Comment Re:This is why I have a 1 week delayed install pol (Score 1) 254
I learned a long time ago that it's just a lot bloody easier to have a Windows Server machine (physical or virtual) hanging around that you can quickly promote to a DC if the need arises. It can be a slight pain in a WAN like we have because updating FSMO roles and other AD objects can take some time, but really, at the end of the day, using your other DCs as your "backup" is a lot easier than rebuilding from backup.
While I still religiously back up AD on a nightly basis, I haven't actually rebuilt a DC from such a backup in nearly a decade, and it's more a kind of religious obligation than because I believe I'll ever use the backup. A new Server install and DCPROMO is faster, more reliable and far less error prone than taking a day or two old backup of an AD DC.