Cart0

Server · guide · 10 min read

Never Lose Your Data Again: Windows Server Backup Setup, Schedule and Restore

Updated

Never Lose Your Data Again: Windows Server Backup Setup, Schedule and Restore

Short answer: Windows Server Backup comes free with every current Windows Server release. We add it as a feature, then schedule a daily full server backup to a dedicated disk. We'd keep one copy off site. The Recover wizard brings back files, volumes, system state or the whole server.

Windows Server Backup is the free built-in backup feature of Windows Server, and it saves the full server, the system state, volumes or single files to a disk or a network share. A disk dies on a Monday? That’s the day Windows Server Backup earns its keep. Someone deletes the wrong folder on a Friday evening. Windows Server Backup is the free feature that turns either one into an annoying morning. No extra license needed.

  • Add the feature: one PowerShell line.
  • A dedicated disk beats a NAS share.
  • Schedule it daily in the wizard.
  • One copy offline or off site.
  • Test a restore now and then.

It’s built into every Windows Server release. It backs up files, volumes, system state and whole servers for bare metal recovery.

It runs on a schedule or on demand, and it restores through a wizard or with wbadmin.

Small offices with one server are exactly where it shines. For a single server with a dedicated backup disk, it’s still the first tool we’d set up, before anything goes into production.

Point What to know
Installation The feature isn’t installed by default; one PowerShell line adds it
Dedicated disk Schedule backups to one. Windows keeps many versions there and removes the oldest when space runs out
Network share A scheduled backup there keeps only the latest copy, because each run overwrites the previous one
Off site or offline Keep at least one copy there, on another disk you rotate or in a cloud service. Ransomware or a fire can’t take every copy at once then
Testing A backup you’ve never restored is a hope, not a plan. Test file and bare metal restores

What Windows Server Backup is

WSB, for short, is Microsoft’s built-in backup and recovery feature for the server, at no extra cost.

It uses the Volume Shadow Copy Service to take consistent block-level backups of running servers.

It can restore single files, folders, volumes, applications, system state or the entire server to other hardware.

You drive it from a console, with wbadmin commands or with PowerShell cmdlets.

It protects against the everyday disasters.

  • A failed disk.
  • An accidental deletion.
  • A bad update.
  • Corrupted software.
  • Ransomware, if you keep an offline copy.

It’s a solid choice for one or a few servers. It isn’t a central backup platform.

Larger estates usually combine it with a dedicated product or a cloud service, or replace it.

Can back up Can’t do
Full server, including bare metal recovery Back up to tape
System state: registry, Active Directory on a DC, boot files Encrypt backups itself; use BitLocker on the target disk
Selected volumes, files and folders Manage many servers from one console
Hyper-V virtual machines on the host Keep multiple versions on a network share
VSS-aware applications on the server Back up individual mailboxes or SQL databases granularly

There’s also no deduplicated long-term retention.

How to install Windows Server Backup

You add the feature in Server Manager, or with one PowerShell command run as administrator. No restart is needed.

  1. Open Server Manager and select Manage, then Add Roles and Features.
  2. Choose Role-based or feature-based installation and select the server.
  3. Skip the Server Roles page. On Features, tick Windows Server Backup.
  4. Select Install and wait for it to finish.

PowerShell is handy on Server Core, where the console isn’t available locally:

Install-WindowsFeature Windows-Server-Backup
Where the console lives afterwards
In the Start menu, under its own name
Under Tools in Server Manager
Behind wbadmin.msc

On Server Core you manage backups with wbadmin or the WindowsServerBackup PowerShell module.

Remote management works too. In the console on another server, choose Action, Connect to Another Server.

Where to store backups

For scheduled backups, we’d pick a disk dedicated to them, internal or USB.

Windows formats it, hides it from Explorer and keeps many restore points. It deletes the oldest when the disk fills.

A volume or a network share works too, with limits. For real protection, add at least one off-site or offline copy.

Target Versions kept Good for Watch out for
Dedicated backup disk, recommended Many, managed automatically Daily scheduled backups of one server Same building as the server; rotate a second disk off site
Existing volume on another disk Several, but slower Servers without a spare disk Backup I/O slows other work on that volume
Network shared folder, NAS Only the latest backup A simple copy away from the server Each run overwrites the last; a failed run can leave you with nothing
External USB disks, rotated Many per disk An offline copy against ransomware Someone has to swap and store the disks
Cloud, for example Azure Backup’s MARS agent Per the service’s retention An off-site copy without handling disks Restore speed depends on bandwidth

Microsoft’s own documentation for wbadmin warns about the network share limit directly.

A backup saved to a remote shared folder is overwritten when the same computer backs up to that folder again.

If a NAS is your only target, create a fresh folder per run with a script. Or use the NAS’s own snapshots.

