Skip to main content
software

Synology Active Backup for Business: Complete 2026 Guide to License-Free Enterprise Backup

Master Synology Active Backup for Business (ABB) - the license-free backup solution protecting PCs, Macs, VMs, and SaaS accounts. Learn setup, ransomware protection with immutable snapshots, and deployment strategies.

Nandor Katai
Founder & IT Consultant
16 min read
Synology Active Backup for Business: Complete 2026 Guide to License-Free Enterprise Backup

Key Takeaway

Synology Active Backup for Business (ABB) protects Windows PCs, Macs, physical servers, virtual machines (VMware/Hyper-V), and SaaS accounts (Microsoft 365/Google Workspace) from a single console—with zero per-device licensing fees. Global deduplication typically reduces storage consumption by 50%+, and immutable snapshots provide ransomware-resilient recovery via WORM technology. Your only recurring investment is drive replacements and electricity—no annual software renewals.

Enterprise backup solutions like Veeam and Acronis typically cost $5,000-8,000 annually for a 35-workstation, 2-server, 10-VM environment—before hardware costs. Synology Active Backup for Business takes a different approach: one NAS purchase covers unlimited protected endpoints with no recurring licensing fees.

This guide covers DSM 7.3 features, the relationship between ABB and the new ActiveProtect management layer, and practical deployment strategies with immutable snapshots retention policy configurations.

AspectDetails
Licensing100% license-free for standalone NAS (ActiveProtect has tiers for 3+ nodes)
Supported PlatformsWindows PC, Mac, Linux servers, VMware, Hyper-V, Microsoft 365, Google Workspace
Key FeatureGlobal deduplication across all backup sources
Ransomware DefenseImmutable snapshots (WORM) with configurable retention policy
Industry RecognitionGartner Peer Insights 4.8/5 rating (101+ reviews)
RequirementsSynology Plus-series NAS with Btrfs, DSM 7.3 recommended

Synology Active Backup for Business Overview


Why Active Backup for Business? The License-Free Advantage

Traditional enterprise backup solutions like Veeam, Acronis, and Datto charge per-endpoint or per-workload licensing fees that accumulate year after year. Synology took a fundamentally different approach: Active Backup for Business is included free with every compatible Synology NAS.

Total Cost of Ownership Comparison

For a typical small business with 35 Windows workstations, 2 physical servers, and 10 virtual machines (2 hosts):

SolutionYear 1 CostYear 3 TotalYear 5 Total
Synology ABB~$1,500 (NAS + drives)~$1,500~$1,500
Veeam~$5,500 (hardware + licenses)~$13,500~$21,500
Acronis Cyber Protect~$7,500 (hardware + licenses)~$19,500~$31,500
Datto SIRIS~$6,000 (appliance + subscription)~$25,000+~$44,000+

Pricing includes backup repository hardware for competitors. Acronis workstation licenses ~$85/year, server licenses ~$595/year, VM host licenses ~$925/year. Veeam VUL pricing scales similarly.

The cost difference is significant: by year three, cumulative savings reach $12,000-23,500 compared to licensed alternatives. By year five, cumulative savings range from $20,000 (vs Veeam) to $42,500 (vs Datto)—the variance depending on which solution you're comparing against.

Best Value Configuration

For most small businesses (10-50 endpoints), the Synology DS925+ at ~$640 provides a strong balance of performance, capacity, and value. Pair it with four Seagate IronWolf or WD Red Pro drives for a complete backup solution under $1,500.

Drive compatibility note (2026 update): Users of the DS925+ and DS1825+ should note that while initial mid-2025 firmware restricted storage pool creation with third-party drives, DSM 7.3 explicitly restored the ability to use drives like WD Red Pro and Seagate IronWolf. You will see a "compatibility warning" in the UI, but full functionality is available. For details on this policy reversal, see our Synology NAS Review.


