Module 7: Managing Disaster Recovery

Overview
Preparing for Disaster Recovery Backing Up Data Scheduling Backup Jobs Restoring Data Configuring Shadow Copies Recovering from Server Failure Selecting Disaster Recovery Methods

Lesson: Preparing for Disaster Recovery

What Is Disaster Recovery? Guidelines for Preparing for Disaster Recovery

What Is Disaster Recovery?

A disaster is a sudden catastrophic loss of data Disaster recovery is the process of resuming normal business operations as quickly as possible after the disaster is over Disaster recovery process includes: Executing a written disaster recovery plan Replacing any damaged hardware Restoring data Testing all hardware and software before resuming operations

Guidelines for Preparing for Disaster Recovery

Create a disaster recovery plan for performing regular backup operations Test your backup files and your backup plan Keep two sets of backed-up files: one on-site, for accessibility, and one off-site, for security Create a redundant copy of System State data Install the Recovery Console as a startup option Keep the installation CD where you can easily find it

Lesson: Backing Up Data

Overview of Backing Up Data Who Can Back Up Data? What Is System State Data? What Is the Backup Utility? Types of Backup What Is ntbackup? What Is an Automated System Recovery Set? How to Back Up Data

Overview of Backing Up Data

Backing up produces copies of data files and folders, stored on alternate media Backing up the data on server and client computer hard disks prevents data loss Before backing up, decide: Which files to back up if you cannot get along without it, back it up How frequently to back up Whether to perform a network backup weigh the advantages and disadvantages of a network backup
Back Up Data

Who Can Back Up Data?

You must have certain permissions or user rights Only administrators, backup operators, and server operator groups are allowed to back up data by default on local servers Or you must be the owner of the files and folders you want to back up Or you must have one or more of these permissions: Read, Read and execute, Modify, or Full Control You cannot back up your files if there are disk quota restrictions Access to backup files can also be restricted For security, backup and restore rights can be segregated into two groups Backup files and directories GPO located in Computer Configuration

What Is System State Data?

The computer uses System State data files to load, configure, and run the operating system All System State data relevant to your server is backed up You can back up the following system components:
Component
Registry Boot files, including the system files Certificate Services database Active Directory directory service SYSVOL Directory Cluster service information IIS metadirectory System files that are under Windows File Protection

When this component is included in System State

Always Always If it is a Certificate Services Server If it is a Domain If it is a Domain Controller If it is within a cluster If it is installed Always

What Is the Backup Utility?

Using the Backup utility, you can: Back up files and folders Back up System State data Schedule a backup Using volume shadow copy in Backup, you can: Create shadow copy backups of volumes including all open files Ensure that files that changed during backup process are copied correctly You can back up various types of media You must have appropriate permissions and user rights
Backup Data

Corrupted Data

Restore Data

Types of Backup
Backup types define what data is backed up Backup types use archive attributes that show the file has changed since the last backup Select a backup rotation scheme
Type Normal or Full Copy Differential Actions performed Selected files and folders Selected files and folders Selected files and folders that changed since the last normal or incremental backup Selected files and folders that changed since the last backup Selected files and folders that changed during the day Clears Archive attribute Yes No No

Incremental Daily

Yes No

What Is ntbackup?
Use ntbackup command line tool to: Back up System State data Back up files to a file or a tape Run batch files Important limitations using batch files You can back up entire folders only You cannot use wildcard characters

What Is an Automated System Recovery Set?

A recovery option in the Backup utility that contains two parts: ASR backup and ASR restore Can back up the operating system Does not include data files Creates a floppy disk, which contains information about: Backup location data Disk configurations (including basic and dynamic volumes) How to accomplish a restore procedure

Choose the All information on this computer option, it will back up all data including System State Data

How to Back Up Data

Your instructor will demonstrate how to:

Back up data files by using the Backup utility Back up System State data by using the Backup utility Back up the operating system and data files by using the Backup utility Back up by using ASR Back up System State data by using ntbackup

Practice: Backing Up Data

In this practice, you will back up data files and System State data by using: The Backup Utility ntbackup

Lesson: Scheduling Backup Jobs

What Is a Scheduled Backup Job? What Are Scheduled Backup Options? How to Schedule a Backup Job Best Practices for Backup

What Is a Scheduled Backup Job?

You can schedule a backup job using the Backup or Restore Wizard Use to schedule backups at a specific times or at regular intervals

What Are Scheduled Backup Options?

