I have a server 2003 not AD that runs as a file server for one application only. The application directory is self contained and only consists of approx 4gb data that does not grow in size.
This directory can be dragged and dropped into another computer and complete functionality comes with it.
I am after peoples opinions on using HDD vs DVD-r for backup my argument is that DVD-r is better in this scenario considering data requirements and the ease of transferring the program to another machine (even if only temp) and
1. Data damage caused by virus etc can also infilitrate the external HDD and cause damage to this data
2. this system was previously hacked due to weak passwords and again data was deleted from the HDD but staff member forgot to place disc in drive for backup. data was deleted from hdd but previous backups existed on DVD
The customer want to move to HDD backup but does not want to invest too much money in a system - my argument is that the current way of backup to DVD is the safest ie non-appendable-non re writable media.
additionally IP filtering for RDP was implemented, my argument here is that if they do not implement strong passwords/policy and someone spoofs the ip addresses they will still gain access to this server.
what do you guys think - opinions welcomed