Solved

Recovery of a ntbackup file

Posted on 2006-11-23
6
253 Views
Last Modified: 2012-05-05
I have a default ntbackup running on a SBS 2003 box backing up to a hard drive. By default it keeps 2 days worth of backups.
Small Business Server Backup (01).bkf   (Wednesday backup)
Small Business Server Backup (02).bkf   (Tuesday backup)

This week (on Monday) a user completly deleted the contents in the My Docs folder and did not tell me till this AM (thursday). Needless to say i have backups of tuesday night and last night. I do not know how NTBackup handles the existing previous backup file name, i.e. do they delete it , overwrite it ? Any way sto recover the Monday backup? I will be happy to purchase some recovery software if need be (suggestions of software will be appreciated)

There is very little other disk activity on the drive.

Thanks
0
Comment
Question by:earthwing
  • 4
6 Comments
 
LVL 14

Expert Comment

by:theruck
ID: 18002842
there are many utilities to recover deleted files. i often use ontrack easy recovery pro
anyway the more time you wait the bigger is the chance that the deleted file is completely lost as the blocks on the hard drive are going to be more likely rewritten
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18003017
Doh, just wrote a long reply for this then failed when I hit submit.... try again.

Basic suggestion was..... don't think you'll have much luck getting hte file back directly as even one bit overwritten and ntbackup will probably not see the file as Ok to restore from.

Suggested taking a full backup on Monday to full backup.bkf and daily incremental backups appending to daily.bkf

You MAY be in luck if someone has turned on volume shadow copies.  if so go to the properties of the drive on the server itself and look at the shadow copies tab.  If it is turned on your server is keeping snapshot copies of your files as they change.  You can get to those from the server (or a PC once a piece of client s/w is installed) by going to the share (evem on the server) with \\server\share, e.g. \\server\d$ and right click on a dir or file and choose previous file.

http://www.microsoft.com/windowsserver2003/techinfo/overview/scr.mspx

If it isn't on and you have some free disc space suggest you turn it on!

Steve
0
 

Author Comment

by:earthwing
ID: 18007118
Thank I do have shadow copies enabled. However I am concerned that if I run it direct from the server it will move eveythig back to that day. Can any one tell me if I run it if I can pick and choose the files to restore (i.e. my docs folder) only for a specific user?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 43

Expert Comment

by:Steve Knight
ID: 18007140
If you right click the folder (from \\server\share UNC and choose previuous versions it will open up another explorer windows "foldername on dd-mm-yy" effectively.  You can drag and drop to the original location to restore the files you want -- no easy way to just do one users files though unless they are in a known dir.

I like volume shadow copy, has got a lot of people out of trouble when their backups are poor... no full substitute though of course

good luck

Steve
0
 
LVL 43

Accepted Solution

by:
Steve Knight earned 250 total points
ID: 18007154
That is not quite right how I have decribed it, once you have previous versions showing, click on the View button and it will show you the folder.

From a MS document that probablt decribes it better:

"To restore a deleted file simply locate the shared folder where the file is stored, right-click an empty part of the folder view and select Properties, and choose the Previous Versions tab (as shown in Figure 6). Next, choose the version you want to restore and click View. A folder containing files eligible for restoration will be displayed. Note that if you choose Restore, you will restore all files in the folder to their shadow copy condition. Finally, copy the file you want to restore into its original folder."
0
 
LVL 43

Expert Comment

by:Steve Knight
ID: 18022165
Thanks, guess that worked then!

And thanks for taking me over the 150,000 points mark in this area... now for the 300,000 mark!
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question