13.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 13: Implementing Data and

13.1 © 2004 Pearson Education, Inc.

Exam 70-290 Managing and Maintaining

a Microsoft® Windows® Server 2003 Environment

Lesson 13: Implementing Data and System Recovery

Goals Understand the Windows Backup Utility

Schedule a backup

Restore system data

Understand fault tolerance in hard disk volumes

Restore your system using Safe Mode

Use the Last Known Good Configuration

Work with the Recovery Console

Implement Automated System Recovery

Configure the Volume Shadow Copy Service





Managing the backup process Determine the data to back up Have the necessary user rights Select the media to use Choose the backup type

(Skill 1)

Understanding the Windows Backup Utility





Categories of data stored on any computer System State data

Consists of several key components related to the operating system or applications

Loss of System State data can render a computer non-operational

User dataUser data can be the most important asset of an

organizationYou must protect it from losses due to viruses, disk

drive failures, or user deletion

(Skill 1)

Understanding the Windows Backup Utility (2)





Protecting data Safeguard data by creating backups (copies) of the files and

folders saved on network file servers or on a local computer A comprehensive backup plan allows the retrieval of lost or

damaged data Use the Windows Backup utility to perform backups and to

schedule backups to be performed at a specified date and time Use the Restore utility to retrieve lost data from the backup

copies An Automated System Recovery (ASR) is a backup of your

system configuration including critical system files and the Registry


(Skill 1)





Type of data to back up Before you perform a backup, you must decide whether you

want to back up user data, System State data, or both If you are backing up user data, you can either back up all

the files and folders on a computer or only specific files and folders

You back up the System State data so that you can restore the operating system to its original state in the event of a system failure


(Skill 1)





Working with System State data Perform a System State restore on a clean installation of the

operating system to recover all of the configuration changes Make frequent System State backups part of the backup

process because the System State changes occur when system components, such as the Registry, are modified

Using NtbackupYou cannot back up the System State data on a

remote computerYou cannot back up individual components of the

System State data as all of the components of the System State data are dependent on each other


(Skill 1)





Restoring data To restore a backed up file or folder, you must have the

appropriate user rights and permissions File or folder owners can restore the backup copy Other users can restore files or folders if they have Write, Modify,

or Full Control permissions Members of the local Administrators and Backup Operators

groups can restore any file or folder on the local computer Administrators and Backup Operators on the domain controller

have the Restore files and directories user right by default and can restore any backup file or folder on the domain


(Skill 1)





Backup types There are five different backup types from which you can

choose using the Backup Wizard or on the Backup Type tab in the Options dialog box

All are identified according to how they handle the archive attribute (archive bit) The archive attribute is a property for files and folders used to

identify them when they have changed When a file has changed, the archive attribute, which is actually

an attribute of the file header, is automatically selected Some backup types remove the archive attribute to mark files as

having been backed up, while others do not


(Skill 1)





Backup types Normal backup: The archive attribute is removed to denote

that the file has been backed up Copy backup: The archive attribute is not removed, it is

ignored, which creates a representation of your data at a particular point in time

Incremental backup: Backs up only selected files and folders that have the archive attribute; then the archive attribute is removed

Differential backup: Backs up only selected files and folders with the archive attribute; the archive attribute is not removed

Daily backup: Backs up all selected files and folders that have changed on that day; the archive attribute is not removed


(Skill 1)





Figure 13-1 The Backup or Restore Wizard

Click to open the

Backup

Utility Advanced

Mode

window

(Skill 1)





Figure 13-2 The Backup Utility Advanced Mode

(Skill 1)





Figure 13-3 Selecting the folders and files to backup

(Skill 1)





Figure 13-4 The Backup Job Information dialog box

(Skill 1)





Figure 13-5 The Backup Progress dialog box

(Skill 1)





Figure 13-6 The backup log file

(Skill 1)





Figure 13-7 The Restore and Manage Media tab

(Skill 1)





Considerations

System State changes when any system component, such as the Registry changes, which can happen quite frequently

To keep up-to-date with these changes, you should perform a backup of System State data regularly (typically every night)

You can use the Backup utility to schedule backups to run at specified dates and times

Ntbackup uses the Task Scheduler to schedule the backup

Scheduling a Backup

(Skill 2)





Figure 13-8 Backing up the System State data

(Skill 2)





Figure 13-9 The Backup Type, Destination, and Name screen

Enter the

location to save

the backup file

Enter a name for

the backup file

(Skill 2)





