Short answer: Windows Server Backup comes free with every current Windows Server release. We add it as a feature, then schedule a daily full server backup to a dedicated disk. We'd keep one copy off site. The Recover wizard brings back files, volumes, system state or the whole server.
Windows Server Backup is the free built-in backup feature of Windows Server, and it saves the full server, the system state, volumes or single files to a disk or a network share. A disk dies on a Monday? That’s the day Windows Server Backup earns its keep. Someone deletes the wrong folder on a Friday evening. Windows Server Backup is the free feature that turns either one into an annoying morning. No extra license needed.
- Add the feature: one PowerShell line.
- A dedicated disk beats a NAS share.
- Schedule it daily in the wizard.
- One copy offline or off site.
- Test a restore now and then.
It’s built into every Windows Server release. It backs up files, volumes, system state and whole servers for bare metal recovery.
It runs on a schedule or on demand, and it restores through a wizard or with wbadmin.
Small offices with one server are exactly where it shines. For a single server with a dedicated backup disk, it’s still the first tool we’d set up, before anything goes into production.
| Point | What to know |
|---|---|
| Installation | The feature isn’t installed by default; one PowerShell line adds it |
| Dedicated disk | Schedule backups to one. Windows keeps many versions there and removes the oldest when space runs out |
| Network share | A scheduled backup there keeps only the latest copy, because each run overwrites the previous one |
| Off site or offline | Keep at least one copy there, on another disk you rotate or in a cloud service. Ransomware or a fire can’t take every copy at once then |
| Testing | A backup you’ve never restored is a hope, not a plan. Test file and bare metal restores |
What Windows Server Backup is
WSB, for short, is Microsoft’s built-in backup and recovery feature for the server, at no extra cost.
It uses the Volume Shadow Copy Service to take consistent block-level backups of running servers.
It can restore single files, folders, volumes, applications, system state or the entire server to other hardware.
You drive it from a console, with wbadmin commands or with PowerShell cmdlets.
It protects against the everyday disasters.
- A failed disk.
- An accidental deletion.
- A bad update.
- Corrupted software.
- Ransomware, if you keep an offline copy.
It’s a solid choice for one or a few servers. It isn’t a central backup platform.
Larger estates usually combine it with a dedicated product or a cloud service, or replace it.
| Can back up | Can’t do |
|---|---|
| Full server, including bare metal recovery | Back up to tape |
| System state: registry, Active Directory on a DC, boot files | Encrypt backups itself; use BitLocker on the target disk |
| Selected volumes, files and folders | Manage many servers from one console |
| Hyper-V virtual machines on the host | Keep multiple versions on a network share |
| VSS-aware applications on the server | Back up individual mailboxes or SQL databases granularly |
There’s also no deduplicated long-term retention.
How to install Windows Server Backup
You add the feature in Server Manager, or with one PowerShell command run as administrator. No restart is needed.
- Open Server Manager and select Manage, then Add Roles and Features.
- Choose Role-based or feature-based installation and select the server.
- Skip the Server Roles page. On Features, tick Windows Server Backup.
- Select Install and wait for it to finish.
PowerShell is handy on Server Core, where the console isn’t available locally:
Install-WindowsFeature Windows-Server-Backup
| Where the console lives afterwards |
|---|
| In the Start menu, under its own name |
| Under Tools in Server Manager |
Behind wbadmin.msc |
On Server Core you manage backups with wbadmin or the WindowsServerBackup PowerShell module.
Remote management works too. In the console on another server, choose Action, Connect to Another Server.
Where to store backups
For scheduled backups, we’d pick a disk dedicated to them, internal or USB.
Windows formats it, hides it from Explorer and keeps many restore points. It deletes the oldest when the disk fills.
