Planning A Backup And Restoration Of Files For Disaster Recovery

The Backup utility creates a copy of data on a hard disk of a computer and archives data on another storage media. Any storage media such as removable disks, tapes, and logical drives can be used as a backup storage.

While taking a backup of files, the Backup utility creates a volume shadow copy of the data to create an accurate copy of the contents. It includes any open files or files that are being used by the system. Users can continue to access the system while the Backup utility is running without the risk of losing data.

Volume Shadow Copy

Backup provides a feature of taking a backup of files that are opened by a user or system. This feature is known as volume shadow copy. Volume shadow copy makes a duplicate copy of all files at the start of the backup process. In this way, files that have changed during the backup process are copied correctly. Due to this feature, applications can continue writing data to the volume during a backup operation, and backups can be scheduled at any time without locking out users.

Types of Backups

The Windows Backup utility provides various types of backups. While planning for a backup strategy, it is important to choose an appropriate type or combination of different types of backups. The backup type determines which files are transferred to the destination media.

Each backup type relates to an attribute maintained by every file known as archive (A). The archive attribute is set when a file is created or changed. When an archive attribute is set, it means that the backup of this file has not been taken or it is due.

Note: When it is said that "The file is marked as backup", it means that the archive attribute of the file has been cleared.

Normal Backups

When an administrator chooses to use a normal backup, all selected files and folders are backed up and the archive attribute of all files are cleared. A normal backup does not use the archive attribute to determine which files to back up. A normal backup is used as the first step of any backup plan. It is used with the combination of other backup types for planning a backup strategy of an organization. Normal backups are the most time-consuming and are resource hungry. Restoration from a normal backup is more efficient than other types of backups.

Incremental Backups

An incremental backup backs up files that are created or changed since the last normal or incremental backup. It takes the backup of files of which the archive attribute is set. After taking a backup, it clears the archive attribute of files. An incremental backup is the fastest backup process. Restoring data from an incremental backup requires the last normal backup and all subsequent incremental backups. Incremental backups must be restored in the same order as they were created.

Note: If any media in the incremental backup set is damaged or data becomes corrupt, the data backed up after corruption cannot be restored.

Differential Backups

Differential backup backs up files that are created or changed since the last normal backup. It does not clear the archive attribute of files after taking a backup. The restoration of files from a differential backup is more efficient than an incremental backup.

Copy Backups

A copy backup copies all selected files and folders. It neither uses nor clears the archive attribute of the files. It is generally not a part of a planned scheduled backup.

Daily Backups

A daily backup backs up all selected files and folders that have changed during the day. It backs up data by using the modified date of the files. It neither uses nor clears the archive attribute of the files.

Combining backup types

The easiest backup plan is to take a normal backup every night. A normal backup every night ensures that the data is restored from a single job the next day. Although the restoration of data from a normal backup is easy, taking a backup is time consuming. Hence, an administrator is required to make an optimal backup plan. An administrator must consider the following points before creating a backup plan:

·The time involved in taking the backup.

·The size of the backup job.

·The time required to restore a system in the event of a system failure.

The most common solutions for the needs of different organizations include the combination of normal, differential, and incremental backups.

Combination of Normal and Differential Backups

An administrator can use a combination of a normal backup and a differential backup to save time in taking a backup as well as for a restoration of data. In this plan, a normal backup can be taken on Sunday, and differential backups can be taken on Monday through Friday every night. If data becomes corrupt at any time, only a normal and last differential backup are required to be restored. Although this combination is easier and takes lesser time for restoration, it takes more time to take backup if data changes frequently.

Combination of Normal and Incremental Backups

A combination of normal and incremental backups can be used to save more time for taking backups. In this plan, a normal backup is taken on Sunday and incremental backups on Monday through Friday every night. If data becomes corrupt at any time, a normal and all incremental backups till date are required to be restored.

Backing up a System State Data

System State Data

System State data contains critical elements of the Windows 2000 and Windows Server 2003 operating systems. Following are the files included in the System State data:

·Boot files, including the system files and all files protected by Windows File Protection (WFP)

·Active Directory (on domain controller only)

·SYSVOL (on domain controller only)

·Certificate Services (on certification authority only)

·Cluster database (on cluster node only)

·Registry

·IIS metabase

·Performance counter configuration information

·Component Services Class registration database

For backing up the System State of a computer, the System State node is included as a part of the backup selection in the Backup utility.

