How to competently organize Backup of a file server and workstations in a small organization?

Question

Backup

Tell me how best to organize a competent backup in an organization of 30-50 workstations and one file server?

What you need to back up:
1. The actual file server running Windows, namely the data on it and the entire system, so that you can quickly deploy the server on another hardware in case of any file failure.
2. User workstations (windows 7, 10) - at least these are profiles (Documents, Desktop), at most snapshots or system images with everything that is on the disk.

What is already configured:
1. File server + backup with the allway sync program on a separate disk (I know that it’s not enough and you need to have at least 3 copies and at least one offline one, but that’s what it is) + shadow copies of the disk with the ability to restore data from using previous versions.
2. Workstations are entrusted to the will of God... that is, there is no backup at all, I ask users to store everything critically important on the ball and try to monitor the status of workstations in order to prevent irretrievable data loss.

There is no domain in the organization, I’m thinking about it, but I don’t decide yet, I don’t have enough experience, I will train on cats (virtual computers at home).

I understand that this question is, perhaps, from the “What car to buy?” series, but still I need advice not to dance on a rake, because surely not one of you has gone through this painful path.

Answer 1

First you need to decide on the storage locations.
For example, a backup will be made to another disk on the same server and additionally to a NAS on a different network via FTP.
Disk images of user machines can be made either by the archiving system built into the OS, or, for example, by the Russinovich disk2vhd utility from the command line.
To store a large number of images of the same type, it is reasonable to use deduplication - this can be regular windows deduplication, or the use of third-party utilities.
For example, I often use the zpaq utility.

Organization does not have a domain

And it is not required for the stated purposes. A domain is just the convenience of managing multiple computers and nothing more.
That copy of the backup that is stored on the same FS must be located on the disk allocated for it, and is protected by rights. Only the backup operator should have rights to write a backup, the rest should not have them, especially the administrator!

Answer 2

Veeam Agent for Microsoft Windows Free
https://www.veeam.com/en/free-virtualization-softw...

Answer 3

I will add Artem : prohibit users from storing data on their computer.
What is so exclusive about a Manager or a Shop Foreman?
The disk is dead - we put the Windows clean, and we continue to work.
The exception is the accounts and their banks, certificates, reports, EDS... We got a new certificate - the image of Windows was made by Windows information, say, on the second disk on the same computer, or on the server.

Answer 4

RAID on the server + scheduled connection of an external NAS for backup
From workstations - copying to the server and from there to the NAS

Answer 5

For the server using winbackup, you can make a bootable cd and backup on an external drive for recovery in case of hardware failure.
This is done once and these two discs are put away in the safe.
You also need to make a regular backup, which will be deployed to what is restored from those disks.
If there is a domain, you can redirect folders with a user profile (desktop, documents, etc.) to a server that will be backed up.
Some special computers can be backed up to an attached external drive, for example, with the same free Veeam, but it must work under an admin account and the user must not be allowed there, otherwise the first encoder will crash everything. It is done according to the same principle - a USB flash drive for booting, which will then restore everything from an external disk.
And the storage of backups should be limited in access according to the same principle.
As for the domain - find an experienced IT specialist to set it up once and many security problems will be solved)
And, of course, you need to backup to a medium that is outside the office or to the cloud - this will save you from the flood, fire, mask shows ... For example, klsbackup can backup to Onedrive...

Answer 6

There was a similar issue. A small firm (~30 people), one server on win2000, the rest are either thin or thick clients.
I set up a separate linux server, raised BackupPC on it and backed up the server. An amazing thing, the ability to raise the desired version of the file for a specific day in the past helped out many times. Easily and flexibly configured. I backed up individual fat clients (buh, financier) in separate streams. There were no tasks that were not solved. Can bekapit through the Internet.

Answer 7

You can use Handy Backup, there is a plug-in for disk images, and cataloging the copies made with timestamps. I have been using it in our research institute for the eighth year, it is very convenient.