Introduction
If your server crashes or Active Directory becomes corrupt, restoring from backup ensures minimal downtime. This guide explains the steps for Bare Metal Recovery and System State recovery.
📂 If you haven't created a backup yet, start with our Windows Server Backup Guide
Bare Metal Recovery (BMR) Steps
- Prepare a Windows bootable USB drive and insert it.
- Follow the on-screen instructions to configure language, time, and keyboard, then click Next.
- Select Repair your computer.
- Select Troubleshoot.
- Select Advanced options.
- Select System Image Recovery.
- Select your backup path (for demo purposes, we select a local drive), then click Next.
- Choose Additional restore options and click Next.
- Click Finish.
- Confirm that all disks will be formatted and replaced by clicking Yes.
- The restoring process begins.
- After the restoration process is complete, the system will automatically restart.
- After restart, log in using a Domain Administrator account.
- The restoration process completes, restoring the entire server, including the OS, system state, installed applications, and data.












System State Backup Restore (Active Directory)
- Launch Server Manager, navigate to Tools, select Windows Server Backup, and click Recover.
- Select your backup location and click Next.
- Choose the backup date and click Next.
- Select System State as the recovery type, then click Next.
- Select the location for system state recovery and click Next.
- Log into Active Directory Repair Mode and access it via DSRM authentication when prompted.






Note: Before restarting, ensure Active Directory Repair Mode is enabled and DSRM authentication is set up. If not, refer to the guide on resetting the DSRM password.
DSRM Authentication Password Reset

Before you reset the DSRM password, note that DSRM refers to the NTDS password set during domain server creation.
Reset Password using PowerShell Command Prompt
Open PowerShell as administrator and execute the following commands:
ntdsutil
set dsrm password
reset password on server null
- Enter your password and confirm it.
- Password has been set successfully.
- Type
q
(quit) twice to exit.

DSRM password has been successfully reset.
Enable Active Directory Repair Mode
- Open the Run command:
msconfig
- Navigate to Boot tab
- Check Safe boot and Active Directory Repair
Restart your system and press F8.
Select Directory Services Repair Mode

Enter the DSRM administrator authentication password set above.

Windows Server Backup and Recovery
- Launch Server Manager
- Navigate to Tools → Windows Server Backup
- Click on Recover

- Select the backup date, time, and location.
- Choose System State and click Next.
- Select Original Location and confirm.
- Click Recover and then Yes. Recovery progress starts.



Disable Active Directory Repair Mode
- Open Run:
msconfig
- Go to the Boot tab and uncheck Safe boot
Final Steps
- Log in using your domain name and administrator account.
- Confirm that system recovery has been completed successfully.
- Check if Active Directory Users, OUs, Groups, etc., have been restored.
Troubleshooting
During the in-place upgrade of Windows Server, two issues may encounter:
FSMO (Flexible Single Master Operations)
An FSMO role error occurred, where the FSMO role was incorrectly identified. To resolve:
- Go to Active Directory Users and Computers
- Navigate to Domain Controller
- Right-click on the incorrect FSMO role and delete it.
Run the following command to check FSMO roles:
netdom query fsmo
Hyper-V Issue
After upgrading, virtual machines lost internet connectivity. The solution is to reinstall the Hyper-V role.