Figure 13-10 The Schedule Job dialog box

(Skill 2)

Used to set power

management and

idle time settings





Figure 13-11 The Advanced Schedule Options dialog box

Used to set the

repetition cycle for

the backup operation

within a specified

time frame

(Skill 2)





Figure 13-12 The Set Account Information dialog box

(Skill 2)





Figure 13-13 Scheduled jobs on the calendar on the Schedule Jobs tab

(Skill 2)





Figure 13-14 The Scheduled Tasks window

(Skill 2)





Types of restores Non-authoritative (Normal) restore: Use when you need to

recover a domain controller from hardware failure or replacement and you are sure that the data on the other domain controllers in the forest is correct

Authoritative restore: Use when an Active Directory object or group of objects has been accidentally deleted; to do so, execute the Ntdsutil command on a domain controller

Primary restore: Use when you must rebuild the domain from backup because all domain controllers in the domain have been lost

Restoring System Data (2)

(Skill 3)





Figure 13-15 Authoritative restore

(Skill 3)





Figure 13-17 Restoring the System State data

(Skill 3)





Figure 13-18 The Advanced Restore Options screen

(Skill 3)





Figure 13-19 The Restore Progress dialog box

(Skill 3)





Figure 13-20 The restore log

(Skill 3)





Hard disk failure can occur as a result of a power failure or just every day wear and tear

You can improve the odds against losing data due to a disk failure by using fault-tolerant disk arrays

To maintain data access when you experience hard disk failure, Windows Server 2003 supports several disk redundancy technologies known as RAID, or redundant array of inexpensive (or independent) disksDisk redundancy technologies are the software

implementation of RAID RAID is used to increase disk life and prevent the data loss

Understanding Fault Tolerance

in Hard Disk Volumes

(Skill 4)





RAID level 0

Involves the use of striped volumes to distribute data evenly in stripes across up to 32 disks in a volume

Provides extremely fast read and write access

If one disk in a striped volume fails, you will generally lose all of your data


in Hard Disk Volumes (2)

(Skill 4)





RAID level 1 (mirrored volumes)

Offers a fault-tolerant solution that duplicates data on two disks (a primary disk and a secondary disk)

If one disk fails, data can be “restored” in the sense that it is resynchronized with the mirror when a replacement drive is

installed

Windows Server 2003 supports disk mirroring, which can include disk duplexing

Disk duplexing means that rather than having two mirrored disks, both attached to the same disk controller or SCSI

adapter, the mirrored disk is attached to a different disk controller than the primary disk; if one disk controller fails, data is

still accessible



(Skill 4)





RAID 5

Sometimes referred to as striped volumes with parity

Data is written in stripes across a set of at least three (up to 32) physical disks

Error correction and checksum verification information are written in blocks that are spread over all of the disks in the

array



(Skill 4)





Figure 13-21 RAID level 0

(Skill 4)





Figure 13-22 RAID level 1

(Skill 4)





Figure 13-23 Disk Duplexing

(Skill 4)





Software RAID implementation: Fault tolerance is handled by the server’s operating system

Hardware RAID implementation: Fault tolerance is independent of the operating system and is implemented through the server’s hardwareThe disk controller (SCSI adapter) includes a chip on which

the RAID setup is storedMore expensive than software implementation, but has

faster read and write access



(Skill 4)





Figure 13-24 RAID 5

(Skill 4)





When you boot in Safe Mode, the computer starts up with a basic set of drivers to boot the system and make it accessible

Use Safe Mode to resolve problems that result from faulty device drivers, faulty programs, system service failures, or services that start automatically Safe Mode with Networking includes networking drivers and

services if you need network access to fix the problem Safe Mode with Command Prompt opens the command prompt

instead of the Graphical User Interface (GUI) environment Safe Mode options

Enable Boot Logging Enable VGA Mode Last Known Good Configuration Directory Services Restore Mode Debugging Mode

Restoring Your System Using Safe Mode

(Skill 5)





Figure 13-25 The Shut Down Windows dialog box

(Skill 5)





Figure 13-26 The Windows Advanced Options Menu

(Skill 5)





Figure 13-27 List of drivers loaded in Safe Mode

(Skill 5)





Figure 13-28 The Desktop message box

(Skill 5)





Uninterruptible Power Supply (UPS) Avoids data loss and component damage form sudden power

outages A hardware device that supplies power from capacitance cells to

a computer full-time UPS systems

Online UPS systems: Supply power directly from their capacitance cells, which are continually charging while the electrical power is intact

