Backup Tasks
This chapter covers the day-to-day work of keeping every domain controller recoverable: scheduling backups, taking a backup outside the schedule, following and stopping backup jobs, and deciding which objects Cygna Forest Recovery counts when it reports on coverage.
The Manager starts every backup. Agents never start one on their own, and no domain controller is backed up until it has a backup policy. A policy belongs to one machine and sets how often it is backed up, optionally from what time of day, and which backup type is taken. Each backup runs as a job that you can follow on the Backup Jobs screen until it is committed to the vault and becomes a restore point.
Who can do what
The tasks in this chapter need the Backup Operator role, or the break-glass account:
- Changing policies and exclusions—creating, editing, disabling, and removing backup policies, excluding objects, and recording objects as removed from the directory.
- Starting and stopping backups—Back up now and Stop backup on the Domain Controllers screen, Back up now on the Backup Policies screen, Retry on a failed job on the Backup Jobs screen, and the equivalent
cdrcommands.
Any operator who can view backups sees the Backup Policies and Backup Jobs screens. Changing a schedule on Backup Policies needs the Backup Operator role. For more information, see Managing Operators and Roles.
Before you start
Backups need a DC agent on each domain controller and a connected storage agent. If you are setting up a new installation, start with Creating Your First Backup Policies. For how a backup moves from the domain controller into the vault, see How Backup Works.
