70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 14: Problem Recovery

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network2 Objectives Back up and restore files Recover corrupted systems Perform remote management Image client computers and servers

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network3 File Backup and Recovery File backup and recovery are an essential part of network maintenance When data is backed up, you can recover an uncorrupt version Effective backup and recovery solution includes Backup (ntbackup.exe) Volume shadow copy

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network4 The Backup Utility When backups are performed, they can be stored on tape or in a file Tape is more common Backup to file is used with nontraditional media, such as a floppy disk, hard drive, or CD-R The entire backup is stored inside a single file, making it easy to copy and move

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network5 Backing Up Application Data Backup utility is part of Windows Server 2003 Third-party backup solutions are available Easier to use Have enhanced features

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network6 File Backup Strategies Three backup strategies for daily file system backups: Full Incremental Differential Each time a file is modified, the OS turns on the archive attribute of that file Each backup strategy uses and affects the archive attribute of files differently

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network7 File Backup Strategies (continued) Full backup Backs up all selected files each time a backup is performed Simplest type of backup to implement Use the backup tape from the previous day to restore Archive attribute on each file is turned off Primary problem is the large amount of time

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network8 File Backup Strategies (continued) Incremental backup: Only the files that have changed since the previous backup Less than 10% the size of a full backup Always used in combination with full backups Only backs up files with archive attribute turned on

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network9 File Backup Strategies (continued) Differential backup: Files that have changed since the previous full backup Always used in a cycle that begins with a full backup Does not turn off the archive attribute on files that are backed up Is a compromise between full daily and incremental Differential is much faster to perform than a full backup Not quite as fast as an incremental backup

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network10 File Backup Strategies (continued)

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network11 Activity 14-1: Performing a Backup The purpose of this activity is to perform a full and an incremental backup

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network12 Activity 14-2: Performing a Restore The purpose of this activity is to Restore a file from backup

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network13 System State Backup Backup utility is can backing up system state data: Registry COM+ Class Registration database Boot files System files Use Directory Services Restore Mode to restore system state

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network14 Automated System Recovery Backup can perform an automated system recovery (ASR) backup Is a last resort to recover systems that you have not been able to recover using other more common tools When an ASR backup is performed, all of the OS is backed up

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network15 Volume Shadow Copy Volume shadow copy makes copies of files, including open files Allows users to restore previous versions of files without administrator involvement A volume shadow copy sets aside disk space to store changes to files that have occurred since the volume shadow copy was performed Only files that have changed take up additional disk space

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network16 Activity 14-3: Configuring and Using Volume Shadow Copy The purpose of this activity is to configure volume shadow copy to allow users to restore files from the previous day

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network17 Recovery Tools Recovery tools Device driver rollback Safe mode Last known good configuration Recovery Console

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network18 Device Driver Rollback Device driver rollback reverts to previous version of a device driver at any time after an update Available through Device Manager

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network19 Device Driver Rollback (continued)

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network20 Safe Mode Used when a server becomes misconfigured or corrupt Loads a minimal set of drivers Can repair the system by updating drivers, reinstalling software, or removing corrupt software

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network21 Activity 14-4: Accessing Safe Mode The purpose of this activity is to enter into safe mode.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network22 Last Known Good Configuration Last known good configuration is useful if no user has logged on since a change was made If a new device driver is installed and the system encounters severe errors, then last known good configuration can restore registry to before the installation Does not delete the files associated with the driver, but does prevent them from being loaded during startup

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network23 Activity 14-5: Using Last Known Good Configuration The purpose of this activity is to use last known good configuration to restore service and driver settings.

