Subscribe to Windows IT Pro

 

Get Newsletters

  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips

Subscribe Now!

August 19, 2002 12:00 AM

Win2K Disaster Recovery

Step-by-step instructions to help you recover your data
Windows IT Pro
InstantDoc ID #25954
Rating: (0)

You can use many methods to increase data availability for systems running Windows 2000 Server, including clustering, replication, and various RAID implementations. However, a fail-safe backup strategy is still the ultimate safety net to ensure that you can recover data after a catastrophic event. Countless books and articles outline the details of planning backup schedules, media rotation, and offsite storage for an effective backup program. But you might not know how to use your backed-up data to recover your Win2K server. With some clear direction and minor polish to your backup routine, you can make this process painless.

For the purposes of making this discussion germane to any Win2K Server installation, I'll frame the steps for recovering your backed-up data within the context of Win2K's native backup tool, Microsoft Windows Backup 5.0, also called NTBackup. Many third-party backup applications offer advanced features to enhance and simplify backup, restore, and recovery operations, but NTBackup provides the essential capabilities required for data protection. Additionally, some third-party programs can write to tape by using the Microsoft Tape Format (MTF), which facilitates recovery by using the native NTBackup program. (For a list of third-party backup solutions, see Buyer's Guide, "Backup Software," September 15, 2001, InstantDoc ID 22003, or visit the IT Buyer's Network, http://www.itbuynet.com.)

Let's document the steps to recover data from a Win2K server following a catastrophic failure. We'll assume the server acts as the only domain controller (DC), DNS server, DHCP server, and WINS server for a small company and has a hardware RAID controller hosting the system and data volumes. To prepare for disaster, you need to establish a solid backup routine and store your backup media and a record of your disk structure off site. Then, following a catastrophic failure, you'll be prepared to install a temporary OS, identify the contents of your backup media, restore the Normal and Differential backup sets, restore the System State data, restore any open files, and test your restored server and services.

Prepare for Disaster
I won't discuss in detail how to prepare for a catastrophic event, but I'd be remiss if I didn't mention some important steps you need to take before a disaster to ensure that you can safely recover your data. If you haven't developed a sound backup strategy that includes media rotation and offsite storage, put a process in place as soon as possible to ensure the safety of your data. (For information about backup strategies, see David Chernicoff, Forefront, "Stop Disaster in Its Tracks," July 2000, InstantDoc ID 8941, and Michael D. Reilly, Getting Started with NT, "Windows NT Backup Strategy," September 1999, InstantDoc ID 7111.) You'll want to follow best practices for using backup verification and execute backups using a user or system account with authority to access the appropriate data objects.

You can save yourself time and make recovery easier by maintaining a record of your server's disk structure for recovery purposes. You can easily document the disk and SCSI information with System Information (msinfo32.exe) by using the following syntax at the command prompt:

"\%ProgramFiles%\Common Files\Microsoft Shared\MSInfo\MSInfo32"
 /report a:\diskcfg.txt /Categories +componentsstorage

You can keep the msinfo32-generated diskcfg.txt file on a 3.5" disk or print the file and take it to your offsite storage location. To ensure that you can quickly locate media at recovery time, be sure that the electronic media label written to the tape matches the physical media label.

For the purposes of our example scenario, let's assume that you perform weekly Normal backups and daily Differential backups. We'll also assume for this scenario that you use the default file selections identified by the Backup Wizard when backing up the Win2K server. These files include the System State selections, which are any Active Directory (AD), boot, COM+ Class Registration Database, registry, and Sysvol folder files.

Consider Your Environment
Your environment might require special procedures to handle open files at backup time. In our example, the DHCP and WINS databases are the only files that require special attention. Third-party products are available for managing open files during backup, or you can sometimes script a solution. To maintain fresh backups of the DHCP and WINS databases in our scenario, let's say you've created a small script, which Listing 1 shows, that your backup routine calls just before every backup job. To back up the DHCP database, you merely stop the DHCP service, copy the database file while it's closed, then restart the service. You then use the Net Shell tool (netsh.exe) to automate the WINS database backup procedure without needing to use the WINS console. Note that you must configure WINS with a default backup path, either through the console or Net Shell, before executing the Net Shell command in Listing 1.