Active Backup for Business vs. Synology ActiveProtect

In late 2025, Synology launched ActiveProtect and ActiveProtect Manager—a significant evolution in their data protection strategy. Understanding the relationship between ABB and ActiveProtect is crucial for planning your 2026 deployment.

What's the Difference?

AspectActive Backup for BusinessActiveProtect
PurposeBackup engine on individual NASCentralized management for multi-site deployments
Licensing100% freeFree for up to 3 nodes; paid tiers beyond
Use CaseSingle NAS protecting endpointsManaging ABB fleets across multiple locations
IntroducedDSM 6.x (mature)Late 2025 (new)

Active Backup for Business remains the core backup engine—it's what actually performs backups of your PCs, Macs, VMs, and SaaS accounts. This is still completely license-free.

ActiveProtect Manager is a new centralized management layer that sits on top of multiple ABB instances. It provides:

  • Unified dashboard for all backup servers
  • Cross-site policy management
  • Centralized monitoring and alerting
  • Compliance reporting across the organization

When Do You Need ActiveProtect?

Stick with standalone ABB if:

  • You have a single Synology NAS
  • You manage 2-3 NAS units manually
  • You're a small business with one location

Consider ActiveProtect if:

  • You manage 3+ Synology NAS units with ABB
  • You need unified reporting across multiple sites
  • Compliance requirements demand centralized audit logs
  • You want automated policy synchronization
  • You're an MSP or franchise managing backups for 5+ client locations from one screen

Licensing Note

ActiveProtect Manager is free for managing up to 3 nodes. Larger deployments require paid licensing tiers. However, the underlying Active Backup for Business engine remains completely free regardless of how many endpoints you protect.

Synology ActiveProtect Introduction


What Can Active Backup for Business Protect?

ABB consolidates protection for your entire IT environment into a single management console. No more juggling separate tools for workstations, servers, and cloud services.

Supported Platforms and Workloads

PlatformBackup TypeKey Features
Windows PCAgent-basedBare-metal recovery, file-level restore, CBT incremental
MacAgent-basedFull system backup, Time Machine alternative (recovery more complex than Windows)
Windows ServerAgent-basedPhysical server protection, application-aware
Linux ServerAgent-basedPhysical file servers, web servers, Linux desktops (Ubuntu, Fedora, etc.)
VMware vSphereAgentlessVM-level and file-level recovery, CBT support
Microsoft Hyper-VAgentlessVM snapshots, instant restore capability
Microsoft 365API-basedExchange, OneDrive, SharePoint, Teams
Google WorkspaceAPI-basedGmail, Drive, Calendar, Contacts

Efficiency Through Global Deduplication

One of ABB's most powerful features is global deduplication—the ability to identify and eliminate duplicate data blocks across all backup sources, not just within individual backups.

Real-world example: Consider backing up 30 Windows 11 PCs. Each system contains approximately 15-20 GB of identical Windows system files. Without deduplication, you'd store 450-600 GB of redundant OS data. With global deduplication, those common files are stored once and referenced by all 30 backups.

Real-World Storage Savings

A client deploying ABB for 50 Windows workstations saw storage consumption drop from an expected 2.5 TB to just 1.1 TB—a 56% reduction through global deduplication. The effect compounds over time as incremental backups share even more common blocks.

Changed Block Tracking (CBT)

ABB uses Changed Block Tracking to identify only the data blocks that have changed since the last backup. This dramatically reduces:

  • Backup windows: Incremental backups complete in minutes rather than hours
  • Network bandwidth: Only changed blocks traverse the network
  • Storage consumption: Combined with deduplication, storage efficiency exceeds 90%

For VMware and Hyper-V environments, CBT operates at the hypervisor level, enabling efficient VM backups without installing agents inside guest operating systems.


Critical Features for Business Continuity

Bare-Metal Recovery

When a hard drive fails catastrophically—or ransomware encrypts an entire system—bare-metal recovery restores everything: operating system, applications, settings, and data. You boot from recovery media, connect to your NAS, select the restore point, and watch your system rebuild itself.

