File Protection

Backup Considerations

Before creating a backup job, it is important to understand what backup and restore options are available. This section provides guidance on some key considerations.

Exchange VM Detection

If your backup job contains a Hyper-V guest with an Exchange Server, the authentication information for that guest should be entered into the Exchange VM Detection tab on the Selection screen when you create the backup job. With these credentials, BackupAssist can detect what guests have an Exchange Server, and list the EDB file available for each guest when you perform a restore using the Exchange Granular Restore console.

The Exchange VM Detection tab will appear when the Hyper-V role is installed and running on the server. If you are backing up multiple Exchange guests, each one should have the same username and password.

The Hyper-V process is automated but the restore requires both the Exchange Granular Add-on and the Hyper-V Advanced Add-on licenses.

Restore vs. Recovery

A restore is the process of accessing a backup and restoring it to the original (or a new) location, if your data is lost, corrupted or if you want an earlier version of that data. However, if your computer cannot start itself, you may need to perform a recovery.

A recovery is the process by which a computer is recovered after hardware has been replaced or an operating system failure has occurred, and your computer can no longer start itself. To perform a recovery you need a bootable media to start your computer, and an image backup that the bootable media can use to recover your operating system, data and applications.

File Protection can be used to back up and restore your data, but if you want to be able to recover your computer, the following should be considered when planning your backup strategy:

• RecoverAssist bootable media : BackupAssist's Recover tab can be used to create a customized, bootable recovery media. This media will start your computer and load a recovery environment that can access an image backup to recover your computer.

RecoverAssist can be used by Windows 7, 8, Server 2008/12 and SBS 2008/11 computers.

• Bare-metal backup : A BackupAssist System Protection backup can create a bare-metal image of your computer that RecoverAssist can use to recover your operating system and data.

System Protection creates an image backup for Windows 7, 8, Windows Server 2008/12 and SBS 2008/11 computers.

For more information on data recovery, see the System Recovery user guide.

BackupAssist Settings

When creating a backup job, there are some global settings that should be configured in BackupAssist. If they are not configured, you will be prompted to complete them during the creation of your first backup. It is recommended that this is done in advance.

BackupAssist's settings can be entered and modified using the selections available in the Settings tab. Clicking on the Settings tab will display the selections as icons. Four of these are used when creating new a backup job and each one is described below:

Backup user identity

Backup jobs require an administrator account with read access to the data source, and full read-write access to the backup's destination. It is recommended that a dedicated backup account is created for this purpose. The account's details are entered using this menu item, and your backup jobs will be launched using these credentials. The account's permissions will be validated both when the backup user identity is entered and when the job is executed. If no account is specified or the account has insufficient permissions, the backup job will fail and note the error in the backup report.

A video explaining the creation of a backup user identity can be found on our, Videos Webpage.

Email server settings

This menu item is used to enter the details of the SMTP server used by BackupAssist to send email notifications. The SMTP server must be configured if you want to have an email Notifications step included step included when you create a backup job.

Email address list

This menu item is used to define and store the email addresses of potential notification recipients. The list will be used to populate the recipient selection screen when configuring an email notification for a backup job. Any email addresses entered during the creation of a new notification are automatically added to the Email address list.

Network paths

This option allows you to enter access credentials for networks, domains and drives that the default account (specified in the Backup user identity) does not have access to. Enter or browse to the location and add it to the Path list. The Edit option will allow you to enter an authentication account, specifically for that path. When you create a backup job to a remote location, that location will be automatically added here.

Having multiple connections to a resource using the same logon credentials can generate a Windows error, such as the BA260 NAS error. It is therefore recommended that you avoid having mapped shares on the computer running BackupAssist that are the same as the paths configured in BackupAssist.

Creating a File Protection Backup

The following instructions describe how to create a backup job using BackupAssist File Protection.

Launch BackupAssist and follow the steps outlined below:

1. Select the Backup tab, and click Create a new backup Job

2. Select File Protection

If this is the first time you have created a backup job, you will be asked to provide a Backup user identity. See the section above, BackupAssist settings, for guidance.

3. Selections

The selections screen is used to select the data and applications that you would like to back up. Any VSS applications detected will be displayed here as application directory containers.

An Exchange VM Detection tab will be available if you are backing up an Exchange VM guest. To learn more about this feature, see the Backup Considerations section.