Offline UPS systems: Also referred to as SPS (standby power systems); these systems have battery backups

Restoring Your System Using Safe Mode (2)

(Skill 5)





Notifications When a UPS is attached to your system, the UPS service will

prompt your system to send a notification in specific cases Main-power failure detection: When the power supply fails, the

UPS will alert you that your system is running on the UPS Low-battery detection: When the battery for the UPS is low, it

will alert you UPS shutdown: When the UPS needs to shut down due to low

battery power, it will prompt you to shut down your system

Restoring Your System Using Safe Mode (4)

(Skill 5)





Figure 13-29 The UPS Selection dialog box

(Skill 5)





Figure 13-30 The UPS Configuration dialog box

(Skill 5)





When you start your computer, there are usually only two configurations that can be used

Default configuration: Includes any changes made during the last logon session before the reboot process

was initiated

Last Known Good Configuration: Contains settings saved in the Registry the last time a user successfully

logged on to the computer; useful if you have incorrectly edited the Registry, added a defective or incompatible

driver, or disabled a critical device driver

Using the Last Known Good Configuration

(Skill 6)





Figure 13-31 LKG and Default value entries in the Registry

Contains

configuration

information

that is saved

when a

computer

shuts down

normally

Contains

configuration

information that

was saved after the

last successful

logon

(Skill 6)





Figure 13-33 Last Known Good Configuration

(Skill 6)





Figure 13-34 The Hardware tab in the System Properties dialog box

(Skill 6)





The Recovery console is a command-line interface used to:

Troubleshoot, enable, disable, and reconfigure services

Copy, rename, or replace operating system files and folders

Format hard disks

Repair the file system, boot sector, or the Master Boot Record (MBR)

Read and write data on a local drive

Working with the Recovery Console

(Skill 7)





You can also use the Recovery Console to obtain limited access to the hard disk of your computer to view and repair specific files and folders

%systemroot%

Windows Server 2003 installation subfolders

%systemdrive%

CD-ROM drive

Floppy drive

Working with the Recovery Console (2)

(Skill 7)





Figure 13-35 Accessing the Recovery Console installation files

(Skill 7)





Figure 13-36 Windows Setup message box:

Installing the Recovery Console as a startup option

(Skill 7)





Figure 13-37 Windows Setup message box:

Recovery Console has been installed

(Skill 7)





The Volume Shadow Copy Service (VSS) provides two new services in Windows Server 2003

It can be used by applications to access locked files or files that are in use by other services or applications

It can be configured so that previous versions of saved files, which are stored on a network share on a particular volume, can be accessed and restored from shadow copies that are created at scheduled intervals

Configuring the Volume Shadow

Copy Service

(Skill 9)





Figure 13-45 The Shadow Copies tab on the Properties dialog box for a disk

Click to configure the settings for which drive to

store the shadow copies on, and the maximum

amount of space to use for the shadow copies

(Skill 9)





Previous versions of files that users have inadvertently deleted or overwritten can be recovered on the file server

Previous Versions client Stored on the server in the folder %systemroot%\

system32\clients\twclient

Three versions of the client

one for x86-based computers

one for computers based on the AMD64 architecture

one for computers based on the IA-64 architecture


Copy Service (2)

(Skill 9)





There are three ways to deploy the Shadow Copy Client to down-level clients Place the ShadowCopyClient.msi file in a shared network

folder; users can access and install the client from the share

Use Group Policy to assign the client to users on the network

Use the Systems Management Server (SMS) or another software management application to deploy the client as an .msi package


Copy Service (3)

(Skill 9)





Figure 13-46 The Previous Versions tab on the

Properties dialog box for a folder

(Skill 9)

Click to restore a previous version of

the file or folder; this

will roll back the file or folder to its

state at the date and time

you select; changes made since that

time will be lost





Figure 13-47 The three versions of the Previous Versions client

(Skill 9)





Figure 13-48 The Settings dialog box

By default the

maximum size

will be set to 10%

of the VSS

enabled volume

(Skill 9)





Figure 13-49 The Schedule tab

The default

shadow copy

schedule is 7:00

am and 12:00

noon Monday

through Friday

(Skill 9)





Figure 13-50 The Advanced Schedule Options dialog box

(Skill 9)





Figure 13-51 ShadowCopyClient.msi on a network share

(Skill 9)





Figure 13-52 The Previous Version contents list for a folder

(Skill 9)

Documents

13.1 © 2004 Pearson Education, Inc. Exam 70-290 Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 13: Implementing Data and