Note: On domain controllers, System State can be restored only by restarting the domain controller in Directory Services Restore Mode. NTDSUTIL is used to recover deleted objects in Active Directory.

System Recovery

In the event of a system failure, the recovery of the system is difficult and tedious for administrators. Recovery involves reinstallation of the operating system, mounting and cataloging the backup tape, and then performing the full restore. To make this process easier, Windows provides a feature called Automated System Recovery (ASR). ASR is used to perform a restore of the System State data and services in the event of a major system failure. An ASR restore includes the configuration information for devices. ASR backs up the system data and local system partition.

How to create an ASR set?

Take the following steps to create an Automated System Recovery (ASR) set by using the Backup or Restore Wizard:

1.Run Backup from Start Menu > Programs > Accessories > System Tools > Backup.

2.In the welcome screen of the Backup or Restore Wizard, click the Advanced Mode link.

3.On the welcome page of the Advanced Mode of the Backup utility, choose the ASR Wizard option from the Tools menu.

4.In the welcome screen of the ASR Wizard, click the Next button.

5.On the Backup Destination page, specify the location of the backup, and click the Next button.

6.Click the Finish button.

Note: An ASR backup does not include folders and files.

Best practices for Backup

According to Microsoft, administrators should take the following steps to ensure the recovery in case of a system failure:

·Develop backup and restore strategies and test them.

·Train appropriate personnel.

·In a high-security network, ensure that only administrators are able to restore files.

·Back up all data on the system and boot volumes and the System State.

·Back up the data on all volumes and the System State data at the same time.

·Create an Automated System Recovery backup set.

·Create a backup log.

·Keep at least three copies of the media. Keep at least one copy off-site in a properly controlled environment.

·Perform trial restorations.

·Secure devices and media.

·Do not disable the default volume shadow copy backup method and revert to the pre-Windows Server 2003 backup method.

·Back up your server cluster effectively.

·Back up the cluster disks from each node.

About the Author:

uCertify was formed in 1996 with an aim to offer high quality educational training software and services in the field of information technology to its customers. uCertify provides exam preparation solutions for the certification exams of Microsoft, CIW, CompTIA, Oracle, Sun and other leading IT vendors. To know more about uCertify, please visit http://www.ucertify.com/

Choosing The Best File Recovery Solution

All file recovery solutions are not created equally. But, choosing one specific software or service company can be overwhelming from the sheer numbers available. For starters, why do some file recovery software cost as low as $29.99, while others range as much as $400? Before addressing these details, and how to choose the best file recovery solution for your situation, let's make sure your files have the best chance to be recovered.
Safety First...
If you are reading this article on the computer you are trying to recover files from, do the following steps immediately (Your computer is always running in the background, and could be overwriting the data you are trying to recover):
1. Close any important documents that are open.
2. Print this article to follow off-line.
3. Unplug your computer (Do not turn off your computer, unplug it now.).
Note: Unplugging the computer stops the computer from running all together. Turning off or shutting down your computer might make the computer go through a process that could overwrite data - your files.
What not to do...
1. Do not run the system recovery disk from the computer manufacturer. This software is designed to get your computer running again with no regard to your data. In other words, it is not designed as a file recovery solution. Just ask the manufacturer if there is a possibility that you could lose data. Yes, is always the answer.
2. Do not install file recovery software on the computer you are trying to recover files from, for this could overwrite the files you are trying to recover. You must have a secondary storage device (i.e. hard disk drive, USB device, etc.) to install the program and to recover the files.
Note to Advanced Users: Even if you are trying to recover a particular partition, and already have a separate partition to install the file recovery software on, do not do it. Since there is possible corruption within the file system at this point, you run the risk of overwritting the partition and files you are trying to recover during the installation process. Better safe than sorry. Install the program on a secondary drive.
File Recovery Software...
Which file recovery software you choose depends on what has happened:
1. Have you accidentally delete a file that you want back?
2. Have you lost a file, or found it damaged upon opening it?
3. When starting your computer, has it failed to boot to the desktop,
invoking a blue or black screen, or an error message (write that message down)?
Accidentally deleted files can usually be recovered by File Undelete software, which lucky for you is the cheapest solution at about $30 USD. If you cannot locate a file after running the program, the file system (where the files lie) may have been altered, deleted, or damaged. This means, File Undelete software cannot work, and you should use a "complete" file recovery product.
Lost or damaged files require a "complete" file recovery software, which usually costs about $100 USD. (Professional grade recovery software which include multiple recovery functions costs as much as $400). If you cannot locate a file after running the program, or if your computer failed to boot to the desktop, you may need File Recovery Services.
File Recovery Services...
A good rule of thumb at choosing a file recovery service company is, if they develop and sell file recovery software - not just sell them, they should have reliable in-lab services (After fifteen years of developing file recovery software, and knowing who is who in the industry, I can attest to this point). Also, full-scale recovery companies only do file recovery and computer forensics. So, ask a computer related question like, can you install a network with thirty computers? Yes means hang up the phone. Remember, you always get what you pay for and nobody works for free.
In conclusion, the saying in the industry is "file recovery is not, if it will happen, but when will it (and will you be prepared)." Prevention is the best solution. So, to ensure the safety of your files in the future (not to mention the hassle of having to go this process again) consistently do the following:

1. Back-up files daily to a secondary storage device, not on the main hard disk drive where you originally saved them.

2. Defrag your computer regularly. Doing so will increase the probability of a successful recovery if you ever encounter this problem again.

3. At least once a month confirm your back-up is working properly. This is a common problem.







You can find more written, audio and video information discussing the data recovery industry at ACR Data Recovery. Ken Roberts has been developing data recovery software and performing data recovery services worldwide for over 15 years.

File Recovery - The Solution To Sudden Data Loss

You will probably need the help of file recovery products at some point if you regularly use a computer or notebook. After all, just about everyone has made the honest mistake of deleting a file. But when you lose your data and your backup program fails, you need a file recovery solution to help you correct the situation fast.
4 data loss situations that software can address are...
- deleted, lost, damaged and corrupt files. Let's see what they mean and what you can do about your situation:
Recovering a deleted file
It's so easy to unintentionally delete a file. This recovery issue is one of the most common and is the easiest to resolve most of the time. Focus on the Undelete data recovery products - there are a lot to choose from, particularly in the Windows data recovery field.
Finding a lost file
A lost file could still exist even though you can't find it. A file could be deleted or lost due to a power outage, software application crash, virus attack, partition problem or an accidental format; a software crash; partition table problems; and the world-famous accidental format. There are several solutions to choose from, depending on what actually caused the problem. I'll explain...
File recovery products are more capable of solving your recovery problems than a basic undelete utility. However, both undelete and file recovery software are unable to recover data in cases where the file system has been altered. But data recovery software can. Most people think all of these products are the same because they address a similar issue, but they are not. The state of your file system will decide which data restore program you will need.
To makes matters more confusing: Even though a file recovery tool is limited in what it can accomplish as a stand alone product, when it is included as an operation in data recovery software, it recovers both problems (when the file system is ok or where it has been altered). So when you aren't sure which to use, go with the data recovery utility because it covers the whole gamut.
An added twist: If you still don't understand how to determine one software solution from the other, just remember that a file recovery tool is limited to what it can accomplish on its own. If it still feels like information overload or a lot of extra work, just work with data recovery software because it is the more powerful tool.
Could it be this simple?
Checking prices is the absolute simplest way to tell the difference between the different software programs. File recovery software and its sibling undelete programs will cost less than seventy-five dollars, while a full-on data recovery utility runs upward of eighty bucks - and sometimes in the hundreds.
Corrupt files
A corrupt file refers to a file that can be located, but it cannot or does not open correctly; as you open the file the content is unreadable. If you need to retrieve data from a corrupt file, you can start with any file recovery tool: if the file system is unchanged, any file recovery utility can get the job done. If that doesn't work, try a data recovery software program just like with lost files.
Repairing damaged files
You can open a damaged file, but you may not be able to read it well. Part of the text may be clear, but the rest of the file will not be legible. A situation like this needs a file repair utility to reconstruct the data. Make sure the software you are using state that it can actually repair a file, because file repair works differently than file recovery functions. Note that file repair programs are normally sold separately from file recovery utilities.
File recovery experts
Data recovery tools are not always the answer. There are some situations that just can't be repaired using the programs available on the market. If you experience a situation beyond the recovery abilities of an automated tool, you may need the services of a hard drive data recovery expert as the final way to recover your data. This is a more expensive option - however, even this file recovery solution is easier and cost-effective than recreating all the data.







Ken Roberts, co-founder at ACR Data Recovery, Inc., writes about and develops file recovery tools. When you need data recovery help, please contact him +1.800.444.3225.