A volume or a network share works too, with limits. For real protection, add at least one off-site or offline copy.
| Target | Versions kept | Good for | Watch out for |
|---|---|---|---|
| Dedicated backup disk, recommended | Many, managed automatically | Daily scheduled backups of one server | Same building as the server; rotate a second disk off site |
| Existing volume on another disk | Several, but slower | Servers without a spare disk | Backup I/O slows other work on that volume |
| Network shared folder, NAS | Only the latest backup | A simple copy away from the server | Each run overwrites the last; a failed run can leave you with nothing |
| External USB disks, rotated | Many per disk | An offline copy against ransomware | Someone has to swap and store the disks |
| Cloud, for example Azure Backup’s MARS agent | Per the service’s retention | An off-site copy without handling disks | Restore speed depends on bandwidth |
Microsoft’s own documentation for wbadmin warns about the network share limit directly.
A backup saved to a remote shared folder is overwritten when the same computer backs up to that folder again.
If a NAS is your only target, create a fresh folder per run with a script. Or use the NAS’s own snapshots.
The classic 3-2-1 rule still fits: three copies of the data, on two kinds of media, one of them off site.
| Copy | For a small office |
|---|---|
| First | The server itself |
| Second | A dedicated USB disk for nightly backups |
| Third | A second disk taken home once a week, or a cloud copy |
To size the disks, our RAID calculator helps you work out usable capacity on a backup array.
We’d make the dedicated backup disk at least 1.5 times the size of the data you back up. That typically leaves room for a few weeks of daily versions on a typical file server.
Your first Windows Server backup
Run one manual full backup before you set a schedule. The first run copies every used block, so it generally takes the longest.

Later runs only copy changes.
- Open the console and select Local Backup.
- In the Actions pane, select Backup Once.
- Choose Different options and select Next. The other choice reuses the scheduled settings.
- Choose Full server, which is recommended, or Custom to pick items.
- Choose Local drives or Remote shared folder and select the target.
- Select Backup, then watch the progress. Closing the window doesn’t stop the job.
Under Custom you can pick bare metal recovery, system state, volumes, or files and folders.
Two settings on the Custom path are often overlooked.
| Setting | What it does |
|---|---|
| Advanced Settings, Exclusions | Skips folders such as temp or download caches |
| VSS full backup | Tells applications like Exchange to truncate their logs |
| VSS copy backup | Leaves application history alone, because another product handles it |
If WSB is your only backup for that application, pick the full option.
When the job ends, check the result in the console’s Messages list. Event Viewer has it too, under Applications and Services Logs, Microsoft, Windows, Backup.
Scheduling automatic Windows Server backups
Use the Backup Schedule wizard in the console. After that, Windows runs the backup through Task Scheduler with no one logged on.
Daily is the minimum for most business servers.
- In the console, select Backup Schedule in the Actions pane.
- Choose Full server or Custom items.
- Set the time. Once a day at a chosen hour, or More than once a day by adding several times, in 30-minute steps.
- Choose the destination: a hard disk dedicated to backups, a volume, or a shared network folder.
- For a dedicated disk, select it and confirm that it will be formatted. Tick Show All Available Disks if it’s missing.
- Review and select Finish.
How often should it run? That follows from your recovery point objective: how much work you can afford to lose.
| Server | Typical schedule |
|---|---|
| A file server where people save all day | Two or three runs a day |
| A quiet application server | One nightly run |
Several runs a day are cheap, because each one only copies changed blocks.
How long backups are kept
On a dedicated backup disk, the tool keeps as many versions as fit. It deletes the oldest automatically when it needs space.
There’s no setting for “keep 30 days”. On a network share, only the latest version exists.
If you need fixed retention, such as monthly copies for a year, rotate extra disks or add another backup product.
Full or incremental
The tool doesn’t ask you to plan full and incremental jobs by hand. You choose under Configure Performance Settings.
| Option | What it does |
|---|---|
| Normal backup performance | Full each time |
| Faster backup performance | Incremental; it tracks changes and can slow write-heavy volumes slightly |
| Custom | Set per volume |
Either way, every version on the disk restores as a complete point in time.
