mimi8118
asked on
Unmap server backup drives
I wonder if there is a way to map a drive for Windows server backup, perform the backup, then unmap the drive from the network so things like ransomed are can't find them & encrypt the backup.
Thanks
Thanks
AFAIK, some variants of ransomware can encrypt mapped and unmapped files.
ASKER
We are currently using Windows server backup to network share & it was hit by ransomeware so it was useless. I had a cloud backup that saved our tail although 2 days old. If I create a single backup service user with separate credentials, will that stop the ransomeware from accessing the backup files?? I realize it would make it harder but stop access totally?
Thanks
Thanks
You may want to investigate the command-line net use command. It sounds like it may be what you want.
https://technet.microsoft.com/en-us/library/bb490717.aspx
http://www.howtogeek.com/118452/how-to-map-network-drives-from-the-command-prompt-in-windows/
Still, imo it's a lot safer to plug a USB drive into the system, do the backup, and unplug it.
https://technet.microsoft.com/en-us/library/bb490717.aspx
http://www.howtogeek.com/118452/how-to-map-network-drives-from-the-command-prompt-in-windows/
Still, imo it's a lot safer to plug a USB drive into the system, do the backup, and unplug it.
> If I create a single backup service user with separate credentials, will that stop the ransomeware from accessing the backup files?
That should help, as long as that account is not a vector for the ransomware. If the account is used strictly for the backup service, odds of exposure and thus infection is minimized.
Basically, if any account that has write access to a folder is affected by ransomware, then the folder can be compromised.
You should protect your most likely sources of infection first, i.e. your users.
That should help, as long as that account is not a vector for the ransomware. If the account is used strictly for the backup service, odds of exposure and thus infection is minimized.
Basically, if any account that has write access to a folder is affected by ransomware, then the folder can be compromised.
You should protect your most likely sources of infection first, i.e. your users.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
As for using Windows Server Backup to a Network Share, ensure server has limited number of administrators with proper password and that network share is limited to the backup service account