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network24 Recovery Console Recovery Console allows you to access system settings and files when Windows cannot be started Useful when safe mode and last known good configuration are not effective Recovery Console can perform disk management Can re-create the master boot record on the hard drive and the boot sector on the active partition

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network25 Activity 14-6: Installing and Using Recovery Console The purpose of this activity is to install and use Recovery Console

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network26 Remote Management Terminal Services lets users connect to a remote computer and run applications remotely Users must have client software installed on their workstations to connect to a terminal server Client software on the workstations creates a desktop environment based on screen draw commands Much more efficient for remote access than a VPN

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network27 Remote Desktop for Administration Remote Desktop for Administration allows up to two users at a time to administer a server remotely using Terminal Services All server features can be accessed just as if you were sitting at the server console

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network28 Remote Desktop for Administration (continued)

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network29 Remote Desktop for Administration (continued)

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network30 Activity 14-7: Using Remote Desktop for Administration The purpose of this activity is to use Remote Desktop for Administration to remotely connect to a server

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network31 Remote Assistance Remote Assistance is for users to ask experts for help In a corporate setting, the experts are normally the help desk or application support specialists

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network32 Activity 14-8: Using Remote Assistance The purpose of this activity is to use Remote Assistance to request help

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network33 Imaging Client Computers and Servers Imaging installs an entire OS in one step Software takes a copy of an entire hard drive or partition and stores it as a file Contents of the file are copied onto a client computer Time required is much less than for full application and OS installation

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network34 Imaging Client Computers and Servers (continued) Windows Server 2003 includes a solution for imaging called RIS (Remote Installation Services) A number of third-party imaging solutions, such as Norton Ghost, are also available

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network35 Remote Installation Services RIS can install Windows Server 2003, Windows XP, and Windows 2000 Both RIPrep images and flat images are supported RIPrep image is a fully installed OS and applications Can be installed in 10 minutes or less depending on its size

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network36 Remote Installation Services (continued) To create a RIPrep image: Install OS Install and configure applications Run RIPrep.exe: takes an image of the local computer and copies to the RIS server RIS server stores the image on its local hard drive A flat image is a scripted installation of the OS Requires 45 to 90 minutes Applications are not automatically installed

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network37 RIS Server Requirements Can install RIS server on any hardware that meets the requirements for Windows Server 2003, except: RIS server cannot be multihomed RIS server must have a 4-GB volume, which is not the system or boot volume The volume holding RIS must be an NTFS volume The recommended speed for the network in RIS servers is at least 100 Mbps

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network38 RIS Client Requirements RIS client must: Meet minimum hardware requirements for OS Have a Pre-Boot eXecution Environment (PXE) boot ROM version 1.00 or greater to connect to the RIS server

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network39 RIS Network Services Services required by RIS are DHCP, DNS, and Active Directory DHCP provides an IP address and configuration information to the RIS client DNS locates a domain controller and authenticates to Active Directory Active Directory identifies prestaged computers, creates computer accounts, and authenticates users

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network40 The RIS Imaging Process After RIS client gets a reply to its service request, it downloads a bootstrap program from the TFTP (Trivial FTP) service on the RIS server startrom.com is downloaded by default Displays a message to press F12 to perform a network installation If F12 is not pressed after three seconds, the boot process continues to the next device such as a hard drive

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network41 The RIS Imaging Process (continued) If the user presses F12, then the Client Installation Wizard is downloaded via TFTP from the RIS server Client Installation Wizard gets user to authenticate If the account has not been prestaged, the user performing the imaging needs permission to create computer accounts in Active Directory User selects an image to install

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network42 Third-party Imaging Utilities Using third-party imaging software is similar to using RIPrep images with RIS OS is installed Applications are installed Sysprep is run to prepare the computers for imaging Third-party imaging software is used

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network43 Summary Full backups turn off the archive attribute Incremental backups back up daily changes and turn off the archive attribute Differential backups back up all files that have changed since last full backup and do not affect the archive attribute of files that are backed up A system state backup backs up the system state data ASR backup takes a copy of the OS and creates a floppy disk for the disaster recovery process

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network44 Summary (continued) Volume shadow copy takes a snapshot of files Device driver rollback restores previous version of a device driver Safe mode starts the OS with limited services Last known good configuration restores the part of the registry responsible for service and driver configuration

70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network45 Summary (continued) Recovery Console allows you to access files and systems settings when Windows cannot be started Windows Server 2003 includes Remote Desktop for Administration RIS (Remote Installation Services) images and installs Windows Server 2003, Windows XP, and Windows 2000