Backing Up the Server
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
The importance of safeguarding your data by backing it up onto removable media cannot be overstated. Obtain a tape backup, writeable CD-ROM drive, or other suitable backup device for backing up your server and user data.
In the chapter example, user data is redirected to DC01, so backups of individual client machines are not necessary. Your own environment might require the ability to back up client hard drives as well as servers. After determining your backup needs, you can use the Backup program included in Windows Server 2003, or choose a third-party software program, to back up your data.
In addition to a backup device and software, you need a good backup plan. Many organizations perform a full server backup weekly, and then perform incremental backups (backing up only those files that have changed) each day.
Rotate your backup media. Using the backup scheme described in the preceding paragraph, you will need at least one set of backup media for each day of the week as well as a separate set of media for the fully weekly backups. Keep at least three separate sets on hand for rotation of the backups. In other words, use backup set 1 for one week; backup set 2 for the second week, and so forth.
Once a month, make a full system backup and data backup, and store the backup media offsite. In addition, make a system backup of your Active Directory database and the Sysvol folder on your DC — you will need this backup if you ever need to recover your Active Directory or Group Policy information. All of these backups should be considered permanent system archives, and not included in your rotation plan.
If you use tape cartridges for backup, re-tension the tapes after several uses. Replace tapes after six months of use. Tape erodes.
Always store your backup media offsite in a secure location — perhaps a safety deposit box or another office. In the event of disaster (flood or fire, for example), you want to be sure that you can recover all of your data.
In the chapter example, DC01 hosts Active Directory and all of its associated objects, as well as SUS, application software, RUPs, and redirected folders. Therefore, the information that must be backed up is stored in multiple locations on the computer. The subsequent procedures for backing up DC01 give you the basic commands for performing the various types of backup.
To back up the entire contents of DC01
Click Start, point to All Programs, point to Accessories, point to System Tools, and click Backup.
Select Backup Files and Settings.
Select All Information on this Computer.
Designate where to save the data, click Next, and then click Finish.
To back up Active Directory and Group Policy
Click Start, point to All Programs, point to Accessories, point to System Tools, and click Backup.
Select Backup Files and Settings.
Select Let me choose what to back up.
Navigate through drive C, and select the System Volume folder.
Scroll down, and click System State.
Designate where to save the data, click Next, and then click Finish.
These steps back up the current state of the domain controller (including Active directory settings and data) and Group Policy settings.
To back up GPOs
It is very useful to make a backup of your GPOs, in the event that you need to restore only those settings, or want to copy them to another forest.
Click Start, and then click GPMC.
Expand Forests, expand Domains, and expand adatum.com.
Right-click Group Policy Objects, and click Back Up All.
Click Browse, and browse to the preferred storage location.
This might be a secure area on your server that will then be backed up onto tape, or you might back the Group Policy settings up directly on removable media.
Click Backup.
Note that you can also back up GPOs individually.
Another option for backing up GPOs in a domain is to use the BackupAllGPOs.wsf script, located in the %programfiles%\gpmc\scripts folder. The syntax for using the script requires that you provide the backup location and (optionally) a comment. For example, to back up GPOs in the adatum.com domain, you would enter the following command:
cscript BackupAllGPOs.wsf \\dc01\GPO-Backups /comment:"Weekly backup"
To back up data only
Click Start, point to All Programs, point to Accessories, point to System Tools, and click Backup.
Select Backup Files and Settings.
Select Let me choose what to back up.
Navigate through drive C, and select Redir.
This folder contains all the redirected folders from the users. In the chapter example, all data is stored in these folders, so by backing up Redir, you are making a full data backup.
Designate where to save the data, click Next, and then click Finish.