70-270, 70-290 MCSE/MCSA Guide to Installing and Managing

Microsoft Windows XP Professional and Windows Server 2003

Chapter FifteenImplementing and Managing Backups and

Disaster Recovery

Guide to MCSE 70-270, 70-290 2

Objectives

• Back up and restore data

• Describe operating system backup and recovery

• Configure the Shadow Copies of Shared Folders feature

Guide to MCSE 70-270, 70-290 3

Objectives (continued)

• Explain the purpose of the Automated System Recovery feature

• Describe the Windows Server 2003 advanced startup options

• Install and use the Recovery Console

Guide to MCSE 70-270, 70-290 4

Backing Up and Restoring Data

• Must be prepared if disaster strikes

• To assist in disaster recovery, Windows provides a number of tools:– Backup utility– Shadow Copies of Shared Volumes– Automated System Recovery (ASR)– Advanced startup options– Recovery console

Guide to MCSE 70-270, 70-290 5

Backing Up and Restoring Data (continued)

• Backup utility: Used for restoring an OS or data in case of total hardware or storage media failure– Back up and restore files and folders– Schedule a backup– Back up Windows System State data– Restore all or a portion of the Active Directory

database– Create an Automated System Recovery (ASR)

backup

Guide to MCSE 70-270, 70-290 6

Backup and Restore Concepts

• One primary duty of administrator is to ensure availability of data– Backups must be made regularly

• Amount of data that must be backed up varies by organization– Biggest factor determining backup hardware and

software needed is usually the amount of user and application data on network systems

Guide to MCSE 70-270, 70-290 7

Backup and Restore Concepts (continued)

• Members of following local groups can back up any files and folders Windows Server 2003 or XP Professional system:– Administrators– Backup Operators– Server Operators

• Otherwise, users must own file or have Read, Read & Execute, Modify, or Full Control permissions to it in order to back it up

Guide to MCSE 70-270, 70-290 8

Backup and Restore Concepts (continued)

• Two main rights that affect being able to back up and restore files: – Back up files and directories – Restore files and directories– If granted in a GPO applied to the Domain

Controller’s OU, apply to all domain systems• Can also apply locally or in a GPO

• Archive attribute set on files to determine whether contents have changed since last backup

Guide to MCSE 70-270, 70-290 9

Backup and Restore Concepts (continued)

Figure 15-2: The Back up files and directories Properties dialog box

Guide to MCSE 70-270, 70-290 10

Backup and Restore Concepts (continued)

Figure 15-3: The Backup Job Information dialog box

Guide to MCSE 70-270, 70-290 11

Backup Types

• Normal backup: Backs up all selected files and folders and clears the archive attribute on these files and folders– Most common and default backup type– Can be inefficient

• Incremental backup: Backs up files that have changed since last normal or incremental backup– Clears archive attribute– Reduce size of backup jobs– More involved restore process

Guide to MCSE 70-270, 70-290 12

Backup Types (continued)

Figure 15-4: Incremental backup and restore operations

Guide to MCSE 70-270, 70-290 13

Backup Types (continued)

• Differential backup: Similar to incremental backup, but does not clear archive bit– Reduces backup size

• Larger than incremental backup

– Less involved restore process than incremental

• Daily backup: Backs up selected files or folders created or changed on day the backup takes place

• Copy backup: Same as normal backup, but does not clear archive bits

Guide to MCSE 70-270, 70-290 14

Backup Types (continued)

Figure 15-5: Differential backup and restore operations

Guide to MCSE 70-270, 70-290 15

Using the Backup Utility

• Backs up critical data and OS file

• Two modes: Wizard and Advanced

• Activity 15-1: Backing Up Files and Folders with the Backup Utility– Objective: Back up files and folders using the

Windows Backup utility

• Activity 15-2: Restoring Files and Folders with the Backup Utility– Objective: Restore files and folders using the

Backup utility

Guide to MCSE 70-270, 70-290 16

Using the Backup Utility (continued)

