70-293: MCSE Guide to Planning a Microsoft Windows Server 2003 Network, Enhanced Chapter 14: Problem Recovery

1
70-293 MCSE Guide to Planning a Microsoft
Windows Server 2003 Network, Enhanced Chapter
14 Problem Recovery
2
Objectives

• Back up and restore files
• Recover corrupted systems
• Perform remote management
• Image client computers and servers

3
File Backup and Recovery

• File backup and recovery are an essential part of
  network maintenance
• When data is backed up, you can recover an
  uncorrupt version
• Effective backup and recovery solution includes
• Backup (ntbackup.exe)
• Volume shadow copy

4
The Backup Utility

• When backups are performed, they can be stored on
  tape or in a file
• Tape is more common
• Backup to file is used with nontraditional media,
  such as a floppy disk, hard drive, or CD-R
• The entire backup is stored inside a single file,
  making it easy to copy and move

5
Backing Up Application Data

• Backup utility is part of Windows Server 2003
• Third-party backup solutions are available
• Easier to use
• Have enhanced features

6
File Backup Strategies

• Three backup strategies for daily file system
  backups
• Full
• Incremental
• Differential
• Each time a file is modified, the OS turns on the
  archive attribute of that file
• Each backup strategy uses and affects the archive
  attribute of files differently

7
File Backup Strategies (continued)

• Full backup
• Backs up all selected files each time a backup is
  performed
• Simplest type of backup to implement
• Use the backup tape from the previous day to
  restore
• Archive attribute on each file is turned off
• Primary problem is the large amount of time

8
File Backup Strategies (continued)

• Incremental backup
• Only the files that have changed since the
  previous backup
• Less than 10 the size of a full backup
• Always used in combination with full backups
• Only backs up files with archive attribute turned
  on

9
File Backup Strategies (continued)

• Differential backup
• Files that have changed since the previous full
  backup
• Always used in a cycle that begins with a full
  backup
• Does not turn off the archive attribute on files
  that are backed up
• Is a compromise between full daily and
  incremental
• Differential is much faster to perform than a
  full backup
• Not quite as fast as an incremental backup

10
File Backup Strategies (continued)
11
Activity 14-1 Performing a Backup

• The purpose of this activity is to perform a full
  and an incremental backup

12
Activity 14-2 Performing a Restore

• The purpose of this activity is to Restore a file
  from backup

13
System State Backup

• Backup utility is can backing up system state
  data
• Registry
• COM Class Registration database
• Boot files
• System files
• Use Directory Services Restore Mode to restore
  system state

14
Automated System Recovery

• Backup can perform an automated system recovery
  (ASR) backup
• Is a last resort to recover systems that you have
  not been able to recover using other more common
  tools
• When an ASR backup is performed, all of the OS is
  backed up

15
Volume Shadow Copy

• Volume shadow copy makes copies of files,
  including open files
• Allows users to restore previous versions of
  files without administrator involvement
• A volume shadow copy sets aside disk space to
  store changes to files that have occurred since
  the volume shadow copy was performed
• Only files that have changed take up additional
  disk space

16
Activity 14-3 Configuring and Using Volume
Shadow Copy

• The purpose of this activity is to configure
  volume shadow copy to allow users to restore
  files from the previous day

17
Recovery Tools

• Recovery tools
• Device driver rollback
• Safe mode
• Last known good configuration
• Recovery Console

18
Device Driver Rollback

• Device driver rollback reverts to previous
  version of a device driver at any time after an
  update
• Available through Device Manager

19
Device Driver Rollback (continued)
20
Safe Mode

• Used when a server becomes misconfigured or
  corrupt
• Loads a minimal set of drivers
• Can repair the system by updating drivers,
  reinstalling software, or removing corrupt
  software

21
Activity 14-4 Accessing Safe Mode

• The purpose of this activity is to enter into
  safe mode.

22
Last Known Good Configuration

• Last known good configuration is useful if no
  user has logged on since a change was made
• If a new device driver is installed and the
  system encounters severe errors, then last known
  good configuration can restore registry to before
  the installation
• Does not delete the files associated with the
  driver, but does prevent them from being loaded
  during startup

23
Activity 14-5 Using Last Known Good Configuration

• The purpose of this activity is to use last known
  good configuration to restore service and driver
  settings.

