Module 15
Managing
Windows Server® 2008
Backup and Restore
Module Overview
• Planning Backups with Windows Server 2008
• Planning Backup Policy on Windows Server 2008
• Planning a Server Restore Policy
• Planning an EFS Restore Policy
• Troubleshooting Windows Server 2008 Startup
Lesson 1: Planning Backups with
Windows Server 2008
• Process for Planning Backup in Windows Server 2008
• Creating the Data Retention Plan
• Backing Up Encrypted Files and Virtual Machines
Process for Planning Backup in Windows Server 2008
List the data to back up:
• Consider backup size
• Consider time taken to back up or restore
Create a backup schedule
Choose a backup type
Choose the backup medium:
• How long will backups be kept?
• Where will backups be stored?
Creating the Data Retention Plan
How long must you keep data?
• Legal requirements
• Media lifetime
Where is the data stored?
What is the cost of data storage?
What software tools can assist data retention?
Backing Up Encrypted Files and Virtual Machines
Back up encrypted files:
• Back up encrypted data
• Recover encrypted files
• Recover lost encryption keys
Back up virtual machines:
• Select a virtualization backup strategy:
 Snapshots
 Manually back up .vhd and .vmc files
 Run backup in a virtual machine
Storage and Security Considerations
Consideration
Backup
storage
security
Details
• Store in secure location
• Available to authorized personnel only
• Who can restore data from backup?
Restore
operators
Confidential
data
IT staff
leaving
procedure
• Who can access backup media?
• Consider using ACLs or encryption to
restrict access
• Plan for backing up encrypted data
• Different authorized personnel from other
backups
• Remove access to backup and restore
• Rescind physical and system access
Lesson: Planning a Server Restore Policy
• Considerations for a Server Restore
• Impact of a Server Restore
• Improving the Backup Plan
• Change Management Considerations
• Restore Logs
• Restore Options
• Security Analysis
• Updating Backup Policy
Considerations for a Server Restore
Considerations for a server restore:
• Total server failure
• File restore
• Impact on operations
• Impact on service-level agreements
• Number of users affected
Change Management Considerations
• Data owners
• Emergency changes
• Impact of data restore
• User restore capabilities
Security Analysis
• Granting the right to restore files:
 Restrict the right to restore files
 Backup Operators group
 Administrators
• Post-restore tasks:
• Authorized user access
• Unauthorized user access
Lesson: Planning an EFS Restore Policy
• Considerations When Restoring EFS Data
• Requirements for EFS Recovery
• Preparing to Recover EFS Files
• Managing the Recovery Agent
• Recovering EFS Files
Considerations When Restoring EFS Data
 Data restore
 Original keys
 Key security
 Data recovery agents
Requirements for EFS Recovery
• Key recovery:
 Active Directory
 Backup
 Data recovery agents
• Group Policy
• Smart cards
• Private key lifetime
Preparing to Recover EFS Files
Managing the Recovery Agent
• Store DRA key offline
• Export and delete private key
• Give additional users access
• Data recovery agent policy
Recovering EFS Files
 Import DRA key
 Open EFS encrypted files
• Data Recovery Best Practices:
 Deploy PKI
 Use more than one DRA per domain
 Store private keys for DRAs on separate medium
Lesson: Troubleshooting Windows Server 2008
Startup
• Reviewing Startup Processes
• Being Prepared for Startup Failures
• Troubleshooting Startup Before the Windows Logo Appears
• Troubleshooting Startup After the Windows Logo Appears
• Troubleshooting Startup Problems After Logon
• Recovering from Hardware Problems
Reviewing Startup Processes
Windows Server 2008 startup sequence:
1
Power on self test (POST)
2
Initial startup
3
Boot loader
4
Detect and configure hardware
5
Load kernel
6
Logon
7
Plug and Play device detection
Being Prepared for Startup Failures
Use Windows Server Backup to create and schedule backups
• If failure does occur, recover operating system or full server using
a Windows Setup disc and a backup created with Windows Server
Backup
• Windows Setup disc enables you to access the System Recovery
Options page in the Windows Recovery Environment (WinRE)
Preventative measures:
• Protect the operating system with current Windows Updates and
antivirus signatures
• Follow vendor recommendations for hardware maintenance
• Familiarize yourself with advanced boot options (F8 on startup):
•
Safe Mode
•
Last Known Good Configuration
•
Boot Logging
Troubleshooting Startup Before the Windows
Logo Appears
If startup fails before Windows Server 2008 logo appears on screen:
• Edit boot
configuration
with BCEdit
No
• Use Startup
Repair to
Repair boot
sector and MBR
Does product
logo appear?
No
Yes
• Replace startup
files
Does product
logo appear?
No
Yes
Yes
• Product logo
appears
Does product
logo appear?
• Troubleshoot
as hardware
problem
Troubleshooting Startup After the Windows
Logo Appears
If startup fails after Windows Server 2008 logo appears on screen:
• Start with Last
Known Good
Configuration
• Enable boot logging
and start in Normal
mode, then restart in
Safe Mode
No
Does LKGC
resolve the
problem?
No
Yes
Does computer
start in Safe
Mode?
• Start Windows
Recovery
Environment
Yes
• Review Event Viewer
and boot log to
isolate problem
Did you
identify a
failing driver?
• Use System
Configuration
Utility to disable
failing services
No
Yes
• Disable
problematic
drivers
• Use Device
Manager to
fix driver
Yes
• System
starts
successfully
• Analyze boot
log to isolate
problem
No
Does system
start in Normal
mode?
Recovering from Hardware Problems
Hardware related troubleshooting can involve:

Checking your hardware

Simplifying your hardware configuration

Reviewing the hardware configuration in Windows

Diagnosing disk related problems

Resolving shutdown issues