Solved

Recovery of a ntbackup file

Posted on 2006-11-23
6
252 Views
Last Modified: 2012-05-05
I have a default ntbackup running on a SBS 2003 box backing up to a hard drive. By default it keeps 2 days worth of backups.
Small Business Server Backup (01).bkf   (Wednesday backup)
Small Business Server Backup (02).bkf   (Tuesday backup)

This week (on Monday) a user completly deleted the contents in the My Docs folder and did not tell me till this AM (thursday). Needless to say i have backups of tuesday night and last night. I do not know how NTBackup handles the existing previous backup file name, i.e. do they delete it , overwrite it ? Any way sto recover the Monday backup? I will be happy to purchase some recovery software if need be (suggestions of software will be appreciated)

There is very little other disk activity on the drive.

Thanks
0
Comment
Question by:earthwing
  • 4
6 Comments
 
LVL 14

Expert Comment

by:theruck
ID: 18002842
there are many utilities to recover deleted files. i often use ontrack easy recovery pro
anyway the more time you wait the bigger is the chance that the deleted file is completely lost as the blocks on the hard drive are going to be more likely rewritten
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18003017
Doh, just wrote a long reply for this then failed when I hit submit.... try again.

Basic suggestion was..... don't think you'll have much luck getting hte file back directly as even one bit overwritten and ntbackup will probably not see the file as Ok to restore from.

Suggested taking a full backup on Monday to full backup.bkf and daily incremental backups appending to daily.bkf

You MAY be in luck if someone has turned on volume shadow copies.  if so go to the properties of the drive on the server itself and look at the shadow copies tab.  If it is turned on your server is keeping snapshot copies of your files as they change.  You can get to those from the server (or a PC once a piece of client s/w is installed) by going to the share (evem on the server) with \\server\share, e.g. \\server\d$ and right click on a dir or file and choose previous file.

http://www.microsoft.com/windowsserver2003/techinfo/overview/scr.mspx

If it isn't on and you have some free disc space suggest you turn it on!

Steve
0
 

Author Comment

by:earthwing
ID: 18007118
Thank I do have shadow copies enabled. However I am concerned that if I run it direct from the server it will move eveythig back to that day. Can any one tell me if I run it if I can pick and choose the files to restore (i.e. my docs folder) only for a specific user?
0
Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

 
LVL 43

Expert Comment

by:Steve Knight
ID: 18007140
If you right click the folder (from \\server\share UNC and choose previuous versions it will open up another explorer windows "foldername on dd-mm-yy" effectively.  You can drag and drop to the original location to restore the files you want -- no easy way to just do one users files though unless they are in a known dir.

I like volume shadow copy, has got a lot of people out of trouble when their backups are poor... no full substitute though of course

good luck

Steve
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 250 total points
ID: 18007154
That is not quite right how I have decribed it, once you have previous versions showing, click on the View button and it will show you the folder.

From a MS document that probablt decribes it better:

"To restore a deleted file simply locate the shared folder where the file is stored, right-click an empty part of the folder view and select Properties, and choose the Previous Versions tab (as shown in Figure 6). Next, choose the version you want to restore and click View. A folder containing files eligible for restoration will be displayed. Note that if you choose Restore, you will restore all files in the folder to their shadow copy condition. Finally, copy the file you want to restore into its original folder."
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18022165
Thanks, guess that worked then!

And thanks for taking me over the 150,000 points mark in this area... now for the 300,000 mark!
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This Micro Tutorial demonstrates using Microsoft Excel pivot tables, how to reverse engineer competitors' marketing strategies through backlinks.

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now