Recovery process:

  1. Boot from ABB recovery media (USB or PXE)
  2. Connect to the Synology NAS
  3. Select the device and restore point
  4. Choose target disk (can be different hardware)
  5. Restore completes in 30-90 minutes depending on data size

This capability removes the time-consuming process of reinstalling Windows, reconfiguring applications, and documenting all the settings manually.

Ransomware Protection with Immutable Snapshots

Modern ransomware often targets backup systems directly, attempting to delete or encrypt backup data before attacking production files. ABB's integration with Synology's immutable snapshots addresses this threat vector. For broader ransomware defense strategies, see our cybersecurity software guide.

Immutable snapshots (WORM - Write Once, Read Many):

  • Cannot be modified or deleted for a defined retention period
  • Protected even if attackers gain admin access to the NAS
  • Configurable retention periods (7, 14, 30+ days)
  • Meet compliance requirements for HIPAA, FINRA, SEC Rule 17a-4

Critical Configuration

Enable immutable snapshots with at least a 14-day protection period. This ensures recovery capability even if ransomware lies dormant for several days before activating. Without immutability, attackers with compromised admin credentials can delete your backups before you detect the breach.

The 3-2-1 Backup Strategy with ABB

A robust backup strategy maintains:

  • 3 copies of your data
  • 2 different storage types
  • 1 copy off-site

ABB facilitates this strategy through:

  1. Primary backup on your Synology NAS (local, fast recovery)
  2. Snapshot replication to a second Synology NAS at another location
  3. Cloud backup via Synology C2 or Hyper Backup to AWS S3/Azure

For detailed implementation of the 3-2-1 strategy, see our disaster recovery planning guide.


Practical Setup Guide

Prerequisites

Before installing Active Backup for Business, verify your environment meets these requirements:

RequirementDetails
NAS ModelSynology Plus-series or higher (DS923+, DS925+, DS1825+, RS series)
File SystemBtrfs (required for deduplication and snapshots)
DSM VersionDSM 7.3 recommended (immutable snapshots, improved cloud integration)
RAM4 GB minimum, 8 GB+ recommended for VM backups
Synology AccountRequired for activation (offline activation available via support)

Hardware Recommendations

Environment SizeRecommended NASEstimated Storage
Small (10-25 endpoints)DS925+16-32 TB
Medium (25-75 endpoints)DS1825+32-64 TB
Large (75+ endpoints)RS2423RP+ or RS3621xs+64+ TB

For any NAS deployment, pair with an uninterruptible power supply to prevent data corruption during outages. See our best UPS for NAS guide for recommendations.

Step 1: Install Active Backup for Business

  1. Log into DSM and open Package Center
  2. Search for "Active Backup for Business"
  3. Click Install (may require accepting Synology's terms)
  4. Wait for installation to complete (2-3 minutes)
  5. Launch the application from the main menu

Step 2: Activate the License

ABB requires a one-time activation with your Synology account:

  1. Sign in with your Synology account (or create one)
  2. The system validates your NAS model eligibility
  3. Activation completes automatically

For air-gapped networks: Contact Synology support to generate an offline activation key. This allows ABB to function on isolated networks without internet connectivity—critical for high-security environments.

Step 3: Configure Security Settings

Enable the dedicated SSL certificate:

ABB can use a dedicated certificate valid through 2034 (~10 years), preventing the backup interruptions that occur when shorter-lived certificates expire:

  1. Navigate to Settings > General > Connection
  2. Select "Use dedicated certificate for Active Backup for Business"
  3. Deploy this certificate to all backup agents

Configure network settings:

Ensure your NAS has a static IP address or DHCP reservation. If the NAS IP changes, all backup agents lose connectivity and require manual reconfiguration across all protected devices. For network setup guidance, see our small business network setup guide.