Figure 15-7: The Backup utility in Advanced mode

Guide to MCSE 70-270, 70-290 17

Using the Backup Utility (continued)

Figure 15-11: The Restore and Manage Media tab

Guide to MCSE 70-270, 70-290 18

Scheduling Backups

Figure 15-12: Scheduling backups

Guide to MCSE 70-270, 70-290 19

Scheduling Backups (continued)

• Activity 15-3: Scheduling Backup Operations with the Backup Utility– Objective: Schedule a backup with the Backup

utility

Guide to MCSE 70-270, 70-290 20

Operating System Backup and Recovery: Registry Fault Tolerance

• Registry’s fault tolerance sustained by its structure, memory residence, and transaction logs– Ensures all changes or operations performed on

Registry either succeed or fail

• Changes to Registry made permanent only when the files containing the Registry keys copied back to hard drive– Flush

• Transaction logs: Files in which system records edits, changes, and alterations to the Registry

Guide to MCSE 70-270, 70-290 21

Operating System Backup and Recovery: Registry Fault Tolerance

(continued)• Steps in a flush:

– Alterations to a key appended to key’s transaction log file

– Key file marked as being in transition– Key file updated with new data from memory– Key file marked as complete

• Windows updates SYSTEM subkey and System.alt file separately from the flush

Guide to MCSE 70-270, 70-290 22

Operating System Backup and Recovery: Registry Fault Tolerance

(continued)• Several ways to create reliable Registry backups:

– Windows backup applications – Regedit– Manually copy %systemroot%\System32\Config and

%systemroot%\Repair directories– Microsoft Windows XP Professional or Windows

Server 2003 Resource Kit tools

• Activity 15-4: Backing Up the Registry– Objective: Use the Regedit application to back up a

portion of the Registry

Guide to MCSE 70-270, 70-290 23

Operating System Backup and Recovery: Registry Fault Tolerance

(continued)• Several options for restoring Registry, depending

on backup method:– Last Known Good Configuration: State of Registry at

last successful user logon– Restore Registry in part or whole from backup– Restart system after restoration

• Activity 15-5: Restoring the Registry– Objective: Use Regedit to restore all or a portion of

the Registry

Guide to MCSE 70-270, 70-290 24

Backing Up and Restoring System State Data

• System State: Data the Windows OS uses to store its current configuration– Can use Backup utility to back up System State

• System State backup includes:– Registry– COM+ Class Registration database– Boot files– System files– Certificate Services database– Active Directory

Guide to MCSE 70-270, 70-290 25

Backing Up and Restoring System State Data (continued)

• System State backup includes (continued):– Sysvol directory– Cluster Service– IIS metabase

• Restoring a portion of the AD tree requires special steps– Performing an authoritative restore

• Activity 15-6: Backing Up System State Data– Objective: Back up the System State data on a

Windows Server 2003 domain controller

Guide to MCSE 70-270, 70-290 26

Shadow Copies of Shared Folders

• Feature designed to make it simple for users to recover previous versions of files stored in shared folders– Without need for intervention from administrator– Not available on Windows XP Professional

• Enabling on Windows Server 2003 allows you to:– Restore files they accidentally delete– Recover previous versions of files when necessary– Compare current version of a file to a previous

version

Guide to MCSE 70-270, 70-290 27

Shadow Copies of Shared Folders (continued)

Figure 15-14: The Shadow Copies tab

Guide to MCSE 70-270, 70-290 28

Shadow Copies of Shared Folders (continued)

• Periodically creates shadow copies of all files stored in shared folders on a volume– By default, uses 10% of available disk space on a

volume for storing shadow copies

• Activity 15-7: Enabling and Configuring Shadow Copies of Shared Folders– Objective: Enable and configure the Shadow

Copies of Shared Folders feature for a selected volume

Guide to MCSE 70-270, 70-290 29

Previous Versions Client

• Required software for network users to access previous versions of files via the Shadow Copies of Shared Folders feature

• Activity 15-8: Installing and Using the Previous Versions Client– Objective: Install and use the Previous Versions

