0
0
0pt1muS2019-05-24 06:10:24
Backup
0pt1muS, 2019-05-24 06:10:24

How do I set up multiple versions of a Windows Server backup on a network location?

Good day!
There is a need to set up a backup file server on a separate machine with SATA disks, run Ubuntu + Samba on it and forget about ransomware.
As you know, when you try to create a backup with the standard Windows Data Backup System, a warning pops up about the impossibility of creating an archive with support for several previous OS states everywhere except for a local disk, so that you can roll back in two days / weeks.
Is it possible to connect a backup network location so that Windows Server considers it suitable for multiple archives?
The difficulty is that they say that ransomware accesses all connected drives, but they do not scan the network, so is it possible to pick up a network location in such a way so as not to be at risk from the ransomware?
Or not to reinvent the wheel with a "network and at the same time not a network" drive, but to set up several backups with different archiving periods? If yes, how is it done?
PS Used WinServ 2003-2012r2

Answer the question

In order to leave comments, you need to log in

4 answer(s)
D
Dmitry Shitskov, 2019-05-24
@0pt1muS

Here is a good old option - on the server with backups, use the zfs or btrfs file system. Before each backup, take a snapshot of the file system. That's backup versioning for you.
It is desirable not to mount a disk with backups anywhere. The cryptographer will gladly encrypt it too.

2
20ivs, 2019-05-24
@20ivs

in this case, a folder renaming script in the scheduler on the machine where the backups will be added could help.
for example, when a folder named WindowsImageBackup appears in a certain directory, the script adds the date of its creation to its name. for example, WindowsImageBackup_24.05.19. the next time you archive this folder will not be affected.
I won’t tell you the script itself yet, I don’t have it at hand. but it's not that hard to do.

A
Artem @Jump, 2019-05-24
Tag

a warning pops up about the impossibility of creating an archive with support for several previous OS states everywhere except the local disk
This feature is based on the shadow copy mechanism. Shadow copy works exclusively on the NTFS file system
Is it possible to connect a backup network location so that Windows Server considers it suitable for multiple archives?
Yes. Connect the drive via iSCSI and format it to NTFS.
This is about questions.
As for ransomware...
The simplest option is to allocate space for the backup, give write permissions to the backup user, and remove write and change permissions from all other users and administrators. So that the administrator could not write there. And that's it. It is reliable and trouble-free.
Another option - do not mount the disk (do not assign a letter), write to the disk by ID.

M
moropsk, 2019-05-24
@moropsk

We automate the process of creating backups of Windows Server 2008 R2, 2012 R2 server systems using a script for PowerShell.
jakondo.ru/avtomatiziruem-protsess-sozdaniya-bekap...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question