Step 4: Optimize Performance Settings

Compression settings:

ScenarioCompressionRationale
SSD storage on NASEnabledMinimal performance impact, saves space
HDD storage, fast backups priorityDisabledFaster backup completion
Limited storage capacityEnabledMaximize available space

Bandwidth throttling:

ABB supports per-device bandwidth limits to prevent backup traffic from saturating your network during business hours:

  1. Navigate to PC/Physical Server > [Device] > Edit
  2. Set Transfer rate limit (e.g., 50 Mbps during 9 AM-5 PM)
  3. Allow unlimited transfer during off-hours

Deployment and Management

Mass Deployment for Windows Environments

For organizations with Active Directory, deploy the ABB agent via Group Policy:

  1. Download the MSI installer from your Synology NAS
  2. Create a GPO for workstation deployment
  3. Configure the installer with your NAS address and credentials
  4. Agents install silently and begin backup automatically

GPO deployment parameters:

msiexec /i ActiveBackupForBusinessAgent.msi /qn 
  SERVERADDRESS=nas.yourdomain.com 
  USERNAME=backup_admin 
  PASSWORD=secure_password

Scheduling Options

ABB offers flexible scheduling to match your operational requirements:

Schedule TypeBest For
DailyStandard workstations with moderate change rates
Multiple times per dayHigh-change environments (developers, designers)
Event-triggered: StartupLaptops that may not be online at scheduled times
Event-triggered: Screen LockCapture data when users step away
ContinuousCritical servers requiring near-zero RPO

Retention Policies: The GFS Strategy

The Grandfather-Father-Son (GFS) retention strategy balances storage efficiency with recovery flexibility:

Retention LevelTypical SettingPurpose
Daily (Son)Keep 7 versionsRecent recovery points
Weekly (Father)Keep 4 versionsWeekly recovery for a month
Monthly (Grandfather)Keep 12 versionsMonthly recovery for a year

Example configuration:

  • Retain daily backups for 7 days
  • Retain weekly backups (every Saturday) for 4 weeks
  • Retain monthly backups (first Saturday) for 12 months

This provides 23 distinct recovery points spanning an entire year while consuming far less storage than keeping daily backups indefinitely.


Recovery Options

Self-Service File Recovery Portal

ABB includes a web-based recovery portal that allows end users to restore their own files without IT intervention:

  1. Users access the portal via browser (https://nas-address:5001)
  2. Authenticate with their domain credentials
  3. Browse backup versions by date
  4. Select and download needed files

Reduce Helpdesk Load

Enabling self-service recovery can reduce IT helpdesk tickets for file restoration by 60-80%. Train users to check the portal before submitting tickets—most "I accidentally deleted my file" requests resolve in under two minutes.

Instant Restore for Virtual Machines

When a VM fails, ABB's instant restore capability boots the VM directly from backup storage while restoration completes in the background:

  1. Select the failed VM in ABB console
  2. Choose "Instant Restore"
  3. VM boots from backup within minutes
  4. Storage vMotion migrates data to production storage transparently

This reduces recovery time from hours to minutes for critical virtual servers.

Windows-to-VM Conversion

ABB can restore a physical Windows server as a virtual machine—invaluable for:

  • Hardware failures when replacement hardware isn't immediately available
  • Disaster recovery to cloud or alternate site
  • Testing restores without affecting production hardware

Pro Tips from Expert Deployments

Disaster Recovery for ABB Itself

Critical insight from SpaceRex and experienced administrators: Do NOT use Hyper Backup to protect the Active Backup for Business data folder. The Btrfs metadata structure used by ABB makes Hyper Backup inefficient and slow.

Primary method: Snapshot Replication to a second NAS

  1. Install Snapshot Replication from Package Center
  2. Configure replication of the ABB shared folder to a second Synology NAS
  3. Set replication schedule (hourly or real-time for critical environments)
  4. In disaster, activate the replicated share on the secondary NAS

This approach provides:

  • Near-instant failover if primary NAS fails
  • Efficient delta replication (only changed blocks)
  • Maintained deduplication database integrity

DSM 7.3 alternative: Immutable snapshots to cloud

DSM 7.3 introduced improved Hybrid Share and C2 Object Storage integration, enabling direct-to-cloud immutable snapshot replication. This provides a middle ground between slow Hyper Backup workflows and the cost of a second physical NAS:

  • Immutable snapshots replicate to Synology C2 or S3-compatible storage
  • WORM protection extends to cloud copies
  • Useful for smaller deployments that can't justify a second NAS

Important limitation: Cloud-based snapshots enable file-level recovery, not instant VM boot in the cloud. If you need full Disaster Recovery as a Service (DRaaS) with instant cloud failover, you'll need a dedicated solution beyond ABB's native capabilities.

