Win2008 uses shadow copy to achieve on-demand recovery

In order to protect the security of shared information, the unit LAN will often set appropriate sharing permissions and security attributes for important shared resources, and will regularly back up shared resources. Operation; after the user connects to the local area network, the target shared resource can be securely accessed through the online neighbor window, which greatly facilitates the work. However, after a period of access, many users often complain that files that are temporarily modified or accidentally deleted cannot be quickly restored like the system recycle bin during access to shared resources; if the network administrator is tough in the server system When restoring the target resource, it is easy to affect the content status of other shared access users. How do we achieve the purpose of on-demand recovery? In fact, in the Win2008 system environment, we can easily achieve on-demand recovery with the system's own shadow copy service.

Understanding the shadow service

Although the shadow copy service has already appeared in the Win2003 server system, this function has been significantly improved in the Win2008 system environment, and the function is skillfully used. We can create instant point copies for important shared resources in the LAN. When LAN users accidentally delete or modify shared files, they can try to restore the target file contents to the correct ones by accessing the shadow copies of the corresponding shared resources. status. However, in order to enjoy the shadow copy service, we not only need to correctly set the shadow copy service function in the Win2008 server system, but also need to install the corresponding control program in the client system.

After properly setting up the shadow copy service, we should create a point-in-time copy in time when the shared resources are normal. When we find that our shared resources are accidentally deleted, we can use the client system. Open the property setting window of the target shared resource, and then in the "Previous version" tab of the corresponding window, select the shadow copy at a certain point in time, and you can easily restore the file that was accidentally deleted. A specific time version. Enable Volume Shadow Service for Shared Resources

In order for LAN users to enjoy the shadow copy service, we should first log in to the Win2008 server system with system administrator privileges, double-click the “Computer” icon on the desktop. In the subsequent window, find the disk partition where the target shared resource is located, and right-click the partition icon, and execute the “Properties” command from the pop-up shortcut menu to open the property setting window of the target disk partition;

Click the "shadow copy" tab in the settings window to open the label settings page as shown in Figure 1, select the target disk volume where the shared resource is located, and then click the “Enable” button, then the system screen The prompt window shown in Figure 2 will pop up automatically, and continue to click the "yes" button, then the Win2008 server system can enable the shadow copy function of the target shared resource according to the default setting.

Volume Shadow Service to conduct appropriate settings
To make Volume Shadow Copy Service to work according to our needs, in the correct target shared resource Volume Shadow Copy Service After the activation is successful, we also need to make some appropriate settings; in the setting operation, we can follow the steps below:
First, follow the previous steps to open the "shadow copy" label Set the page, select the target disk volume that has the Volume Shadow Copy service enabled, and click the “Set” button to open the settings dialog shown in Figure 3. In this dialog box, we can set the storage area parameters to the maximum. The value parameter and the operation plan parameters are set appropriately.


& ldquo in; storage area & rdquo; at the location, we can set up to hold the shadow copy of the target disk volume, by default Win2008 server system will specify the disk volume that contains the source files saved as volume The target disk volume of the shadow copy. We can only adjust the storage disk volume when any shadow copy has not been created; if we want to change the storage location for a disk volume that has shadow copies enabled, we must first make all the shadow copies in the corresponding disk volume. Delete it before you can adjust the storage location. Click the “Details” button in the setup dialog of Figure 3. In the subsequent interface, we can also view the maximum storage limit in the target disk volume and the size of the used space resources.
At the "maximum" location, we can specify the maximum amount of space on the target disk volume to hold the shadow copy of the shared resource. The default value is 10% of the disk volume size of the target shared resource; The target shared resource and the corresponding shadow copy are located on different disk locations. At this time, we should adjust the "Maximum" parameter to the target disk volume size dedicated to saving the shadow copy.

At the "plan" setting, we can create a task plan to create a shadow copy of the shared resource according to actual needs; by default, the Win2008 server system will share resources with the target every day. Create two shadow copies, and the task plan will stipulate that shadow copy creation will be performed every day between 7:00 am and 12:00 noon between Monday and Friday. Click the “Plan” button, from the setting window that appears later, we can define the specific working time of creating the shadow copy. For example, we can set the day to create a shadow copy once; After setting the task, click the “OK” button to close the Shadow Copy Settings dialog box. Management operations on shadow copies
After the Win2008 server system is running for a long time, several shadow copies may be created in the system. In order to quickly find the shadow copies that you need in the future, we need to be in the server system. Perform some effective management operations on these shadow copies. When managing the shadow copy, we can follow the following operations:
First enter the Win2008 server system desktop with system administrator privileges, click “Start”/“Program”/&ldquo Server Manager & rdquo; command, in the pop-up Server Manager console window, position the mouse in the "Configure" node option in the left display area, and select the Disk Management sub-item from the node option; Br> Secondly, right-click the disk management sub-item, and then click the “All Tasks” dialog box from the shortcut menu that pops up, and open the setting dialog box as shown in Figure 4. In this dialog box, we can delete outdated shadow copies according to actual needs, or manually create new shadow copies, and restore the entire disk volume to a specific point in time. Of course, when performing a restore operation on the entire disk volume, we must be aware that the operation cannot be undone, so be very careful when performing this operation.

perform on-demand recovery

on the client when we installed Win2008 server system configured Volume Shadow Copy Service, then the LAN users can open the shared folder on the client The property setting window, and restore the state of the target shared folder to the state set at a certain point in time in the past from the corresponding "previous version" tab page, thereby achieving the purpose of on-demand recovery. However, if we can't see the "previous version" tag option from the client's shared folder property settings window, then we must also install the client copy of the shadow copy on the client system, the program can Obtained from the Win2008 server system <Windows\\System32\\clients\\twclient\\x86\\twcli32.msi”
Of course, if the Windows XP SP2 system or Windows Server 2003 system is installed on the LAN client computer, then we generally do not need to install the shadow copy client program in the corresponding system, because these systems have built-in volumes. Shadow copy client program.
When we try to restore a target shared resource to a previous point in time, we can first open the property setting window of the target shared resource from the client computer, and then click on the previous version & rdquo Label, and select a suitable time point option in the "Folder Version" box of the corresponding tab page, and then click the “View” button to confirm whether the shared resource corresponding to the currently selected time point is consistent. Recovery requirements, if you meet the requirements, we can click the "Restore" button to complete the data recovery operation of the shared resources. Things to use for shadow copies

In order to better use the Volume Shadow Copy Service to protect the security of important shared resources, we also need to pay attention to the following items during use:

First, the volume The shadow copy service can only be used on disk partitions with NTFS format enabled. Disk partitions of other formats cannot be used, so we must save important shared resources in NTFS format disk partitions; and the shadow copy service operates on Disk partitioning, not a specific shared folder.

Secondly, to delete an expired shadow copy, you must first delete the task plan to create a corresponding shadow copy, otherwise it will cause the task plan to fail. At the same time, the shadow copy service cannot be Instead of a regular backup tool, we should also regularly use a backup tool to safely back up the entire server system.

Third, we should set the creation time and frequency of shadow copy according to actual needs. Try not to create multiple times within 1 hour; frequently create shadow copies, which will consume the server. The valuable space resources of the system can seriously drag down the running performance of the server system; creating shadow copies too much or too little will reduce the actual effect of the shadow copy service.

Fourth, each disk partition can only store up to 64 shadow copies. Once the actual number of shadow copies we create exceeds this value, the Win2008 server system will automatically delete the old shadows. The copy, and the deleted shadow copy, cannot be recovered later. In the future, when we restore data, the access rights of the data will remain in the original state.