File Protection

Backup Considerations

Before creating a backup job, it is important to understand what backup and restore options are available. This section provides guidance on some key considerations.

Exchange VM Detection

If your backup job contains a Hyper-V guest with an Exchange Server, the authentication information for that guest should be entered into the Exchange VM Detection tab on the Selection screen when you create the backup job. With these credentials, BackupAssist can detect what guests have an Exchange Server, and list the EDB file available for each guest when you perform a restore using the Exchange Granular Restore console.

The Exchange VM Detection tab will appear when the Hyper-V role is installed and running on the server. If you are backing up multiple Exchange guests, each one should have the same username and password.

The Hyper-V process is automated but the restore requires both the Exchange Granular Restore Add-on and the Hyper-V Granular Restore Add-on licenses.

Restore vs. Recovery

A restore is the process of accessing a backup and restoring it to the original (or a new) location, if your data is lost, corrupted or if you want an earlier version of that data. However, if your computer cannot start itself, you may need to perform a recovery.

A recovery is the process by which a computer is recovered after hardware has been replaced or an operating system failure has occurred, and your computer can no longer start itself. To perform a recovery you need a bootable media to start your computer, and an image backup that the bootable media can use to recover your operating system, data and applications.

File Protection can be used to back up and restore your data, but if you want to be able to recover your computer, the following should be considered when planning your backup strategy:

• RecoverAssist bootable media : BackupAssist's Recover tab can be used to create a customized, bootable recovery media. This media will start your computer and load a recovery environment that can access an image backup to recover your computer.

RecoverAssist can be used by Windows 7, 8, Server 2008/12 and SBS 2008/11 computers.

• Bare-metal backup : A BackupAssist System Protection backup can create a bare-metal image of your computer that RecoverAssist can use to recover your operating system and data.

System Protection creates an image backup for Windows 7, 8, Windows Server 2008/12 and SBS 2008/11 computers.

For more information on data recovery, see the Recover tab & RecoverAssist Whitepaper.

Windows SystemState

Overview

In previous versions of BackupAssist, Windows SystemState was called System State and it was available during the creation of a backup job. The Windows SystemState option is now selected by editing a backup job after it has been created. There are exceptions, as shown in the table below.

A Windows SystemState backup contains some of the important files, registry values and settings that are used by the Windows operating system. It does NOT back up the operating system itself. This means a Windows SystemState backup can be used to restore the settings your computer had at an earlier point in time, but it will not allow you to recover your computer. A Windows SystemState backup can be helpful if your computer is encountering errors and you want to restore your settings to an earlier point in time, before the errors occurred.

Because Windows SystemState requires a functioning computer, and can only restore Windows settings, we recommended that a bare-metal backup is used. A bare-metal backup can restore Windows SystemState data, and it can ALSO be used to perform a recovery of your computer, when used with a Windows recovery environment, like RecoverAssist.

Selecting Windows SystemState

Windows SystemState can be selected after a backup job has been created, if you have enabled the Windows settings. The exceptions, considerations and steps required are explained below:

This table shows what backup jobs can include Windows SystemState.

To enable Windows SystemState:

1. Select the BackupAssist Settings tab.

2. Select Windows settings.

3. Tick Enable v6 compatible Windows SystemState selection.

Backup jobs created in earlier versions of BackupAssist (that included System State) will have the setting enabled by default in BackupAssist v7.

Zip-to-tape backup jobs will not need to enable this setting, to select Windows SystemState.

To select Windows SystemState:

1. Select the BackupAssist Backup tab.

2. Select Manage from the menu.

3. Select the backup job that you want to modify.

4. Select Edit from the menu.

5. Select Files and applications from the left pane.

6. Select Windows SystemState at the top of the data selection pane.

BackupAssist Settings

When creating a backup job, there are some global settings that should be configured in BackupAssist. If they are not configured, you will be prompted to complete them during the creation of your first backup. It is recommended that this is done in advance.

BackupAssist's settings can be entered and modified using the selections available in the Settings tab. Clicking on the Settings tab will display the selections as icons. Four of these are used when creating new a backup job and each one is described below:

Backup user identity

Backup jobs require an administrator account with read access to the data source, and full read-write access to the backup's destination. It is recommended that a dedicated backup account is created for this purpose. The account's details are entered using this menu item, and your backup jobs will be launched using these credentials. The account's permissions will be validated both when the backup user identity is entered and when the job is executed. If no account is specified or the account has insufficient permissions, the backup job will fail and note the error in the backup report.

A video explaining the creation of a backup user identity can be found on our, Videos Webpage.

Email server settings

This menu item is used to enter the details of the SMTP server used by BackupAssist to send email notifications. The SMTP server must be configured if you want to have an email Notifications step included step included when you create a backup job.

