Kerberos during recovery windows.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...