Client, and then view and restore a previous copy of a file

Guide to MCSE 70-270, 70-290 30

Previous Versions Client (continued)

Figure 15-16: The Previous Versions tab

Guide to MCSE 70-270, 70-290 31

Automated System Recovery

• Used to restore system configuration settings – If system cannot be repaired with safe-mode startup

options or Last Known Good Configuration

• Consists of two elements:– ASR backup

• Accessed via Backup utility

– Disk containing information about backup, disk configuration, and restore method

• Only used to back up and restore system configuration files

Guide to MCSE 70-270, 70-290 32

Automated System Recovery (continued)

Figure 15-17: The Backup Destination window

Guide to MCSE 70-270, 70-290 33

Advanced Startup Options

Table 15-1: Advanced startup options

Guide to MCSE 70-270, 70-290 34

Advanced Startup Options (continued)

• Activity 15-9: Viewing and Testing Advanced Startup Options– Objective: View and test Windows Server 2003

advanced startup options

Table 15-1 (continued): Advanced startup options

Guide to MCSE 70-270, 70-290 35

Last Known Good Configuration

• Last Known Good Configuration (LKGC): Enables you to recover system from failed driver and Registry changes– Stored in Registry

• If LKGC fails to restore system, two options:– Use backup software to restore Registry files– Reinstall Windows

• Activity 15-10: Testing the Last Known Good Configuration– Objective: Test the Last Known Good Configuration

advanced startup option

Guide to MCSE 70-270, 70-290 36

The Recovery Console

• Advanced tool that can be used to access hard drive– Start and stop services– Format drives– Read and write data on a local hard drive– Copy files from floppy disk or CD to local hard drive– Perform administrative tasks

Guide to MCSE 70-270, 70-290 37

Installing the Recovery Console

• Two ways to start Recovery Console – Run from Windows CD– Install on computer permanently

• Issue the Winnt32.exe /cmdcons command from I386 folder of Windows CD

• After installed, displayed as option in list of available OSs during initial boot process

• Recovery Console commands:– Copy– Disable

Guide to MCSE 70-270, 70-290 38

Installing the Recovery Console (continued)

• Recovery Console commands (continued):– Enable– Exit– Fixboot– Fixmbr– Listsvc

• Activity 15-11: Installing and Using the Recovery Console– Objective: Install and use the Recovery Console

Guide to MCSE 70-270, 70-290 39

Installing the Recovery Console (continued)

Figure 15-21: Viewing the results of the Listsvc command

Guide to MCSE 70-270, 70-290 40

Summary

• Windows Server 2003 and XP include a variety of tools and utilities to restore a server or desktop computer to a previous configuration, undo configuration changes that cause problems, and back up and restore OS, application, and user data files

• To ensure that OS, application, and user data files are not lost in a server failure or an accidental deletion, critical files and folders can be backed up and restored with the Backup utility

Guide to MCSE 70-270, 70-290 41

Summary (continued)

• The Backup utility supports five different types of backups: normal, incremental, differential, copy, and daily backups

• The Backup utility enables you to back up this information as a single element known as System State data

• Shadow Copies of Shared Folders is a new feature in Windows Server 2003 that allows an administrator to make previous versions of files available to users for the purpose of restoring a previous version, restoring a file that has been accidentally deleted, or comparing versions of files

Guide to MCSE 70-270, 70-290 42

Summary (continued)

• Registry backups can be made with the Windows Backup or Restore Wizard, the Regedit program, or the Regbackup.exe program from the Windows Resource Kit

• Automated System Recovery (ASR) allows an administrator to quickly recover from a server failure by storing server configuration information on floppy disks

Guide to MCSE 70-270, 70-290 43

Summary (continued)

• Windows supports a variety of advanced startup options, such as Safe Mode and Last Known Good Configuration, for attempting to boot a server if the normal boot process doesn’t function correctly

• The Windows Recovery Console gives administrators an alternate environment into which a system can be booted to make configuration changes if necessary