Related Content:

ARTICLE TOOLS

Comments
  • Trevor Paynting
    8 years ago
    Jan 15, 2004

    Ed Roth's article "Win2K Disaster Recovery" (September 2002, http://www.winnetmag.com, InstantDoc ID 25954) was interesting. Could I use a similar procedure to restore a Windows NT Server 4.0 system, particularly an NT 4.0, Terminal Server Edition (WTS) machine? Also, does NT 4.0 have a utility that's similar to Windows 2000's Microsoft System Information (msinfo32.exe)?




    For the most part, the strategy outlined in "Win2K Disaster Recovery" pertains to NT Server 4.0, too. However, the number of differences in functionality, terminology, and appearance among the versions of NTBackup software included with the respective OSs might make following the Win2K-specific backup application instructions tough. If you can correlate the important operations, you'll be able to make the backup work. For example, the NTBackup software that NT 4.0 includes doesn't have a System State backup option, but you can tell it to back up the local registry. In addition, in NT 4.0 you need to use Windows Microsoft Diagnostics (WinMSD—winmsd.exe), the precursor to msinfo32.exe, to gather system configuration information, and you need to back up the WINS database without the assistance of the Net Shell utility, which NT doesn't support. Perhaps the most important operation regardless of OS or backup software is to test the process to see how well you can recover a test server and make adjustments as necessary.


    —Ed Roth

  • David Jenkins
    9 years ago
    Mar 19, 2003

    I must be missing something fundemental but I have not been able to restore a system from backup. This document goes from restoring data to "it's working". Is there a resource that actually gives step by step. This article sure didn't.

  • Jakob Hussfelt
    10 years ago
    Dec 10, 2002

    Ed Roth is discussing an interesting subject here. I want to point out a nice feature with Windows 2000 that makes part of Listing 1 a bit superfluous (a candidate for correction?) though.

    Listing 1 contains a few lines for making a backup copy of the DHCP database. This was needed in Windows NT 4.0, but is since Windows 2000 a system automated process we don't have to care much about. A Windows 2000 machine by default makes a backup copy of the DHCP database every 60 minutes to %SystemRoot%\\system32\\dhcp\\backup\\Jet. The interval (specified in minutes) can be configured by the administrator altering the registry value HKLM\\SYSTEM\\CurrentControlSet\\Services\\DHCPServer\\Parameters\\BackupInterval and then restarting the DHCP Server service.

    Note that you would still want to include the directory %SystemRoot%\\system32\\dhcp\\backup\\Jet in your regular file backups.

  • Ed Roth
    10 years ago
    Oct 30, 2002

    You make an excellent point. Sometimes we focus so much on not losing any data that we don't think about intentionally deleted files and the repercussions of reintroducing them. I should have mentioned this problem in the article.

  • Kees Schouten
    10 years ago
    Oct 30, 2002

    In "Win2K Disaster Recovery" (September 2002, InstantDoc ID 25954), Ed Roth described how to restore a system by using a normal backup and a differential backup. I'm not familiar with the NTBackup program, but I don't think it's fundamentally different from other backup programs (we use Computer Associates'--CA's--ARCserve). After you restore a normal backup and a differential backup, the system might not be an exact copy of the system before the crash. Files that were deleted after the normal backup and before the differential backup will be on the system after the restore operation. This reintroduced data could be a real problem if your software relies on time-stamped files. To solve this problem, you should generate a complete filelist right before the differential backup. After restoring the differential backup, you should compare the restored filelist with an actual filelist. Another solution is to use object auditing and check the Security logs for deleted objects.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

White Papers

Get your Windows 7 deployment off to the right start by implementing PC lockdown. A locked-down environment is easier and cheaper to support since users are less likely to make unnecessary changes to the core system configuration - read more here!

Essential Guides

Is your iSCSI "lossy"? The reality is that most off-the-shelf Ethernet hardware deployed for iSCSI can lose packets, resulting in slow performance or application downtime. Learn how to assess your current iSCSI infrastructure and engineer an advanced iSCSI SAN infrastructure.

Web Seminars

What's the best way to keep your network safe from malware? In this web seminar, security expert Greg Shields suggests an alternative method to the traditional blacklisting approach that is common with anti-virus and anti-malware solutions.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.