The classic 3-2-1 rule still fits: three copies of the data, on two kinds of media, one of them off site.

Copy For a small office
First The server itself
Second A dedicated USB disk for nightly backups
Third A second disk taken home once a week, or a cloud copy

To size the disks, our RAID calculator helps you work out usable capacity on a backup array.

We’d make the dedicated backup disk at least 1.5 times the size of the data you back up. That typically leaves room for a few weeks of daily versions on a typical file server.

Your first Windows Server backup

Run one manual full backup before you set a schedule. The first run copies every used block, so it generally takes the longest.

Six steps for a first manual Windows Server Backup run with Backup Once, from Local Backup to the Backup button.
Illustration: a first manual Windows Server Backup run goes from Local Backup through Backup Once to the chosen target.

Later runs only copy changes.

  • Open the console and select Local Backup.
  • In the Actions pane, select Backup Once.
  • Choose Different options and select Next. The other choice reuses the scheduled settings.
  • Choose Full server, which is recommended, or Custom to pick items.
  • Choose Local drives or Remote shared folder and select the target.
  • Select Backup, then watch the progress. Closing the window doesn’t stop the job.

Under Custom you can pick bare metal recovery, system state, volumes, or files and folders.

Two settings on the Custom path are often overlooked.

Setting What it does
Advanced Settings, Exclusions Skips folders such as temp or download caches
VSS full backup Tells applications like Exchange to truncate their logs
VSS copy backup Leaves application history alone, because another product handles it

If WSB is your only backup for that application, pick the full option.

When the job ends, check the result in the console’s Messages list. Event Viewer has it too, under Applications and Services Logs, Microsoft, Windows, Backup.

Scheduling automatic Windows Server backups

Use the Backup Schedule wizard in the console. After that, Windows runs the backup through Task Scheduler with no one logged on.

Daily is the minimum for most business servers.

  • In the console, select Backup Schedule in the Actions pane.
  • Choose Full server or Custom items.
  • Set the time. Once a day at a chosen hour, or More than once a day by adding several times, in 30-minute steps.
  • Choose the destination: a hard disk dedicated to backups, a volume, or a shared network folder.
  • For a dedicated disk, select it and confirm that it will be formatted. Tick Show All Available Disks if it’s missing.
  • Review and select Finish.

How often should it run? That follows from your recovery point objective: how much work you can afford to lose.

Server Typical schedule
A file server where people save all day Two or three runs a day
A quiet application server One nightly run

Several runs a day are cheap, because each one only copies changed blocks.

How long backups are kept

On a dedicated backup disk, the tool keeps as many versions as fit. It deletes the oldest automatically when it needs space.

There’s no setting for “keep 30 days”. On a network share, only the latest version exists.

If you need fixed retention, such as monthly copies for a year, rotate extra disks or add another backup product.

Full or incremental

The tool doesn’t ask you to plan full and incremental jobs by hand. You choose under Configure Performance Settings.

Option What it does
Normal backup performance Full each time
Faster backup performance Incremental; it tracks changes and can slow write-heavy volumes slightly
Custom Set per volume

Either way, every version on the disk restores as a complete point in time.

Backup types: full server, system state, volumes, files

Most single-server setups simply schedule a full server backup every day.

Type What it includes Use it to recover from
Full server All volumes, system state, bare metal recovery data Anything, up to a dead server
Bare metal recovery System, boot and critical volumes plus system state Failed hardware; restore to other hardware or a VM
System state Registry, boot files, COM+ database, AD DS and SYSVOL on a DC, certificate services if present Broken configuration, Active Directory problems
Volumes Whole chosen volumes Corrupted or lost data volumes
Files and folders Selected paths only Deleted documents, smaller data sets

A practical plan for a small business has three parts.

  • A daily full server backup to a dedicated disk.
  • A weekly copy to a second disk kept off site.
  • A separate system state backup on domain controllers before any major change.

Restoring files, volumes or a whole server

Restores start from the Recover action in the console. You choose the backup date, then what to bring back.

A server that won’t boot is restored from installation media with System Image Recovery. We’d practise each type before you need it.

Files and folders

  • Open the console and select Recover.
  • Choose This server, or a backup stored elsewhere, and select the date and time.
  • Choose Files and folders and browse to the items.
  • Restore to the original location or, safer, to another folder. Decide what to do with existing copies.
  • Keep the option for access control list permissions ticked, so file permissions come back too.

A volume

Choose Volumes in the Recovery Wizard, select the source volume and a destination volume, and confirm.

Everything on the destination is overwritten, so double-check the drive letter.

The system volume can’t be restored this way. That’s the job of bare metal recovery.

System state

Choose System state in the wizard, or use the wbadmin line from the table further down.

