--- title: Find Domain Controller Backup Schedules with Ease description: Use repadmin and PowerShell to effortlessly find domain controller backup schedules. canonical: https://adamtheautomator.com/domain-controller-backup/ --- # Find Domain Controller Backup Schedules with Ease > Use repadmin and PowerShell to effortlessly find domain controller backup schedules. Source: https://adamtheautomator.com/domain-controller-backup/ --- - Find Domain Controller Backup Schedules with Ease Tap to hide Home - Tutorials - Guidebooks - Instructors - Get Paid to Write - Advertising - Recommended Resources - About Adam Search for: - - - - # Find Domain Controller Backup Schedules with Ease Published:7 August 2019 - 2 min. read - Active Directory - PowerShell [](https://adamtheautomator.com/author/adam-bertram/) [Adam Bertram](https://adamtheautomator.com/author/adam-bertram/) Read [more tutorials](https://adamtheautomator.com/author/adam-bertram/) by Adam Bertram! - - [](https://specopssoft.com/product/specops-password-auditor/?utm_source=adamtheautomator&utm_medium=referral&utm_campaign=adamtheautomator_referral_na&utm_content=display) Audit Active Directory for stale users, weak passwords, and other security risks with [Specops Password Auditor](https://specopssoft.com/product/specops-password-auditor/?utm_source=adamtheautomator&utm_medium=referral&utm_campaign=adamtheautomator_referral_na&utm_content=text). XFacebookLinkedIn Everyone agrees that domain controller backups are important. Even multi-master services like Active Directory should be regularly backed up. Even though you've got copies of the Active Directory database and SYSVOL on various servers spread throughout the world doesn't mean you should simply ignore backups. Depending on replication intervals one wrong change can spread across your entire Active Directory environment quickly! ## Understanding how Domain Controller Backups Work How do you determine if Active Directory is "backed up" anyway? Since Active Directory technically exists on lots of servers (domain controllers) you can backup the Active Directory database on every domain controller. You can even get more granular and backup individual naming contexts or partitions as well. Related:[Domain Controller vs Active Directory](https://adamtheautomator.com/domain-controller-vs-active-directory/) Every time a partition is backed up on a domain controller, the event is recorded on the DC. Using the [repadmin utility](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc770963(v=ws.11)?redirectedfrom=MSDN) you can then query this date. Repadmin is a utility built into Windows Server 2008 and higher on DCs and is used to perform lot of different management functions around Active Directory. One of the functions of repadmin is to find the last backup time of each partition in the Active Directory database. repadmin /showbackup to see your domain controller backup You can see if you simply run repadmin.exe /showbackup it will query the backup times for each partition on the localhost. In this case, I ran it on a domain controller directly. However, you don't have to do this. It would be more beneficial to get this information from all domain controllers in an entire forest to get a much bigger picture of the backup status of your domain controllers. To do this, we'll need some help from Windows PowerShell and its [Active Directory](https://www.microsoft.com/en-us/download/details.aspx?id=45520) [module](https://www.microsoft.com/en-us/download/details.aspx?id=45520). The [Active Directory module](https://adamtheautomator.com/powershell-import-active-directory/) has a handy cmdlet called Get-ADForest that will easily enumerate all domains that exist in the forest. One of the properties that Get-ADForest outputs is called Domains. Related:[How to Install and Import the PowerShell Active Directory Module](https://adamtheautomator.com/powershell-import-active-directory/) PS51> $domains = (Get-ADForest).Domains We now have a list of domains in the forest. Next, we'll need to find all domain controllers in each of those domains. To do this, we can use the Get-ADDomainController cmdlet. $domainControllers = ($domains | [foreach](https://adamtheautomator.com/powershell-foreach/) { Get-ADDomainController-Server $_ -Filter * }).HostName Next, we'll then pass each of these domain controllers to the repadmin utility to find the last backup times for each Active Directory partition on each of the domain controllers. PS51> $backups = $domainControllers | foreach { repadmin.exe /server $_ } This will get us a rough output of the domain controller backup dates of each partition on each domain controller in all of the domains in our current forest. However, as you saw from the repadmin /showbackup output, the output isn't that pretty and may be hard to read. For this, I'll use PowerShell's string parsing abilities and some regular expressions to get a much nicer-looking output. ## Loop through each domain controller $domainControllers | foreach { $backups = repadmin.exe /showbackup $_ ## Capture the output ofrepadmin $output = @{ 'DomainController' = $_ } ## Start collectingproperties for output for ($i = 0; $i -lt $backups.Count; $i++) { ## Begin looking atrepadmin output if ($backups[$i] -match '^(CN|DC)') { ## If the line has apartition. ## Assign the partition name and the date/time to the output hashtable ## and send $output with the DomainController, Partition and DateTime $output.Partition = $backups[$i] $output.DateTime = [regex]::Match($backups[$i +2],'(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2})').Groups[1].Value [pscustomobject]$output } } } This will get you a much nicer-looking domain controller backup report. Repadmin.exe output parsed into objects ## Summary Using the repadmin command-line utility and a little bit of PowerShell-fu, you can find the last time all of your domain controllers were backed up. This is all returned to you in a nicely-formatted, object-oriented design with PowerShell. Hate ads? Want to support the writer? Get many of our tutorials packaged as an ATA Guidebook. [Explore ATA Guidebooks](https://adamtheautomator.com/ata-guidebooks/) ## More from ATA Learning and Partners - ### Recommended Resources! Recommended Resources for Training, Information Security, Automation, and more! - ### Get Paid to Write! ATA Learning is always seeking instructors of all experience levels. Regardless if you’re a junior admin or system architect, you have something to share. Why not write on a platform with an existing audience and share your knowledge with the world? - ### ATA Learning Guidebooks ATA Learning is known for its high-quality written tutorials in the form of blog posts. Support ATA Learning with ATA Guidebook PDF eBooks available offline and with no ads! ## Categories - IT Ops - Cloud - DevOps - Home Ops - Information Security - Software Development ## Site - Home - Tutorials - Guidebooks - Instructors - Get Paid to Write - Advertising - Recommended Resources - About Adam Copyright 2026© ATA Learning | [Privacy Policy](https://adamtheautomator.com/privacy/) Don't be left behind with the ATA Learning Newsletter! Looks like you're offline!