Backup types: full server, system state, volumes, files
Most single-server setups simply schedule a full server backup every day.
| Type | What it includes | Use it to recover from |
|---|---|---|
| Full server | All volumes, system state, bare metal recovery data | Anything, up to a dead server |
| Bare metal recovery | System, boot and critical volumes plus system state | Failed hardware; restore to other hardware or a VM |
| System state | Registry, boot files, COM+ database, AD DS and SYSVOL on a DC, certificate services if present | Broken configuration, Active Directory problems |
| Volumes | Whole chosen volumes | Corrupted or lost data volumes |
| Files and folders | Selected paths only | Deleted documents, smaller data sets |
A practical plan for a small business has three parts.
- A daily full server backup to a dedicated disk.
- A weekly copy to a second disk kept off site.
- A separate system state backup on domain controllers before any major change.
Restoring files, volumes or a whole server
Restores start from the Recover action in the console. You choose the backup date, then what to bring back.
A server that won’t boot is restored from installation media with System Image Recovery. We’d practise each type before you need it.
Files and folders
- Open the console and select Recover.
- Choose This server, or a backup stored elsewhere, and select the date and time.
- Choose Files and folders and browse to the items.
- Restore to the original location or, safer, to another folder. Decide what to do with existing copies.
- Keep the option for access control list permissions ticked, so file permissions come back too.
A volume
Choose Volumes in the Recovery Wizard, select the source volume and a destination volume, and confirm.
Everything on the destination is overwritten, so double-check the drive letter.
The system volume can’t be restored this way. That’s the job of bare metal recovery.
System state
Choose System state in the wizard, or use the wbadmin line from the table further down.
On a domain controller, start in Directory Services Restore Mode first. Then decide between two kinds of restore.
| Restore | Result |
|---|---|
| Non-authoritative | The controller catches up from its partners |
Authoritative, with ntdsutil |
Your restored objects win |
Restart when the restore finishes.
Bare metal recovery to other hardware
- Boot the server from Windows Server installation media of the same version.
- Select Next, then Repair your computer.
- Choose Troubleshoot, then System Image Recovery.
- Pick the latest image from the attached backup disk or a network location. Then follow the wizard, which repartitions the target disks.
We’d test a bare metal restore into a virtual machine at least once a year. That’s how you learn, on a quiet afternoon, that a storage driver is missing or the backup disk was the wrong one.
Automating Windows Server Backup with PowerShell
The WindowsServerBackup module creates a policy object. You add what to back up and where.
Then you either run it once with Start-WBBackup or save it as the schedule with Set-WBPolicy.
The older wbadmin command does the same from Command Prompt and in batch files. Both need an elevated session.
A one-time backup of a folder, system state and bare metal recovery data to drive E:
$policy = New-WBPolicy
Add-WBFileSpec -Policy $policy -FileSpec (New-WBFileSpec -FileSpec "D:\Shares")
Add-WBSystemState -Policy $policy
Add-WBBareMetalRecovery -Policy $policy
Add-WBBackupTarget -Policy $policy -Target (New-WBBackupTarget -VolumePath "E:")
Start-WBBackup -Policy $policy
A daily schedule at 02:00 and 13:00 looks like this:
$policy = New-WBPolicy
Add-WBFileSpec -Policy $policy -FileSpec (New-WBFileSpec -FileSpec "D:\Shares")
Add-WBBackupTarget -Policy $policy -Target (New-WBBackupTarget -VolumePath "E:")
Set-WBSchedule -Policy $policy -Schedule 02:00, 13:00
Set-WBPolicy -Policy $policy -Force
The schedule only takes effect after Set-WBPolicy. Many scripts online leave that step out.
