How to Configure Azure Backup for Windows Server 2012 R2
Azure Backup provides an enterprise-grade, cloud-hosted backup solution that extends Windows Server 2012 R2’s protection capabilities beyond the local network. Using the Microsoft Azure Recovery Services (MARS) agent, you can back up files, folders, and system state directly to Azure without requiring additional backup infrastructure. This guide covers installing the MARS agent, registering your server with an Azure Recovery Services vault, configuring a backup schedule, and performing recoveries from the Azure cloud.
Prerequisites
You will need an active Azure subscription with sufficient storage capacity. Create an Azure Recovery Services vault in the Azure portal before beginning. The target server must be running Windows Server 2012 R2 with all critical updates applied. Outbound internet connectivity on port 443 (HTTPS) must be available from the server. Ensure .NET Framework 4.5 or later is installed. You should have local administrator rights on the server being configured.
Step 1: Create an Azure Recovery Services Vault
In the Azure portal, navigate to All Services, search for Recovery Services vaults, and click Create. Specify the resource group, vault name, and region. Ensure the vault is in the same or nearest region as your server for optimal transfer performance.
After creation, navigate to the vault and download the vault credentials file from the Getting Started section. This credentials file (a .VaultCredentials file) is required during the MARS agent installation to register your server with the vault. The credentials file is valid for 48 hours, so complete the registration promptly.
Step 2: Download and Install the MARS Agent
Download the MARS agent installer from the Azure portal (navigate to the vault, then Backup, then Windows Server or Windows Client). Transfer the installer to your Windows Server 2012 R2 machine.
Run the installer with elevated privileges. Accept the installation path defaults or specify a custom path. The installer will check for prerequisites including .NET Framework version compatibility. Proceed through the wizard, and on the Proxy Configuration page, specify proxy settings if your server accesses the internet through a proxy server:
MARSAgentInstaller.exe /q /nuFor a silent installation specifying a proxy:
MARSAgentInstaller.exe /q /nu /proxyaddress:http://proxy.yourdomain.com:8080 /proxyusername:DOMAINproxyuser /proxypassword:YourPasswordStep 3: Register the Server with the Vault
After installation, open the Microsoft Azure Backup application from the Start menu or by running:
C:Program FilesMicrosoft Azure Recovery Services Agentbinwabmmc.exeIn the Azure Backup MMC console, click Register Server in the Actions pane. The Registration Wizard will launch. Browse to and select the vault credentials file downloaded in Step 1. On the Encryption Setting page, either generate a new passphrase or provide one. This passphrase encrypts all backup data before it leaves the server. Store the passphrase securely — if it is lost, encrypted backup data cannot be recovered. Enter a save location for the passphrase file and click Register.
After successful registration, the server appears in the Azure portal under the Recovery Services vault’s Protected Items section.
Step 4: Configure a Backup Schedule
In the Azure Backup MMC console, click Schedule Backup in the Actions pane. The Schedule Backup Wizard launches. Click Next past the Getting Started page.
On the Select Items to Back up page, add the files, folders, or volumes you want to protect. For system state backup, you must select that option explicitly. Click Add Items and browse to the locations. Avoid backing up temporary files, page files, and system recycle bins to reduce unnecessary data transfer.
On the Specify Backup Schedule page, configure the backup frequency. Azure Backup supports up to three backups per day. A common production schedule backs up at midnight and midday.
On the Select Retention Policy page, configure how long backups are retained in Azure. You can configure daily, weekly, monthly, and yearly retention policies independently. A standard retention policy might keep daily backups for 30 days, weekly backups for 12 weeks, and monthly backups for 12 months.
On the Choose Initial Backup Type page, select whether to perform the initial backup over the network immediately or to use offline seeding with an Azure Import job for large initial datasets. For small initial backups (under a few hundred GB), network backup is adequate. For terabytes of initial data, the offline seed option reduces network transfer time significantly.
Step 5: Trigger an On-Demand Backup
To initiate an immediate backup outside the scheduled window, open the Azure Backup MMC console and click Back Up Now. Select the items to include and click Back Up. Monitor progress in the Jobs section of the console.