Schedule options
Once Daily Weekly Monthly At system startup At logon When idle

Executes the job:

Once, at a specific time on a specific date At the specified time each day At the specified time on each of the specified days of the week At the specified time once a month The next time the system is started The next time the job owner logs on When the system has been idle for a specified number of minutes

How to Schedule a Backup Job

Your instructor will demonstrate how to:

Schedule a Backup Job by Using Backup Wizard Schedule a Backup Job by Using ntbackup

Practice: Scheduling a Backup Job

In this practice, you will schedule a backup job using Windows Backup Wizard

Best Practices for Backup

Develop backup and restore strategies and test them Train appropriate personnel Back up the data on all volumes and the System State data at the same time Create an Automated System Recovery Backup set Make copies Perform trial restorations Secure media
Use the default Volume Shadow Copy backup

Lesson: Restoring Data

What Is Restoring Data? How to Restore Files or Folders by Using Backup How to Recover from a Server Failure by Using ASR How to Restore System State Data Checklist for Restoring Data

What Is Restoring Data?

Backup Restore feature Restore files and folders Restore FAT or NTFS files Restore the System State data ASR Restore Reads the disk configurations from the floppy disk Restores the entire disk signatures, volumes and partitions on the disks required to boot up at a minimum Installs a simple installation of Windows Starts to restore from backup

Restore Data

How to Restore Files or Folders by Using Backup

Your instructor will demonstrate how to restore files or folders by using Backup

How to Recover from a Server Failure by Using ASR

Your instructor will review how to recover from a server failure by using ASR

How to Restore System State Data

Your instructor will review how to restore System State data

Practice: Restoring Data

In this practice, you will restore data from a backup file

Checklist for Restoring Data

Develop restoration strategies and test them Be sure that all appropriate systems administrators have the proper permissions set Verify that you can connect to all shared folders on other computers that need to be restored Ensure you have access to network based media and to the server where the data will be restored To restore files manually, use the Backup utility and select the appropriate files or folders If you are restoring an Encrypted File System (EFS) on a system where the private key for the encrypted data is inaccessible, send the files to a designated recovery agent

Lesson: Configuring Shadow Copies

What Are Shadow Copies? How to Configure Shadow Copies on the Server Previous Versions Client Software for Shadow Copies How to View Previous Versions of Client Software Shadow Copy Scheduling How to Schedule Shadow Copies What Is Restoring Shadow Copies? How to Restore a Previous Version Best Practices for Using Shadow Copies

What Are Shadow Copies?

Views the read-only contents of network folders as they existed at various points of time Use shadow copies to: Recover files that were accidentally deleted Recover files that were accidentally overwritten Allow version-checking while working on documents Is enabled on a per volume basis, not on specific shares Is not a replacement for regular backups When storage limits are reached, the oldest shadow copy is deleted and cannot be retrieved To change the storage volume, delete the shadow copies first

How to Configure Shadow Copies on the Server

Your instructor will demonstrate how to configure shadow copies on the server

Previous Versions Client Software for Shadow Copies

Previous Versions client software for Shadow Copies of Shared Folders is installed on the server %systemroot%\system32\clients\twclient\x86 directory Place the client software on a shared resource and send an e-mail with instructions on how to download and use Client view of shadow copies Use if users work with files that are located in shared folders on your network Use to access previous versions of files

How to View Previous Versions of Client Software

Your instructor will demonstrate how to:
Install the client software for shadow copies View Previous Versions

Shadow Copy Scheduling

Default shadow copy schedule is 7:00 am and noon Create a shadow copy schedule based on: Do most workers work in the same time zone? Does your organization need more than the default of two shadow copies daily? How often can additional copies be made before additional storage will be needed? Deploy a schedule and test it on a small group

How to Schedule Shadow Copies

Your instructor will demonstrate how to schedule shadow copies

What Is Restoring Shadow Copies?

