Solved

Recovery of a ntbackup file

Posted on 2006-11-23
6
251 Views
Last Modified: 2012-05-05
I have a default ntbackup running on a SBS 2003 box backing up to a hard drive. By default it keeps 2 days worth of backups.
Small Business Server Backup (01).bkf   (Wednesday backup)
Small Business Server Backup (02).bkf   (Tuesday backup)

This week (on Monday) a user completly deleted the contents in the My Docs folder and did not tell me till this AM (thursday). Needless to say i have backups of tuesday night and last night. I do not know how NTBackup handles the existing previous backup file name, i.e. do they delete it , overwrite it ? Any way sto recover the Monday backup? I will be happy to purchase some recovery software if need be (suggestions of software will be appreciated)

There is very little other disk activity on the drive.

Thanks
0
Comment
Question by:earthwing
  • 4
6 Comments
 
LVL 14

Expert Comment

by:theruck
ID: 18002842
there are many utilities to recover deleted files. i often use ontrack easy recovery pro
anyway the more time you wait the bigger is the chance that the deleted file is completely lost as the blocks on the hard drive are going to be more likely rewritten
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18003017
Doh, just wrote a long reply for this then failed when I hit submit.... try again.

Basic suggestion was..... don't think you'll have much luck getting hte file back directly as even one bit overwritten and ntbackup will probably not see the file as Ok to restore from.

Suggested taking a full backup on Monday to full backup.bkf and daily incremental backups appending to daily.bkf

You MAY be in luck if someone has turned on volume shadow copies.  if so go to the properties of the drive on the server itself and look at the shadow copies tab.  If it is turned on your server is keeping snapshot copies of your files as they change.  You can get to those from the server (or a PC once a piece of client s/w is installed) by going to the share (evem on the server) with \\server\share, e.g. \\server\d$ and right click on a dir or file and choose previous file.

http://www.microsoft.com/windowsserver2003/techinfo/overview/scr.mspx

If it isn't on and you have some free disc space suggest you turn it on!

Steve
0
 

Author Comment

by:earthwing
ID: 18007118
Thank I do have shadow copies enabled. However I am concerned that if I run it direct from the server it will move eveythig back to that day. Can any one tell me if I run it if I can pick and choose the files to restore (i.e. my docs folder) only for a specific user?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 43

Expert Comment

by:Steve Knight
ID: 18007140
If you right click the folder (from \\server\share UNC and choose previuous versions it will open up another explorer windows "foldername on dd-mm-yy" effectively.  You can drag and drop to the original location to restore the files you want -- no easy way to just do one users files though unless they are in a known dir.

I like volume shadow copy, has got a lot of people out of trouble when their backups are poor... no full substitute though of course

good luck

Steve
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 250 total points
ID: 18007154
That is not quite right how I have decribed it, once you have previous versions showing, click on the View button and it will show you the folder.

From a MS document that probablt decribes it better:

"To restore a deleted file simply locate the shared folder where the file is stored, right-click an empty part of the folder view and select Properties, and choose the Previous Versions tab (as shown in Figure 6). Next, choose the version you want to restore and click View. A folder containing files eligible for restoration will be displayed. Note that if you choose Restore, you will restore all files in the folder to their shadow copy condition. Finally, copy the file you want to restore into its original folder."
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18022165
Thanks, guess that worked then!

And thanks for taking me over the 150,000 points mark in this area... now for the 300,000 mark!
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Join & Write a Comment

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now