For mission-critical environments, Snapshot Replication to a second NAS remains the gold standard for recovery speed. Cloud-based options suit businesses prioritizing cost over recovery time.

Storage Planning and Deduplication Ratios

Plan storage capacity based on expected deduplication ratios:

Environment TypeTypical Dedup RatioEffective Capacity
Homogeneous Windows PCs3:1 to 5:13-5x raw capacity
Mixed Windows/Mac2:1 to 3:12-3x raw capacity
VM environment2:1 to 4:12-4x raw capacity
Diverse servers1.5:1 to 2:11.5-2x raw capacity

Rule of thumb: Provision 1.5-2x your total source data size for the backup repository, accounting for multiple retention versions and growth.

Network Architecture Best Practices

  • Dedicated backup VLAN: Isolate backup traffic from production network
  • Jumbo frames: Enable 9000 MTU for 10GbE environments
  • Static IP/DHCP reservation: Prevent agent connectivity issues
  • DNS entry: Create a DNS record (e.g., backup.company.com) for easier management

For comprehensive network planning including backup infrastructure, see our IT server room setup guide.


Comparison with Alternative Solutions

FeatureSynology ABBVeeamAcronisiDrive
Licensing ModelLicense-freePer-workload (VUL)Per-devicePer-user
Annual Cost (35 WS + servers + VMs)$0~$4,000+~$6,000+~$700
Windows PC BackupYesYesYesYes
Mac BackupYesNo (separate product)YesYes
VMware/Hyper-VYesYesYesNo
Microsoft 365YesSeparate licenseAdd-onYes
Google WorkspaceYesNoAdd-onYes
Immutable SnapshotsYes (Btrfs WORM)Yes (hardened repo)YesLimited
On-Premises StorageYes (required)OptionalOptionalNo (cloud only)
Global DeduplicationYesYesYesNo
Centralized Multi-SiteActiveProtectBuilt-inBuilt-inDashboard

When to Choose Each Solution

Choose Synology ABB if: You want zero ongoing licensing costs, prefer on-premises data control, and need to protect a mixed Windows/Mac/VM environment.

Choose Veeam if: You need advanced VM replication features, have complex multi-site requirements, or your organization already standardizes on Veeam.

Choose iDrive if: You want cloud-native backup without managing hardware, or need a secondary off-site copy alongside ABB.

Choose Acronis if: You need integrated endpoint security (antivirus) with backup in a single agent.

For businesses using Google Workspace or Microsoft 365, ABB provides SaaS backup at no additional cost—a capability that typically requires separate licenses with competing solutions. See our Google Workspace backup guide for detailed SaaS backup configuration.


Frequently Asked Questions

Does Active Backup for Business work with any Synology NAS?

No. ABB requires a Plus-series or higher NAS model with Btrfs file system support. Entry-level J-series and Value-series models are not compatible. Recommended models include the DS925+, DS1825+, and rackmount RS series.

Can I use ABB on an isolated network without internet?

Yes. Contact Synology support to generate an offline activation key. Once activated, ABB operates fully without internet connectivity—ideal for air-gapped security environments.

How does ABB handle Mac backups compared to Time Machine?

ABB provides similar file-versioning capabilities but with centralized management, global deduplication, and bare-metal recovery options that Time Machine lacks. Many organizations use ABB as their primary Mac backup and disable Time Machine.

