Backup scheme client-server vs server-client?

Question

Backup

I'm new to admin. I want to organize the correct backup of user data from win workstations to a file server. To do this, I chose the Free file sync utility, which is installed on the client machine and makes a mirror of user data to a folder shared on the server. Deleted files and old versions are stored in a separate folder, where they are stored for 14 days, after which they are deleted by the script. There are several concerns: if the client catches the trojan encryptor, then I will lose both the data on the machine and the backup. What to choose, additionally copy the user's data to a place inaccessible over the network or share the user's folder on the client machine and collect the backup directly on the server, are there any pitfalls here? Or can you advise your solutions so as not to reinvent the wheel?

Answer 1

In principle, do not keep business data on user machines - let them keep everything in a shared folder on the server. And already archive this folder to another physical disk on the server, or synchronize - as convenient. Thus access of Users to other disk should not be.
And let them keep anything on the working computer - cats, home photos, music, porn, ... - the admin is not responsible for the safety of this.