Email address list

This menu item is used to define and store the email addresses of potential notification recipients. The list will be used to populate the recipient selection screen when configuring an email notification for a backup job. Any email addresses entered during the creation of a new notification are automatically added to the Email address list.

Network paths

This option allows you to enter access credentials for networks, domains and drives that the default account (specified in the Backup user identity) does not have access to. Enter or browse to the location and add it to the Path list. The Edit option will allow you to enter an authentication account, specifically for that path. When you create a backup job to a remote location, that location will be automatically added here.

Having multiple connections to a resource using the same logon credentials can generate a Windows error, such as the BA260 NAS error. It is therefore recommended that you avoid having mapped shares on the computer running BackupAssist that are the same as the paths configured in BackupAssist.

Creating a File Protection Backup

The following instructions describe how to create a backup job using BackupAssist File Protection.

Launch BackupAssist and follow the steps outlined below:

1. Select the Backup tab, and click Create a new backup Job

2. Select File Protection: If this is the first time you have created a backup job, you will be asked to provide a Backup user identity. See the section above, BackupAssist settings, for guidance.

3. Selections: The selections screen is used to select the data and applications that you would like to back up. Any VSS applications detected will be displayed here as application directory containers.

An Exchange VM Detection tab will be available if you are backing up an Exchange VM guest. To learn more about this feature, see the Backup Considerations section.

Select the volumes, folders, files and applications that you want to back up, and click Next.

4. Destination media: The destination screen is used to select the type of media that you want to back your data up to. This step’s name will change to the media type selected, when you click next.

1. Select a device for your backup destination.
2. Select an encryption type if you want to encrypt your backup.
• TrueCrypt encryption is available for all destinations. The first time you use this feature, TrueCrypt will install the encryption files.
• BitLocker encryption is available for External disk or RDX drive destinations. BitLocker will encrypt the destination media. To learn about BitLocker, see our BitLocker resource page.
3. Click Next.

To back up to an Rsync destination, refer to the File Protection using Rsync guide.

File Protection backup - Destination media selection screen

5. Schedule: This screen is used to select when and how you would like the backup job to run, and how long you would like the backup to be retained for. A selection of pre-configured schedules, called schemes, will be displayed.

• The schemes available will depend on the type of destination media selected in step 4.
• Clicking on a scheme will display information about the schedule used.
• The schedule can be customized after the backup job has been created.

Select an appropriate scheme, and click Next.

For more information about creating custom schedules, refer to the Backup tab whitepaper.

6. Set up destination: This screen is used to configure the location of the media selected in step 4.

The options presented will change with the type of media selected.

Configure your backup destination, and click Next.

BackupAssist File Protection - Set up destination screen

• If your media is removable, you can set the media to eject after the backup job has finished.
• If your media is a removable drive, you can select either Mirror or Backup-with-history for the replication mode. For non-removable media, the mode is determined by the scheme in step 5.
• If you selected TrueCrypt or BitLocker encryption, enter a password and any requested encryption information into the fields provided.

Note: It is important that you keep a copy of your password in a safe place, as we cannot retrieve passwords if they are lost or forgotten.

Mail Server: If you have not configured an SMTP mail server for BackupAssist, you will be prompted to provide those details after the backup destination step has been completed. See the BackupAssist settings section for guidance.

7. Notifications: Once a backup job has completed, BackupAssist can send an email to inform selected recipients of the result. This email notification can be enabled during the creation of a backup job, if the mail server has been configured.

To enable email notifications:

a. Select, Add an email report notification.

b. Enter recipients into the Send reports to this email address field.

c. Enter recipients into the Also send reports to this email address field.

d. Select the condition under which the email should be sent, using the drop-down box.

After the backup job has been created, you can modify the notifications by adding and removing recipients, setting additional notification conditions and including print and file notification types.

To learn more about notification options, see the BackupAssist Backup tab whitepaper.

8. Prepare media: If you selected a portable media device as your backup destination (such as an external HDD or a REV drive) you will be given the option to prepare the media for BackupAssist. BackupAssist will write a label onto the media so that it can recognise what media has been attached, and determine if it is the correct media for your backup schedule.

To enable media detection:

a. Select, Let BackupAssist keep track of your media.

b. Select what you would like BackupAssist to do, if the wrong media is inserted.

c. Select what you would like BackupAssist to do, if new or unrecognized media is inserted.

BackupAssist will display all removable media that are currently attached, along with a text field and drive designation drop-down box, which can be used to provide a label for the media.

To prepare your media:

e. Enter the name and drive designation to be used for each media device listed.

f. Select Prepare for each media device listed.

BackupAssist will write the label to the media so it can recognize the media and ensure that it is used on the correct day. For example, if you put an RDX drive in on Tuesday but it was labeled Wednesday, BackupAssist will warn you that the incorrect media has been detected.

