Re: [Bacula-users] Windows File Daemon: "VSS" or "System State" or both

A VSS backup and system state are *not* equivalent. In my mind, trying to back up Windows with plain VSS snapshots is not much better than not having any backups.

Conceptually, the system state backup is two things: a predefined file set, and a mechanism to do snapshot it. But that's only the top of the ice berg; the devil is in the detail.

First of all, VSS applies only to one drive. The system state can extend over several drives (most commonly if you chose to follow Microsoft's recommendations and put the log files for the various database on a different physical drive from the database itself).

Second, there is no guarantee that restoring Windows in bits and pieces will work. When restoring the registry, you may end up with something that doesn't match any Windows updates made since the backup was taken. Basically, if you do a VSS snapshot to back up those things, you are manually redoing what Microsoft already did for you, and then you hope that you selected the right files so that a restore will later work. Sometimes it does, sometimes it doesn't

And in any case - how are you going to restore just the registry? You can't do it from within Windows, because the files are always in use. So you have to use something like BartPE. What about file permissions for the registry files? The system state does allof that for you.

Active Directory is special even within the system state. You can restore it in three different ways:

- Simply restoring the system state. That is usually recommended. It will give you a non-authoritative version of AD. It is joined to the domain, but the data is not accurate. It will then try and replicate the data from other domain controllers. The end result is that AD is completely up to date with the latest changes.

- Restoring the system state in directory restore mode. That will give you an authoritative version of AD. This will roll back AD to the time of the backup. Only do it if you don't have other AD controllers to replicate data from.

- demote the DC, remove it from the domain, rejoin and then re-promote it. This is necessary if you had to seize any of the FSMO roles onto another AD controller.

- rebuild the domain from scratch.

-----Original message-----

From: Simone Caronni <negativo17 AT gmail DOT com>
Sent: Wed 25-01-2012 07:38
Subject: Re: [Bacula-users] Windows File Daemon: "VSS" or "System State" or both ?
To: bacula-users <bacula-users AT lists.sourceforge DOT net>;
Hello,

I used to do one of the following depending on whether is Windows 2003
or 2008+ to have some additional protection:

ClientRunBeforeJob = "start /w ntbackup backup systemstate /F
C:\\SystemState.bkf"
ClientRunAfterJob = "del C:\\SystemState.bkf"

ClientRunBeforeJob = "start /w wbadmin start systemstatebackup
-backuptarget:D: -quiet"
ClientRunAfterJob = "rmdir /s /q D:\\WindowsImageBackup"

But if you run with VSS enabled you're able to back up also registry
and open files, so unless you have a strict requirement to restore
only a part of the "System State" I suggest you to use only VSS.

I made many restore of complete Windows systems with BartPE and the
bacula plugin. The only thing you will see is "shutdown unexpected"
when you reboot the restored system.

>From my experiences, Active Directory domain controllers are a LOT
easier and faster to be replicated from another instance than to be
restored from scratch.

Regards,
--Simone

On 25 January 2012 11:48, Hugo Letemplier <hugo.let.35 AT gmail DOT com> wrote:
> Hello,
>
> I am backing up Windows servers.
>
> I have a doubt on my file set. I run backups with VSS enabled and I
> run NTBackup to make a dump of the System State.
>
> This is recommended on the Bacula documentation but with both the VSS
> enabled and the NTBackup System state backup, have we got a redundancy
> of information ?
>
> Thank you
>
> Hugo
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> Bacula-users mailing list
> Bacula-users AT lists.sourceforge DOT net
> https://lists.sourceforge.net/lists/listinfo/bacula-users

--
You cannot discover new oceans unless you have the courage to lose
sight of the shore (R. W. Emerson).

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users

------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2

_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users