24
Recovery Console

• Recovery Console allows you to access system
  settings and files when Windows cannot be started
• Useful when safe mode and last known good
  configuration are not effective
• Recovery Console can perform disk management
• Can re-create the master boot record on the hard
  drive and the boot sector on the active partition

25
Activity 14-6 Installing and Using Recovery
Console

• The purpose of this activity is to install and
  use Recovery Console

26
Remote Management

• Terminal Services lets users connect to a remote
  computer and run applications remotely
• Users must have client software installed on
  their workstations to connect to a terminal
  server
• Client software on the workstations creates a
  desktop environment based on screen draw commands
• Much more efficient for remote access than a VPN

27
Remote Desktop for Administration

• Remote Desktop for Administration allows up to
  two users at a time to administer a server
  remotely using Terminal Services
• All server features can be accessed just as if
  you were sitting at the server console

28
Remote Desktop for Administration (continued)
29
Remote Desktop for Administration (continued)
30
Activity 14-7 Using Remote Desktop for
Administration

• The purpose of this activity is to use Remote
  Desktop for Administration to remotely connect to
  a server

31
Remote Assistance

• Remote Assistance is for users to ask experts for
  help
• In a corporate setting, the experts are normally
  the help desk or application support specialists

32
Activity 14-8 Using Remote Assistance

• The purpose of this activity is to use Remote
  Assistance to request help

33
Imaging Client Computers and Servers

• Imaging installs an entire OS in one step
• Software takes a copy of an entire hard drive or
  partition and stores it as a file
• Contents of the file are copied onto a client
  computer
• Time required is much less than for full
  application and OS installation

34
Imaging Client Computers and Servers (continued)

• Windows Server 2003 includes a solution for
  imaging called RIS (Remote Installation Services)
• A number of third-party imaging solutions, such
  as Norton Ghost, are also available

35
Remote Installation Services

• RIS can install Windows Server 2003, Windows XP,
  and Windows 2000
• Both RIPrep images and flat images are supported
• RIPrep image is a fully installed OS and
  applications
• Can be installed in 10 minutes or less depending
  on its size

36
Remote Installation Services (continued)

• To create a RIPrep image
• Install OS
• Install and configure applications
• Run RIPrep.exe takes an image of the local
  computer and copies to the RIS server
• RIS server stores the image on its local hard
  drive
• A flat image is a scripted installation of the OS
• Requires 45 to 90 minutes
• Applications are not automatically installed

37
RIS Server Requirements

• Can install RIS server on any hardware that meets
  the requirements for Windows Server 2003, except
• RIS server cannot be multihomed
• RIS server must have a 4-GB volume, which is not
  the system or boot volume
• The volume holding RIS must be an NTFS volume
• The recommended speed for the network in RIS
  servers is at least 100 Mbps

38
RIS Client Requirements

• RIS client must
• Meet minimum hardware requirements for OS
• Have a Pre-Boot eXecution Environment (PXE) boot
  ROM version 1.00 or greater to connect to the RIS
  server

39
RIS Network Services

• Services required by RIS are DHCP, DNS, and
  Active Directory
• DHCP provides an IP address and configuration
  information to the RIS client
• DNS locates a domain controller and authenticates
  to Active Directory
• Active Directory identifies prestaged computers,
  creates computer accounts, and authenticates users

40
The RIS Imaging Process

• After RIS client gets a reply to its service
  request, it downloads a bootstrap program from
  the TFTP (Trivial FTP) service on the RIS server
• startrom.com is downloaded by default
• Displays a message to press F12 to perform a
  network installation
• If F12 is not pressed after three seconds, the
  boot process continues to the next device such as
  a hard drive

41
The RIS Imaging Process (continued)

• If the user presses F12, then the Client
  Installation Wizard is downloaded via TFTP from
  the RIS server
• Client Installation Wizard gets user to
  authenticate
• If the account has not been prestaged, the user
  performing the imaging needs permission to create
  computer accounts in Active Directory
• User selects an image to install

42
Third-party Imaging Utilities

• Using third-party imaging software is similar to
  using RIPrep images with RIS
• OS is installed
• Applications are installed
• Sysprep is run to prepare the computers for
  imaging
• Third-party imaging software is used

43
Summary

• Full backups turn off the archive attribute
• Incremental backups back up daily changes and
  turn off the archive attribute
• Differential backups back up all files that have
  changed since last full backup and do not affect
  the archive attribute of files that are backed up
• A system state backup backs up the system state
  data
• ASR backup takes a copy of the OS and creates a
  floppy disk for the disaster recovery process

44
Summary (continued)

• Volume shadow copy takes a snapshot of files
• Device driver rollback restores previous version
  of a device driver
• Safe mode starts the OS with limited services
• Last known good configuration restores the part
  of the registry responsible for service and
  driver configuration

45
Summary (continued)

• Recovery Console allows you to access files and
  systems settings when Windows cannot be started
• Windows Server 2003 includes Remote Desktop for
  Administration
• RIS (Remote Installation Services) images and
  installs Windows Server 2003, Windows XP, and
  Windows 2000