If you are using BitLocker, refer to the BitLocker resource page for disk preparation guidance.

7. Name your backup: Provide a name for your backup job, and click Finish.

Your File Protection backup job has now been created.

Important: Once a backup job has been created, it should be reviewed and run using the Manage menu. This menu provides additional options to configure your backup. See the section, File Protection backup management, for more information.

Important: Once the backup has been created, it should be checked. You can check the backup by performing a manual test restore, or using the Backup Verification feature.

Restoring from a File Protection Backup

This section provides instructions on how to restore data that was backed up using BackupAssist's File Protection.

To restore data from a File Protection backup, start BackupAssist and follow these steps:

1. Select the Restore tab

The Restore tab has a Home page and a Tools menu. The Home page is the default screen and the recommended starting point for performing a restore. The Tools menu should only be used by experienced administrators or users being assisted by technical support.

2. From the Home page, select the type of restore you want to perform.

• Files and folders will display all data backups and all VSS application backups.
• Applications will display backups that contain VSS applications, and exclude data only backups.
• Exchange , SQL or Hyper-V, will display all backups that contain the selected application. Selecting an application type will display application specific restore tools (e.g. Hyper-V Granular Restore and SQL Restore) as well as the Restore Console.

3. Once you have selected the type of restore you want to perform, the Home page will display all catalogued backups that match your selection. The backups displayed will be for active backup jobs, and grouped by the source data’s location and the restore tool that can be used.

• If a backup can be used by two restore tools, it will appear in two groupings.
• If a backup contains data from multiple locations, it will appear in a grouping for each location.

If your backup included both data and VSS applications, both will be available to restore once the backup has been loaded in step 4, regardless of the restore type selected.

Select the Restore Console.

BackupAssist Restore Home page - selection results

4. Restore console - backup and data selection

The BackupAssist Restore Console will open and load all of the backups that were listed on the Home page. The next step is to locate the data you want to restore, from the loaded backups.

The Restore Console provides two tools to locate your data:

• The Browse tab. Select this tab if you know the backup and date you wish to restore from, or if you need to restore an entire backup set.

a. Use the drop-down menu to choose the backup that you want to restore from.

b. Use the calendar to select the date you want to restore from.

c. Use the middle panes to expand the backup set.

d. Select the data to restore.

e. Click Restore to at the bottom right of the window.

• The Search tab. Select this tab to search all of the loaded backups for the data you want to restore. You can display data filtered by name, date, size and type, for all backups. The results can be compared (e.g. the dates of two files) to identify the correct data selection.

a. Enter your search term (The search accepts wild card searches, such as *.log or *.doc).

b. Select a filter/s if required.

c. Click the Search button.

d. Select the data to restore.

e. Click Restore to at the bottom right of the window.

BackupAssist Restore Console - backup and data selection

If you wish to load backups for deleted backup jobs and for other backup groupings on the Home page, select Load backups and then Load all known backups.

For more information about data selection, refer to the Restore tab whitepaper.

5. Restore console - restore destination selection

When you select Restore to, a window will open showing the Backup location, the Restore to destination and the Restore options.

a. Review Backup Location. Change the selection if the backup was moved after it was created.

b. Review Restore to: Leave the Original location selected or chose an Alternative path.

Restoring to an alternate location will use a minimal path. For example, restoring a single file to an alternate location will copy the file to the location without re-creating the original folder structure.

c. Review the Restore options

• Select Overwrite all existing files, Do not overwrite existing files or Only overwrite older files.
• The option, Restore NTFS security attributes will be selected by default.

d. Selecting Create a log file listing all processed files, will create a file that lists the success or failure of each file. The log is opened by selecting the log file’s link in the backup report.

e. Queue all backup jobs when a restore is running, is selected by default.

See the File Protection Advantages section on page 3 for information on NTFS attributes.

f. Click the Restore button to restore your data.

• If BackupAssist cannot access the backup location you will be prompted to either connect the appropriate media or specify an alternate location where the backup can be found.
• The restore will run from the destination window and a Report link will appear once the restore has finished.

g. Select Done.

Your File Protection restore has now been completed.

Important: Only backups made with BackupAssist v5.3 or later will show up in the Restore Console.

Important: The Restore Console can restore encrypted files, but you will need to supply the password. It is important that you keep a copy of your password in a safe place, as we cannot assist you with opening password encrypted files if your password is lost or forgotten.

Helpful hint: These instructions explain how to restore data using the BackupAssist Restore console. If you do not have BackupAssist installed and need to restore a File Protection backup, you can browse to the location of your backup using Windows Explorer and copy the required files to any location.

