To create a policy to allow Active Directory restores

1. Check that the NetBackup Legacy Client Service (bpinetd) is running under the domain administrator account on the Active Directory domain controller. In this case, the Active Directory domain controller is the NetBackup client.

   See Configuring the log on account for the NetBackup Client Service.

2. In the Policy dialog box, on the Attributes tab, select MS-Windows as the policy type. Specify the other policy attributes as needed.

3. Enable the Enable granular recovery option. If this option is not enabled, the backup still runs, but the backup cannot produce granular restores.

4. In the Schedules tab, create schedules as needed.

   Other items in the policy may use a differential or cumulative incremental backup type, but the Active Directory items are always fully backed up.

   See Active Directory backups are full backups.

5. In the Backup Selections tab, open the Select Directive dialog.

6. For the Directive set, select Windows 2003 or Windows 2008.

7. To back up the Active Directory, select any one of the following directives:

   • See System_State directive.

   • See Shadow Copy Components:\ directive.

   • See ALL_LOCAL_DRIVES directive.

   Note:

   Active Directory Application Mode (ADAM) is a lightweight directory service that runs as a user service. This directive can be used to back up ADAM data on computers where it is installed. However, it does not back up the Active Directory itself.

8. In the Clients tab, select the clients as needed.

9. Save the policy.