Note on Mac Recovery: While bare-metal recovery is supported for macOS (including Apple Silicon), the process requires more steps than Windows—involving the Synology Recovery Wizard and Apple Migration Assistant. We recommend strictly following the Synology Mac Recovery Guide during your first test restore.

What happens if my NAS fails?

If you've configured Snapshot Replication to a secondary NAS (recommended), you can activate the replicated backup repository immediately. Recovery time depends on failing over services, not on data restoration. Without replication, you'll need to restore from Hyper Backup or C2 cloud backup—a longer process.

Can I restore files to a different computer?

Yes. ABB supports cross-machine restoration for file-level recovery. Individual files and folders restore to any compatible system.

Does bare-metal recovery work on dissimilar hardware?

ABB supports bare-metal recovery to dissimilar hardware with limitations. Windows driver injection handles most hardware differences automatically, but significant changes (different storage controllers, UEFI vs. BIOS) may require manual intervention. For guaranteed hardware-agnostic recovery, restore to a VM first, then P2V migrate if needed.

How much bandwidth does ABB use?

Initial full backups consume significant bandwidth (plan for off-hours or weekends). Subsequent incremental backups typically use 1-5% of the initial backup size daily, depending on data change rates. Per-device bandwidth throttling prevents network saturation.

Can I back up Linux desktops (Ubuntu, Mint, Fedora)?

Yes, but Synology treats them as "Physical Servers." Install the agent via command line rather than a GUI installer. It works for both data and full-system restore, though it lacks the polished desktop interface found in the Windows agent. Check the Synology Linux agent documentation for installation steps.

Why do Windows backups fail with VSS errors?

Volume Shadow Copy Service (VSS) errors are the most common ABB troubleshooting issue. Common causes include:

  • VSS writers in failed state: Run vssadmin list writers in an elevated command prompt to identify stuck writers
  • Insufficient disk space: VSS requires free space on the system drive for shadow copies
  • Third-party backup software conflicts: Disable or uninstall other backup agents that might lock VSS
  • Corrupted VSS components: Run sfc /scannow and consider resizing the shadow copy storage area

If backups consistently fail, check the ABB agent logs and Windows Event Viewer for specific VSS error codes.


Getting Started

Active Backup for Business transforms backup from a recurring expense into a one-time investment. The combination of license-free operation, cross-platform support, global deduplication, and immutable snapshots delivers enterprise-grade protection at small business prices.

Implementation checklist:

  • Verify NAS compatibility (Plus-series or higher, Btrfs)
  • Update to DSM 7.3 for latest features
  • Install and activate Active Backup for Business
  • Configure dedicated SSL certificate
  • Set static IP or DHCP reservation
  • Deploy agents to endpoints
  • Configure GFS retention policies
  • Enable immutable snapshots retention policy (14+ day protection)
  • Set up Snapshot Replication to secondary NAS or C2
  • Test bare-metal recovery to dissimilar hardware
  • Train users on self-service recovery portal

Once configured, ABB operates as a "set and forget" solution—backing up your entire environment automatically while you focus on more strategic IT initiatives.



This guide reflects Active Backup for Business capabilities as of January 2026 running on DSM 7.3. Features and compatibility may vary with future updates. Pricing estimates are based on typical market rates and may differ based on vendor negotiations and regional pricing.

Affiliate Disclosure: This article contains affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you.

Topics

synologyactive backupsynology activeprotectbackupdata protectionransomware protectionwindows backupmac backupvm backuphyper-vvmwaremicrosoft 365google workspacebusiness continuitydsm 7.3immutable snapshots

Share this article

Nandor Katai

Founder & IT Consultant | iFeeltech · 20+ years in IT and cybersecurity

LinkedIn

Nandor founded iFeeltech in 2003 and has spent over two decades implementing network infrastructure, cybersecurity, and managed IT solutions for Miami businesses. He writes from direct field experience — every recommendation on this site reflects configurations and tools he has tested in real client environments. He is also the creator of Valydex, a free NIST CSF 2.0 cybersecurity assessment platform.