Select the volumes, folders, files and applications that you want to back up, and click Next.

4. Destination media

The destination screen is used to select the type of media that you want to back your data up to. This step’s name will change to the media type selected, when you click next.

1. Select a device for your backup destination.
2. Select an encryption type if you want to encrypt your backup.

BitLocker encryption is available on Windows Server with External disk or RDX drive destinations. BitLocker will encrypt the destination media. To learn about BitLocker, see our BitLocker resource page.

3. Click Next.

To back up to an Rsync destination, refer to the File Protection using Rsync guide.

5. Schedule

This screen is used to select when and how you would like the backup job to run, and how long you would like the backup to be retained for. A selection of pre-configured schedules, called schemes, will be displayed.

• The schemes available will depend on the type of destination media selected in step 4.
• Clicking on a scheme will display information about the schedule used.
• The schedule can be customized after the backup job has been created.

Select an appropriate scheme, and click Next.

For more information about creating custom schedules, refer to the Backup tab user guide.

6. Set up destination

This screen is used to configure the location of the media selected in step 4.

The options presented will change with the type of media selected.

If you are using a Local media & Local network destination, a Check destination button will be available to check your backup destination for possible problems. After the checks have been completed, the results can be viewed by selecting the Report link. If you are using Removable media destinations, these checks are performed when you select Prepare on the Prepare Media step.

Configure your backup destination, and click Next.

Set up destination screen

• If your media is removable, you can set the media to eject after the backup job has finished.
• If your media is a removable drive, you can select either Mirror or Backup-with-history for the replication mode. For non-removable media, the mode is determined by the scheme in step 5.

Note: It is important that you keep a copy of your password in a safe place, as we cannot retrieve passwords if they are lost or forgotten.

Mail Server: If you have not configured an SMTP mail server for BackupAssist, you will be prompted to provide those details after the backup destination step has been completed. See the BackupAssist settings section for guidance.

7. Notifications

Once a backup job has completed, BackupAssist can send an email to inform selected recipients of the result. This email notification can be enabled during the creation of a backup job, if the mail server has been configured.

To enable email notifications:

a. Select, Add an email report notification.

b. Enter recipients into the Send reports to this email address field.

c. Enter recipients into the Also send reports to this email address field.

d. Select the condition under which the email should be sent, using the drop-down box.

After the backup job has been created, you can modify the notifications by adding and removing recipients, setting additional notification conditions and including print and file notification types.

To learn more about notification options, see the Backup tab user guide.

8. Pepare media

If you selected a portable media device as your backup destination, you will be given the option to prepare and label the media. The label allows BackupAssist to recognize the media and ensure that the correct media is being used on the correct day.

For example, if you put an RDX drive in on Tuesday but it was labelled Wednesday, BackupAssist will warn you that the incorrect media has been detected.

To enable media detection:

a. Select, Let BackupAssist keep track of your media.

b. Select what you would like BackupAssist to do, if the wrong media is inserted.

c. Select what you would like BackupAssist to do, if new or unrecognized media is inserted.

BackupAssist will display all removable media that are currently attached, along with a text field and drive designation drop-down box, which can be used to provide a label for the media.

Set up destination screen

To prepare your media:

a. Enter the name and drive designation to be used for each media device listed.

b. Select Prepare for each media device listed.

Selecting Prepare labels the backup media and adds a link to a Destination Check report. The report will advise if any problems were detected with the backup media.

If you are using BitLocker, refer to the BitLocker resource page for disk preparation guidance.

7. Name your backup

Provide a name for your backup job, and click Finish.

Your File Protection backup job has now been created.

Important: Once a backup job has been created, it should be reviewed and run using the Manage menu. This menu provides additional options to configure your backup. See the section, File Protection backup management, for more information.

Important: Once the backup has been created, it should be checked. You can check the backup by performing a manual test restore, or using the Backup Verification feature.

Restoring from a File Protection Backup

The Restore tab displays the restore options available. This section provides instructions on how to use the Local and Network Files restore option, which is used to restore files and folders and VSS applications that do not have their own specific restore option.