On a domain controller, start in Directory Services Restore Mode first. Then decide between two kinds of restore.

Restore Result
Non-authoritative The controller catches up from its partners
Authoritative, with ntdsutil Your restored objects win

Restart when the restore finishes.

Bare metal recovery to other hardware

  • Boot the server from Windows Server installation media of the same version.
  • Select Next, then Repair your computer.
  • Choose Troubleshoot, then System Image Recovery.
  • Pick the latest image from the attached backup disk or a network location. Then follow the wizard, which repartitions the target disks.

We’d test a bare metal restore into a virtual machine at least once a year. That’s how you learn, on a quiet afternoon, that a storage driver is missing or the backup disk was the wrong one.

Automating Windows Server Backup with PowerShell

The WindowsServerBackup module creates a policy object. You add what to back up and where.

Then you either run it once with Start-WBBackup or save it as the schedule with Set-WBPolicy.

The older wbadmin command does the same from Command Prompt and in batch files. Both need an elevated session.

A one-time backup of a folder, system state and bare metal recovery data to drive E:

$policy = New-WBPolicy
Add-WBFileSpec -Policy $policy -FileSpec (New-WBFileSpec -FileSpec "D:\Shares")
Add-WBSystemState -Policy $policy
Add-WBBareMetalRecovery -Policy $policy
Add-WBBackupTarget -Policy $policy -Target (New-WBBackupTarget -VolumePath "E:")
Start-WBBackup -Policy $policy

A daily schedule at 02:00 and 13:00 looks like this:

$policy = New-WBPolicy
Add-WBFileSpec -Policy $policy -FileSpec (New-WBFileSpec -FileSpec "D:\Shares")
Add-WBBackupTarget -Policy $policy -Target (New-WBBackupTarget -VolumePath "E:")
Set-WBSchedule -Policy $policy -Schedule 02:00, 13:00
Set-WBPolicy -Policy $policy -Force

The schedule only takes effect after Set-WBPolicy. Many scripts online leave that step out.

For status and versions:

Get-WBSummary
Get-WBJob -Previous 1
wbadmin get versions

And the same backups with wbadmin:

wbadmin start backup -backupTarget:E: -include:C:,D: -allCritical -quiet
wbadmin start systemstatebackup -backupTarget:E: -quiet
wbadmin start systemstaterecovery
Command What it does
New-WBPolicy Creates an empty policy
Add-WBFileSpec Adds a folder to the policy
Add-WBSystemState Adds system state
Add-WBBareMetalRecovery Adds bare metal recovery data
Add-WBBackupTarget Sets where the backup goes
Set-WBSchedule Sets the daily times
Get-WBSummary Shows the last result and the next run
Get-WBJob Shows the previous job
wbadmin get versions Lists the stored versions
wbadmin start systemstaterecovery Starts a system state restore

For alerts, attach a task in Task Scheduler to event ID 4, the success event. The failure events in the Backup log work the same way.

Or let your monitoring system read Get-WBSummary.

Without some alert, a backup can quietly fail for weeks. A typical trigger is nothing more dramatic than an unplugged USB disk.

Good practice in 2026

Back up daily to a dedicated disk and keep one copy offline or off site. Encrypt removable disks, monitor every job and test restores on a schedule.

Practice Why
An offline copy against ransomware Ransomware often targets reachable backups first. A rotated disk in a drawer can’t be encrypted remotely
Encrypt removable disks Turn on BitLocker for backup disks that leave the building
Back up before big changes Run Backup Once before feature updates, role changes or a domain controller promotion
Document the restore Write down where the disks are, which media to boot and who knows the BitLocker recovery keys
Keep the server release current A backup doesn’t patch the operating system

The same goes before a domain join, or before a domain rename. Run Backup Once first.

For the oldest release in the version table, see what to plan for Windows Server 2016.

Common mistakes with server backups

  • Scheduling to a NAS share and expecting several versions. Only the latest one is there.
  • Leaving the only backup disk next to the server.
  • Never trying a restore until the day it’s needed.
  • Carrying an unencrypted USB disk out of the building.
  • Writing a schedule in PowerShell and skipping the line that saves the policy.
  • Running with no alert, so a failed job goes unseen for weeks.
  • Restoring a volume onto the wrong drive letter.

Terms used on this page

Term Meaning
Bare metal recovery Restoring a whole server onto empty or replacement hardware
System state The registry, boot files and, on a domain controller, Active Directory
VSS Volume Shadow Copy Service, which lets Windows back up files in use
Recovery point objective How much work you can afford to lose
3-2-1 rule Three copies, two kinds of media, one off site
Server Core A Windows Server setup with no local graphical console
DSRM Directory Services Restore Mode, used to restore a domain controller
NAS Network-attached storage
ACL Access control list, the permissions on files and folders

Windows Server Backup service name and startup type

Jobs fail and the console says the service won’t start? Look at the engine behind the wizard first.