Alternatively, use PowerShell to trigger a backup using the MARS agent’s command-line interface. First, locate the backup engine:
$marsPath = "C:Program FilesMicrosoft Azure Recovery Services Agentbin"
Start-Process -FilePath "$marsPathwbengine.exe" -ArgumentList "start" -NoNewWindowCheck the MARS agent service status:
Get-Service -Name "obengine" | Select-Object Name, Status, StartTypeStep 6: Verify Backup Jobs in Azure Portal
In the Azure portal, navigate to your Recovery Services vault and click Backup Jobs. All backup activities from registered servers appear here with status (Completed, Failed, In Progress), duration, and data transferred. Configure Azure Monitor alerts to notify your team by email when backup jobs fail:
# Via Azure CLI - create an action group for email alerts
az monitor action-group create --name BackupAlerts --resource-group MyRG
--short-name BAAlerts
--email-receiver name=SysAdmin [email protected]
# Create an alert rule for backup job failures
az monitor metrics alert create --name "BackupFailureAlert"
--resource-group MyRG
--scopes /subscriptions/{sub-id}/resourceGroups/MyRG/providers/Microsoft.RecoveryServices/vaults/MyVault
--condition "count BackupHealthEvent > 0"
--action BackupAlertsStep 7: Recover Files from Azure Backup
To recover individual files or folders, open the Azure Backup MMC console and click Recover Data. The Recovery Wizard launches. Select This Server to restore from the current server’s backups. Select Files and Folders as the recovery mode. Choose the recovery point date and time from the list of available backup snapshots.
After selecting the recovery point, the backup volume is mounted as a recoverable volume. Browse and copy files from this mounted volume to the recovery location. The mount point will be automatically released after recovery completes or when you click Unmount.
For recovering system state:
wbadmin start systemstaterecovery -version:05/15/2026-00:00 -quietStep 8: Update and Maintain the MARS Agent
Microsoft releases periodic updates to the MARS agent to address security vulnerabilities and add features. Configure automatic updates by setting the Update Settings within the Azure Backup MMC console to automatically install updates. Check the current MARS agent version:
Get-Item "C:Program FilesMicrosoft Azure Recovery Services Agentbincbengine.exe" | Select-Object VersionInfoDownload and install the latest agent manually if automatic updates are not configured:
# Download latest MARS agent
$downloadUrl = "https://aka.ms/azurebackup_agent"
Invoke-WebRequest -Uri $downloadUrl -OutFile "C:TempMARSAgentInstaller.exe"
Start-Process -FilePath "C:TempMARSAgentInstaller.exe" -ArgumentList "/q /nu" -WaitStep 9: Configure Bandwidth Throttling
To prevent Azure Backup from consuming all available internet bandwidth during business hours, configure throttling. In the Azure Backup MMC console, click Change Properties, then the Throttling tab. Enable internet bandwidth usage throttling and specify the bandwidth limits for work hours and non-work hours.
Alternatively, configure throttling via the registry:
# Set throttling: 512 Kbps during work hours, 1024 Kbps at other times
Set-ItemProperty -Path "HKLM:SOFTWAREMicrosoftWindows Azure BackupConfigThrottlePolicy" -Name "WorkHoursBandwidth" -Value 512 -Type DWord
Set-ItemProperty -Path "HKLM:SOFTWAREMicrosoftWindows Azure BackupConfigThrottlePolicy" -Name "NonWorkHoursBandwidth" -Value 1024 -Type DWordSummary
Azure Backup with the MARS agent provides a secure, scalable, off-site backup solution for Windows Server 2012 R2 without requiring additional on-premises backup infrastructure. The combination of AES-256 encryption, flexible retention policies, and integration with Azure Monitor makes it an excellent complement to local Windows Server Backup. Regularly verify backup job success in the Azure portal, periodically test file recoveries, and keep the MARS agent updated to maintain a reliable cloud backup posture.