Shadow copies are restored using previous versions of files and folders If
No previous versions are listed Restoring a previous version of a folder Restoring a file The Previous Versions tab does not appear in Properties Copying a file

Then
The file has not changed since the oldest copy was made Shadow copies deletes the current version File permissions are not changed Shadow copies may not be enabled File permissions are set to default

How to Restore a Previous Version

Your instructor will demonstrate how to restore a previous version

Practice: Configuring Shadow Copies

In this practice, you will: Configure shadow copies Install Previous Versions client software Restore previous versions

Best Practices for Using Shadow Copies

Consider the work patterns of users before enabling shadow copies and setting scheduling options Do not enable shadow copies on volumes that use mount points Do not enable shadow copies on dual-boot computers Select a separate volume on another disk as the storage area for shadow copies Use Windows Backup to perform regular backups of your file server Do not schedule copies to occur more often than once per hour Before deleting a volume that is being shadow copied, delete the scheduled task for creating shadow copies

Lesson: Recovering from Server Failure

What Is Safe Mode? What Are Safe Mode Options? What Is Last Known Good Configuration? How to Start a System Using Safe Mode and Last Known Good Configuration What Is Recovery Console? How to Use the Recovery Console What Is a Windows Startup Disk? How Startup Files Function How to Create a Windows Startup Disk

What Is Safe Mode?

A Windows Server 2003 tool to use if your server does not start Uses default settings: VGA mode Mouse driver No network connections Minimum device drivers required to start Windows You can use safe mode to: Change server settings Diagnose problems Remove newly installed software Install a service pack or hotfix Reinstall the operating system

What Are Safe Mode Options?

Option
Safe Mode Safe Mode with Networking Safe Mode with Command Prompt

Description
Starts with only basic files and drivers Starts with only basic files and drivers, plus network connections

Use
When you suspect a recently installed application is causing the problem When you need to verify that the networking subsystem is operational

Starts with only basic files and drivers. After you log on, When you need to use the command prompt is command-line troubleshooting displayed instead of the tools Windows desktop, Start menu, and Taskbar

What Is Last Known Good Configuration?

Starts the computer using the registry information and drivers that Windows saved at the last successful logon Removes any device drivers or systems settings changed since since the last successful logon Provides a way to recover from problems such as a newly configured driver that may be incorrect for your hardware Does not solve problems caused by corrupted or missing drivers or files Use only in cases of incorrect configuration

How to Start a System Using Safe Mode and Last Known Good Configuration

Your instructor will demonstrate how to:

Start a system using Safe Mode Start a system using Last Known Good Configuration

What Is the Recovery Console?

Starts a command-line console on a system in which a software problem is preventing the system from starting Accesses drives on your computer With Recovery Console, you can: Enable or disable device drivers or services Copy files from the installation CD for the operating system, or copy files from other removable media Create a new boot sector and new master boot record (MBR)

How to Use the Recovery Console

Your instructor will demonstrate how to:

Install the Recovery Console Start and use the Recovery Console from the Windows Server 2003 Setup CD Start and use the Recovery Console from the boot loader menu on the server

What Is a Windows Startup Disk?

Allows you to access a disk drive with a faulty boot sequence, for example: Damaged boot sector Damaged master boot record (MBR) Virus infections Missing or damaged Ntldr or Ntdetect.com files Incorrect Ntbootdd.sys driver To boot from the shadow of a broken mirror Windows Startup disk must include Ntldr Ntdetect.com Boot.ini

How Boot Files Function

BIOS reads the contents 1 of the MBR Boot sector program reads 2 the root directory and loads Windows 2003 Loader NTLDR loads basic memory 3 configuration and switches to 32-bit mode (protected mode) NTLDR reads boot.ini 4 and runs OS

NTLDR switches back to 165 bit mode, loads ntdetect.com NTLDR loads into memory, 6 reads the resource map that NTDETECT builds NTLDR switches system back

7 to protected mode

NTLDR starts run process for 8 NTOSKRNL

How to Create a Windows Startup Disk

Your instructor will demonstrate how to:

Create a Windows startup disk Back up Windows Server 2003 boot files to the Windows startup disk

Practice: Recovering from Server Failure

In this practice, you will recover from a server failure using: Safe Mode Last Known Good Configuration

Lesson: Selecting Disaster Recovery Methods

What Are Server Disaster Recovery Tools?

What Are Server Disaster Recovery Tools?

Disaster Recovery Tool Safe Mode Last Known Good Backup Recovery Console Automated System Recovery (ASR)

Function Use when a problem prevents starting Windows Server 2003 normally Use only in cases of incorrect configuration Use to create a duplicate copy of data on your hard drive and then archive the data on another storage device Use if you cannot fix the problems by using one of the startup methods Use when restoring data from backup

Lab A: Managing Disaster Recovery

In this lab, you will: Install the Recovery Console Back up System State data Create a Windows startup disk Recover from a corrupt registry by using Last Known Good Recover from a corrupt registry by restoring System State data Recover from a corrupt boot file by using the Windows startup disk