Network Implementation and Support Lesson 12 Backups

Eric Vanderburg © 2006

Network Implementation & Support

Chapter 12

Backups


Overview

• Windows Backup Utility

• Shadow Copies

• Automated System Recovery

• Startup Options

• Recovery Console


Windows Backup

• Backup or restore• System State

– Registry– COM+ (classes)– Boot files– Certificate Services database– Active Directory– SYSVOL– Cluster Service– IIS Metadirectory– System Files


Windows Backup

• Selected files

• Can be scheduled

• Backup Types– Normal (resets archive bit)– Copy– Differential– Incremental (resets archive bit)– Daily (only files changed today


Windows Backup

• Permissions to backup entire system– Administrators– Backup Operators– Server Operators

• Otherwise, backup is only permitted on files they own or have at least read NTFS permissions to.

• Only the local machine can be backed up• Specific components of the system state cannot

be selected individually for backup or restore• Files can be restored to another location


Windows Backup

• Ntbackup

• Saved as .bkf compressed file

• Boot to AD Restore mode to restore AD database– Use password set when dcpromo was run– Restore system state with ntbackup– Run ntdsutil to make the restore authoritative

• Changes version• Replaces AD once replicated with other DCs


Shadow Copies

• VSS (Volume Shadow Copy Service)

• Restore deleted files

• Go back to previous versions

• Compare previous versions & copy back into the folder

• Makes backups at specified intervals, twice a day M-F

• Only tracks changes so space is used efficiently


Shadow Copies

• Defaults:– Copy at 7:00 AM & 12:00 PM M-F– Uses 10% of hard drive space

• Settings– Change space utilization (100MB min)– Stores up to 64 copies

• Previous versions client– %systemroot%\system32\clients\twclient\x86\

twcli32.msi– View properties of a file or folder.


Automated System Recovery

• Restores system configuration information• Backs up registry & user preferences• Data must be restored and applications installed

once the ASR process is complete. • Does not restore any installed programs from

the program Files folder. • Replaces the NT/2k ERD (Emergency Repair

Disk)• Contents of the disk:

– Boot files– Asr.sif, Asrpnp.sif


ASR Restore Process

• 1. Insert the Windows XP CD-Rom into the drive 2. Insert the ASR Floppy disk into the drive 3. Power up the computer 4. Press the enter key when prompted to "press any key to run from the CD" 5. Press F2 on the keyboard when prompted to start the ASR recovery action. 6. XP will format the C drive 7. The computer will restart


ASR Restore Process• 8. Let windows XP start automatically (do not

press a key to run from the CD). 9. XP will go through the basic plug and play discovery and copy setup files to the C drive. 10. The computer will restart and boot into XP 11. The ASR wizard will start and automatically point to the asr.bkf file on the CD. Click OK to restore the system state and registry configuration. 13. When completed XP will either present the login screen

• 14. Return to the Backup wizard to restore any valued data that was saved beforehand to the drive.


Advanced Startup• Press F8 on boot before Windows logo appears• Safe Mode• Safe Mode with Networking• Safe mode with Command Prompt• Enable Boot Logging

– Logs all the drivers and services loaded and not loaded, %systemroot%\ntbtlog.txt

• Enable VGA Mode• Last Known Good Configuration• Directory Services Restore Mode• Debugging Mode

– Send debug info via serial– Used by developers for kernel modifications


Recovery Console

• Run from setup process on Windows CD or by installing it as a startup option

• Winnt32.exe /cmdcons• Start/stop services• Format drives• Look at data• Replace files• Change configuration• Must have administrator password to enter the

recovery console


Recovery Console Commands

• Listsvc - Lists the services and drivers available on the computer.

• Expand - Extracts a file from a compressed file.• Fixboot - Writes a new partition boot sector onto the

specified partition.• Fixmbr - Repairs the master boot record of the specified

disk.• Diskpart - Manages partitions on your hard drives.• Enable - Starts or enables a system service or a device

driver.• Disable - Disables a system service or a device driver• Bootcfg - Boot file (boot.ini) configuration and recovery.• Chkdsk - Checks a disk and displays a status report.


Acronyms

• VSS, Volume Shadow Copy

• ASR, Automated System Recovery

• ERD, Emergency Repair Disk

Technology

Network Implementation and Support Lesson 12 Backups