Section 2.6: Backing Up and Restoring Data

Performing regular back ups of the data on hard disks prevents data loss due to disk drive failures, power outages, virus infections, and other such incidents. If data loss occurs, and you have performed regular backup jobs, you can restore the lost data.

Performing regular back ups of the data on hard disks prevents data loss due to disk drive failures, power outages, virus infections, and other such incidents. If data loss occurs, and you have performed regular backup jobs, you can restore the lost data.

Windows Server 2003 provides Backup And Recovery Tools. This includes the Backup Wizard, which you can use to easily back up and restore data. To launch Backup, do one of the following:

• Click on the START button

• Point to PROGRAMS

• Point to ACCESSORIES

• Point to SYSTEM TOOLS

• Then click BACKUP

or

• Click on the START button

• Click RUN

• Type ntbackup in the text box

• Then click OK

You can use Backup to back up data manually or you can schedule regular unattended backup jobs. You can back up data to a file or to a tape. Files can be stored on hard disks, removable disks, and recordable compact discs and optical drives.

To successfully back up and restore data on a Windows Server 2003 computer, you must have the appropriate permissions and user rights.

All users can back up their own files and folders, and files for which they have the Read, Read & Execute, Modify, or Full Control permission.

All users can restore files and folders for which they have the Write, Modify, or Full Control permission.

By default, members of the Administrators and Backup Operators groups have the Backup Files and Directories and the Restore Files and Directories user rights and can therefore back up and restore all files regardless of the assigned permissions.

2.6.1: Backup Types

Backup Wizard provides five types of backup that define which data is backed up. Some backup types use backup markers, also known as archive bits, which mark a file as having changed. When a file changes, an attribute is set on the file that indicates that the file has changed since the last backup. When you back up the file, this clears or resets the attribute.

• Normal, which backs up all selected files and folders and does not rely on markers to determine which files to back up. During a normal backup, any existing marks are cleared and each file is marked as having been backed up. Normal backups speed up the restore process because the as the files are the most current therefore you do not need to restore multiple backup jobs.

• Copy, which backs up all selected files and folders without looking for or clearing markers.

• Incremental, which only backs up selected files and folders that have a marker and then clears the markers. Thus, if you did two incremental backups in a row on a file and nothing changed in the file, the file would not be backed up the second time.

• Differential, which only backs up selected files and folders that have a marker but does not clear markers. Thus if you did two differential backups in a row on a file and nothing changed in the file, the entire file would be backed up each time.

• Daily, which backs up all selected files and folders that have changed during the day and does not look for or clear markers.

2.6.2: Backing Up System State Data

You can use the Backup utility to back up the system state data. The system state data includes: the Registry; Component Services Class Registration database; System startup files; Certificate Services database; Active Directory directory services; and the Sysvol folder.

To back up the system state data on a local computer, do one of the following:

• In the Backup wizard, on the What To Back Up page, click Only Back Up The System State Data.

• In the Backup wizard, on the Items To Back Up page, expand My Computer, and then select the check box to the left of System State.

• In the Backup utility, on the Backup tab, expand My Computer, and then select the System State check box.

2.6.3: Restoring Files and Folders

You can use the Backup utility in Windows Server 2003 to restore files and folders. The Backup utility includes a Restore wizard that steps you through the entire restore process. However, you can also restore files and folders without using the wizard.

To restore files and folders without using the wizard, open the Backup utility, and specify the folders or files to restore; a restore location; and the Restore options, such as whether to replace existing files with backup files.

Note: To avoid data loss and to preserve file and folder features, such as encryption and permissions, you should restore data that is archived from a Windows 2000 or Windows Server 2003 NTFS volume to another Windows 2000 or Windows Server 2003 NTFS volume. Restoring the data to a FAT volume or to a Windows NT 4.0 NTFS volume might result in the loss of access permissions, Encrypting File System (EFS) settings, disk quota information, mounted drive information, or Remote Storage information.

2.6.4: Restoring Active Directory Directory Services

You can use the Backup utility to restore Active Directory directory services during the process of replacing a failed domain controller, to repair a damaged Active Directory database, or to recover one or more objects that are accidentally deleted from Active Directory directory services.

2.6.4.1: Failed Domain Controllers

If a domain controller fails completely, you must first restart the computer and make sure Windows Server 2003 is running. Then you can use the Backup utility to restore the latest version of the system state data, which includes Active Directory directory services.

After you have restored Active Directory directory services, Windows Server 2003 automatically performs a consistency check on the Active Directory database and re-indexes it. Windows Server 2003 then updates Active Directory directory services and the File Replication Service with data from their replication partners.

2.6.4.2: Damaged Active Directory Databases

If the operating system on a domain controller is functioning normally, but the Active Directory database is damaged, you must restart the computer, select the Directory Services Restore Mode advanced startup option, and then use the Backup utility to restore the system state data.

After you have restored the Active Directory database, restart the computer, and Windows Server 2003 will automatically re-index the Active Directory database and update Active Directory directory services and the File Replication Service.

2.6.4.3: Authoritative Restores

If you restore the most recent copy of the Active Directory database that contains the deleted objects, those objects will be deleted when replication occurs because the objects are marked for deletion in the replicas of the database. To prevent this from occurring, you can perform an authoritative restore. When you restore an object authoritatively, it persists after replication even though it is marked for deletion in the replicas of the database. To perform an authoritative restore, do the following:

• Restart the computer

• During the boot process, press F8 to access the Advanced Boot Options menu

• Select the Directory Services Restore Mode from the Windows Server 2003 Advanced Options menu

• Once the computer has booted into Directory Services Restore Mode, restore the system state data from the most recent backup that contains the objects that you want to recover

• Once the restore is complete, run NtdsutiLexe

• Type authoritative restore at the command prompt

• Type restore subtree object_name, where object_name is the distinguished name of the object, at the authoritative restore prompt

• Exit Ntdsutil by typing quit at the prompt

• Then restart the computer