File Protection Backup Management

Once you have created a backup job, you can modify the settings and access advanced configuration options using the management screen.

To access the backup management screen:

1. Select the BackupAssist, Backup tab.

2. Select Manage from the top menu. A list of all backup jobs will be displayed.

3. Select the backup job, and then select Edit.

4. Select the required configuration item on the left. Key configuration screens are described below.

To learn more about the backup management options, see the Backup tab whitepaper.

Destination: Enabling single-instance store

Removable media backups created with the Backup-with-history mode selected can be configured to use single-instance store, so that only one unique copy of each file is stored on the backup destination. Single-instance store is enabled by default. Backups cannot use single-instance store when the backup is saved on a ReFS formatted destination (e.g. Windows Server 2012).

To modify this setting:

a. Select Destination from the left menu and expand Replication Mode Options.

b. Check the option, Use the single-instance store.

Manage backup - Removable media, destination screen

Replication options: Preserving NTFS file attributes

BackupAssist File Protection is able to preserve certain NTFS file attributes set on the original source files. To maintain NTFS file attributes you should choose a backup destination formatted using NTFS. Preservation of NTFS attributes is enabled by default on destinations that support it.

a. Select Replication options from the left menu and expand, File Replication options.

b. Check the option, Copy NTFS security attributes and alternate data streams.

You can also disable warnings that may appear in the backup report if the destination does not support NTFS attributes under the File Attribute Warnings heading.

Scheduling

Selecting Scheduling will display the Scheduling options. You can use this screen to change the default time and days of your scheme's daily backups. If you selected a scheme with archive backups (e.g. weekly, monthly), you can specify when each archive backup will run. The current scheme is shown, along with two pop-up menus: Select a new schedule and Customize schedule.

Select a new Schedule: This will display the pre-configured backup schemes that you chose from during the creation of your backup job. The selections available will depend on the type of destination media you have selected. You can select a different scheme using this option.

Customize schedule: This selection can be used to modify each backup within your current schedule. The customizations available will depend on the type of backup media used. For File Protection backups, the Method field can only be set to Automatic. This is because single instance store provides the benefit of incremental backups in a full backup format. This technology is managed by BackupAssist and does not require further modification.

For additional information on the Scheduling screen, please refer to the Backup tab whitepaper.

Files and applications

The Volume Shadow Copy Service (VSS) is a Microsoft Service that creates a copy of an application's data (e.g. Exchange and SQL) so the data can be backed up without interfering with the application. BackupAssist is a VSS-aware backup client, so it can backup application data using the VSS copy. BackupAssist will automatically detect locally running VSS applications and list them for selection during the Destination step of the backup job creation.

VSS applications are displayed under the Files and applications menu item. You can modify your backup job by selecting entire VSS applications or drilling down to individual components. In some cases, only applications that are currently running will be detected. If an application is not listed, try re-starting it and then click the Refresh button in BackupAssist.

If your backup job contains a Hyper-V guest with an Exchange Server, the authentication information for the guest should be entered into the Exchange VM Detection tab. Select the File and applications > Exchange VM Detection tab. With these credentials, BackupAssist can detect what guests have an Exchange Server, and list the EDB file available for each guest when you perform a restore using the Exchange Granular Restore console.

The Hyper-V process is automated but the restore requires both the Exchange Granular Restore Add-on and the Hyper-V Granular Restore Add-on licenses.

Open files: VSS writers

If you selected a VSS application, it is recommended that you disable the Enable VSS writers option. If a VSS application is detected, the Volume Shadow Copy Service and Enable VSS writers options will be selected by default. VSS writers contact all applications before and after a backup. This process is slow and can cause the VSS application to register that a backup has been completed when it has not.

File Protection Backup Report

BackupAssist File Protection reports are very similar to those created from other backup engines. Some sections, however, are unique to File Protection and explained in greater detail below.

The File Replication section of the backup report, outlines how much data was backed up, how many files were backed up and includes details about single-instance store (if enabled).

The details outlined in the File Replication section include:

• Total file count : The total number of files that were selected for backup.
• Files copied : The actual number of files copied during the backup. If no files have been modified or no new files have been added since the last backup, BackupAssist will not copy them to your backup destination.
• Files where no copy required : If single-instance store is enabled, files that have not been changed since the last successful backup do not need to be copied to your backup destination.
• Total size : The total size of a full backup (i.e. all files selected for backup).
• Size of files copied : The amount of data that actually needed to be copied for this backup (i.e. new or modified data not already present at the backup destination).
• Size of files where no copy required : The total size of the files that did not need to be backed up due to single-instance store.

File Protection backup report

The Media Usage section of the backup report provides a list of File Protection backups stored at the backup's destination. This list can help you determine the number of backups stored on a device that you can restore from, and monitor the amount of free space available.