There are two types of AD restores authoritative and non authoritative.
To do an AD restore you should be in AD restore mode but as my server is in the AWS cloud I can not do that so I will demonstrate all the steps that it allows me to.
To put the DC into Directory Services Restore Mode you can use:
bcdedit /set safeboot dsrepair
shutdown -r -t 0
Go to Windows server backup and from the actions menu select recover.
Select the last backup that contains the system state.
Select the system state to restore
to remove safeboot use:
bcdedit /deletevalue safeboot