Setting Default value
Display name in Services Block Level Backup Engine Service
Service name wbengine
Startup type Manual
Log on as Local System account

Manual is correct here. The service starts by itself when a job runs, then stops again. Switched to Disabled, or to a named account? Put it back to Manual and Local System, then restart it. Microsoft’s Best Practices Analyzer rules flag both settings, because other values can make backup jobs fail.

Want to check it from PowerShell? This line shows the state:

Get-Service wbengine

How to delete old Windows Server backups

On a dedicated disk, the feature cleans up by itself. Older versions get dropped when space runs short. Want control anyway? Use the WindowsServerBackup module.

Keep the three newest backups on a target and remove the rest:

$target = Get-WBBackupTarget -Policy (Get-WBPolicy)
Remove-WBBackupSet -BackupTarget $target -KeepVersions 3 -Force

Only the oldest one, no prompt:

Remove-WBBackupSet -BackupTarget $target -DeleteOldest -Force

The cmdlet clears the backup from the catalog on the target and from the local system catalog. Details sit on the Remove-WBBackupSet reference.

For system state backups, wbadmin has its own switch. It needs an elevated prompt and membership in Administrators or Backup Operators.

wbadmin delete systemstatebackup -keepVersions:3

Never delete the WindowsImageBackup folder by hand while a schedule points at the disk. The catalog then lists backups that no longer exist.

Common Windows Server Backup failures and fixes

A NAS share holds only one version

Nightly backups to a shared folder overwrite each other. Last week’s file? Gone. A dedicated disk keeps older versions, with the NAS as an extra copy.

Scheduled jobs fail for weeks unnoticed

The backup disk got unplugged, or its USB port went to something else. Every job fails quietly. An alert on the Backup log catches it the first night.

Bare metal restore can’t see the disks

Replacement hardware with a different storage controller stops the restore. The driver is missing. A test restore into a VM shows that early.

A PowerShell schedule never starts

The policy was built and never saved. One more line, Set-WBPolicy, fixes it.

Ransomware reached the attached backup disk

A disk that stays connected gets encrypted along with the server. A rotated disk kept off site stays clean. Restore from that one.

Windows Server versions these backup steps cover

The console and wizard pages look the same across these releases. Server Core installations use PowerShell, wbadmin or remote management.

Version Console PowerShell and wbadmin
Windows Server 2025 Yes Yes
Windows Server 2022 Yes Yes
Windows Server 2019 Yes Yes
Windows Server 2016 Yes Yes

For the full option list of the command-line tool, see Microsoft’s wbadmin enable backup reference.

Moving off an old server? Our Windows Server 2025 Standard key comes as a genuine license. So do the Windows Server 2022 Standard key and the 2019 Standard key. Delivery is instant to email.

Data loss rarely announces itself. Give the feature a dedicated disk and a schedule, and keep one copy somewhere else.

Then restore something every few months. That small routine is what saves the day.

FAQ

Is Windows Server Backup free?

Yes. It comes with every Windows Server edition, including Standard, Datacenter and Essentials, with no extra license. We'd add the feature in Server Manager or with PowerShell.

Can Windows Server Backup back up to a NAS or network share?

Yes, but a scheduled backup to a shared folder keeps only the latest version. Each run overwrites the previous one. For several restore points, we'd use a dedicated local or USB disk and copy to the NAS as an extra layer.

How do I restore a single file from Windows Server Backup?

Open the console, select Recover and pick the backup date. Choose Files and folders and browse to the file. We'd restore it to another folder first. Permissions come back if you keep the ACL option ticked.

Can I restore a Windows Server backup to different hardware?

Yes, with bare metal recovery. Boot the machine from Windows Server installation media and choose Repair your computer. Then pick System Image Recovery and point it at the backup. Missing storage drivers are the usual obstacle, so we'd test it first in a VM.

Does Windows Server Backup encrypt or compress backups?

It has no encryption setting of its own. We'd protect backup disks with BitLocker, especially removable ones that leave the building. Space is saved by block-level change tracking, not by a compression option.

How do I back up Active Directory with Windows Server Backup?

Include System state in the backup on a domain controller. To restore it, start the controller in Directory Services Restore Mode. Then run the system state recovery, authoritative or not.

How can I tell whether last night's backup worked?

Check the Messages list in the console, or the Backup log in Event Viewer. PowerShell shows a summary too. We'd set up an alert, so a failed job never goes unnoticed.

What's the service name behind Windows Server Backup?

wbengine. In Services it shows as Block Level Backup Engine Service. Startup type Manual, log on as Local System. Other values can make jobs fail.