For status and versions:
Get-WBSummary
Get-WBJob -Previous 1
wbadmin get versions
And the same backups with wbadmin:
wbadmin start backup -backupTarget:E: -include:C:,D: -allCritical -quiet
wbadmin start systemstatebackup -backupTarget:E: -quiet
wbadmin start systemstaterecovery
| Command | What it does |
|---|---|
New-WBPolicy |
Creates an empty policy |
Add-WBFileSpec |
Adds a folder to the policy |
Add-WBSystemState |
Adds system state |
Add-WBBareMetalRecovery |
Adds bare metal recovery data |
Add-WBBackupTarget |
Sets where the backup goes |
Set-WBSchedule |
Sets the daily times |
Get-WBSummary |
Shows the last result and the next run |
Get-WBJob |
Shows the previous job |
wbadmin get versions |
Lists the stored versions |
wbadmin start systemstaterecovery |
Starts a system state restore |
For alerts, attach a task in Task Scheduler to event ID 4, the success event. The failure events in the Backup log work the same way.
Or let your monitoring system read Get-WBSummary.
Without some alert, a backup can quietly fail for weeks. A typical trigger is nothing more dramatic than an unplugged USB disk.
Good practice in 2026
Back up daily to a dedicated disk and keep one copy offline or off site. Encrypt removable disks, monitor every job and test restores on a schedule.
| Practice | Why |
|---|---|
| An offline copy against ransomware | Ransomware often targets reachable backups first. A rotated disk in a drawer can’t be encrypted remotely |
| Encrypt removable disks | Turn on BitLocker for backup disks that leave the building |
| Back up before big changes | Run Backup Once before feature updates, role changes or a domain controller promotion |
| Document the restore | Write down where the disks are, which media to boot and who knows the BitLocker recovery keys |
| Keep the server release current | A backup doesn’t patch the operating system |
The same goes before a domain join, or before a domain rename. Run Backup Once first.
For the oldest release in the version table, see what to plan for Windows Server 2016.
Common mistakes with server backups
- Scheduling to a NAS share and expecting several versions. Only the latest one is there.
- Leaving the only backup disk next to the server.
- Never trying a restore until the day it’s needed.
- Carrying an unencrypted USB disk out of the building.
- Writing a schedule in PowerShell and skipping the line that saves the policy.
- Running with no alert, so a failed job goes unseen for weeks.
- Restoring a volume onto the wrong drive letter.
Terms used on this page
| Term | Meaning |
|---|---|
| Bare metal recovery | Restoring a whole server onto empty or replacement hardware |
| System state | The registry, boot files and, on a domain controller, Active Directory |
| VSS | Volume Shadow Copy Service, which lets Windows back up files in use |
| Recovery point objective | How much work you can afford to lose |
| 3-2-1 rule | Three copies, two kinds of media, one off site |
| Server Core | A Windows Server setup with no local graphical console |
| DSRM | Directory Services Restore Mode, used to restore a domain controller |
| NAS | Network-attached storage |
| ACL | Access control list, the permissions on files and folders |
Windows Server Backup service name and startup type
Jobs fail and the console says the service won’t start? Look at the engine behind the wizard first.
| Setting | Default value |
|---|---|
| Display name in Services | Block Level Backup Engine Service |
| Service name | wbengine |
| Startup type | Manual |
| Log on as | Local System account |
Manual is correct here. The service starts by itself when a job runs, then stops again. Switched to Disabled, or to a named account? Put it back to Manual and Local System, then restart it. Microsoft’s Best Practices Analyzer rules flag both settings, because other values can make backup jobs fail.
Want to check it from PowerShell? This line shows the state:
Get-Service wbengine
How to delete old Windows Server backups
On a dedicated disk, the feature cleans up by itself. Older versions get dropped when space runs short. Want control anyway? Use the WindowsServerBackup module.
