Prerequisites
Prior to using Secure Start to guard your AD database:
-
Backup your AD database:
-
Navigate to Administrative Tools.
-
Click Windows Server Backup.
-
Click Action > Backup Once.
-
Follow the instructions in the Backup Wizard to create a backup of the server in a local drive.
Note
When the backup operation completes, it saves the server backup in <backup drive>:\WindowsImageBackup\<BackupComputerName>.
-
-
Perform a system state backup.
-
Obtain the Microsoft DSRM (Data Services Restore Mode) password.
-
Ensure that your AD database is not in
c:\Windows\NTDS
.Warning
Do not put your AD database in
c:\Windows
orc:\Program files
. Secure Start cannot encrypt or decrypt any files in those folders.