Prerequisites
Prior to using Secure Start to guard your AD database:
- 
Backup your AD database:
- 
Navigate to Administrative Tools.
 - 
Click Windows Server Backup.
 - 
Click Action > Backup Once.
 - 
Follow the instructions in the Backup Wizard to create a backup of the server in a local drive.
 
Note
When the backup operation completes, it saves the server backup in <backup drive>:\WindowsImageBackup\<BackupComputerName>.
 - 
 - 
Perform a system state backup.
 - 
Obtain the Microsoft DSRM (Data Services Restore Mode) password.
 - 
Ensure that your AD database is not in
c:\Windows\NTDS.Warning
Do not put your AD database in
c:\Windowsorc:\Program files. Secure Start cannot encrypt or decrypt any files in those folders.