Keep the three newest backups on a target and remove the rest:
$target = Get-WBBackupTarget -Policy (Get-WBPolicy)
Remove-WBBackupSet -BackupTarget $target -KeepVersions 3 -Force
Only the oldest one, no prompt:
Remove-WBBackupSet -BackupTarget $target -DeleteOldest -Force
The cmdlet clears the backup from the catalog on the target and from the local system catalog. Details sit on the Remove-WBBackupSet reference.
For system state backups, wbadmin has its own switch. It needs an elevated prompt and membership in Administrators or Backup Operators.
wbadmin delete systemstatebackup -keepVersions:3
Never delete the WindowsImageBackup folder by hand while a schedule points at the disk. The catalog then lists backups that no longer exist.
Common Windows Server Backup failures and fixes
A NAS share holds only one version
Nightly backups to a shared folder overwrite each other. Last week’s file? Gone. A dedicated disk keeps older versions, with the NAS as an extra copy.
Scheduled jobs fail for weeks unnoticed
The backup disk got unplugged, or its USB port went to something else. Every job fails quietly. An alert on the Backup log catches it the first night.
Bare metal restore can’t see the disks
Replacement hardware with a different storage controller stops the restore. The driver is missing. A test restore into a VM shows that early.
A PowerShell schedule never starts
The policy was built and never saved. One more line, Set-WBPolicy, fixes it.
Ransomware reached the attached backup disk
A disk that stays connected gets encrypted along with the server. A rotated disk kept off site stays clean. Restore from that one.
Windows Server versions these backup steps cover
The console and wizard pages look the same across these releases. Server Core installations use PowerShell, wbadmin or remote management.
| Version | Console | PowerShell and wbadmin |
|---|---|---|
| Windows Server 2025 | Yes | Yes |
| Windows Server 2022 | Yes | Yes |
| Windows Server 2019 | Yes | Yes |
| Windows Server 2016 | Yes | Yes |
For the full option list of the command-line tool, see Microsoft’s wbadmin enable backup reference.
Moving off an old server? Our Windows Server 2025 Standard key comes as a genuine license. So do the Windows Server 2022 Standard key and the 2019 Standard key. Delivery is instant to email.
Data loss rarely announces itself. Give the feature a dedicated disk and a schedule, and keep one copy somewhere else.
Then restore something every few months. That small routine is what saves the day.
FAQ
Is Windows Server Backup free?
Yes. It comes with every Windows Server edition, including Standard, Datacenter and Essentials, with no extra license. We'd add the feature in Server Manager or with PowerShell.
Can Windows Server Backup back up to a NAS or network share?
Yes, but a scheduled backup to a shared folder keeps only the latest version. Each run overwrites the previous one. For several restore points, we'd use a dedicated local or USB disk and copy to the NAS as an extra layer.
How do I restore a single file from Windows Server Backup?
Open the console, select Recover and pick the backup date. Choose Files and folders and browse to the file. We'd restore it to another folder first. Permissions come back if you keep the ACL option ticked.
Can I restore a Windows Server backup to different hardware?
Yes, with bare metal recovery. Boot the machine from Windows Server installation media and choose Repair your computer. Then pick System Image Recovery and point it at the backup. Missing storage drivers are the usual obstacle, so we'd test it first in a VM.
Does Windows Server Backup encrypt or compress backups?
It has no encryption setting of its own. We'd protect backup disks with BitLocker, especially removable ones that leave the building. Space is saved by block-level change tracking, not by a compression option.
How do I back up Active Directory with Windows Server Backup?
Include System state in the backup on a domain controller. To restore it, start the controller in Directory Services Restore Mode. Then run the system state recovery, authoritative or not.
How can I tell whether last night's backup worked?
Check the Messages list in the console, or the Backup log in Event Viewer. PowerShell shows a summary too. We'd set up an alert, so a failed job never goes unnoticed.
What's the service name behind Windows Server Backup?
wbengine. In Services it shows as Block Level Backup Engine Service. Startup type Manual, log on as Local System. Other values can make jobs fail.