The other restore options are documented in technology specific guides, as follows:

• For Hyper-V Host File and Hyper-V Granular restore, see the Hyper-V Protection guide.
• For SQL Server and SQL Point-in-Time restores, see the SQL Protection guide
• For Exchange Server and Exchange Granular restores, see the Exchange Protection guide

To restore data from a File Protection backup, follow these steps:

1. Select the Restore tab

The Restore tab has a Home page and a Tools page. The Home page is the default page and the recommended starting point for performing a restore. The Tools page should only be used by experienced administrators or users being assisted by technical support.

2. Select Local and Network Files

This will display the volumes backed up by this installation of BackupAssist. It can also show backups from other machines added using the Discover Backups button, which is explained below.



Backup selection

Expand a volume to display all of the backups available for that volume. There are tabs above each volume’s backup list to help locate the required backup.

• The Last 7 days and Last 30 days tabs can be used to display the backups within those ranges.
• The Custom tab allows you to select a specific date range and display backups for that period.

The Search button allows you to locate files to restore across multiple backups. When you select Search, the Restore console will display the Search page.


1. The Backups section allows you to use the Jobs Filter, to limit the search to specific backup jobs. You can also use the Backup Date filter search within a specified date range.
2. The Search section is used to enter a search term associated with the name of the file you want to find. The Search for field will take the string provided and search for occurrences of that string within a file or directory name. The results of the search are displayed by backup. To perform a restore, select the file or files that you want to restore and select the Restore button.

   To refine the search, use the Created, Modified and Size options. Ticking any of these options will activate a drop down list of variables to select from. For Created and Modified, you can select a date using the Calendar selection fields. For Size, you can select the file size in bytes.

The Discover Backups button allows you to browse for backup catalogs created by deleted jobs and other servers. Selecting those backups will add them to the list of available backups.

3. Select the backup that you want to restore from

Clicking on a backup’s name will open the Integrated Restore Console (IRC). The Integrated Restore Console is used to select the data to be restored, where to restore it to and the restore conditions.

Select the files, folders or applications that you want to restore



Integrated Restore Console

• Use the left pane to locate and select the data that you want to restore.
• The right pane will display the contents of the folder selected in the left pane.
4. Select Where to restore the data to

Follow these steps to select the restore destination and restore options:

1. Under Where to restore select To original location or To Specific location.
2. Use the Browse button to locate and select the restore destination.
3. Use the drop down box to set the overwrite rules. The overwrite rules will apply if the files being restored encounter files with the same name in the restore destination.

You can select:

• Overwrite existing files - The restored files will overwrite files in the restore destination.
• Do not overwrite existing files – The restored files will not overwrite files in the restore destination. This means the files will not be restored.
• Only overwrite older files - If a source file has changed since the backup was made it will not be overwritten.
4. Review the Restore NTFS security attributes option

If you select this option, the NTFS security attributes the file had when it was backed up will be retained when the file is restored. The NTFS security attributes can be viewed in the Security tab on the file’s Properties

5. Review the Take ownership of restored files option

Selecting the Take ownership of restored files tick box will give the current user ownership of the restored files. The user is shown to the right of the text box description.

5.  Select Restore


Integrated Restore Console

When you select the Restore button, the restore process will begin. The Integrated Restore Console will display information about the restore job and provide status updates as the job runs.

Selecting List all processed files and folders … will open notepad and display a list of the files restored, including their full path.

Encrypted backups

If your backup is encrypted, you’ll be prompted for the encryption password when the restore job tries to access the backup. It is important that you keep a copy of your password in a safe place, as we cannot assist you with opening password encrypted files if your password is lost or forgotten.

If you encrypted the backup using BitLocker, you can use the password or encryption key to unlock the drive by connecting the flash drive. BackupAssist will use the key to unlock the drive that you are restoring from. You will not be prompted to do anything other than the normal restore steps.

6. Select Done

Once the restore has finished, selecting Done will return you to the main UI.

Your File Protection restore has now been completed.

Helpful hint:If you do not have BackupAssist installed and need to restore a File Protection backup, you can browse to the location of your backup using Windows Explorer and copy the required files to any location, as long as the files are not encrypted.

File Protection Backup Management

Once you have created a backup job, you can modify the settings and access advanced configuration options using the management screen.

To access the backup management screen:

1. Select the BackupAssist, Backup tab.

2. Select Manage from the top menu. A list of all backup jobs will be displayed.

3. Select the backup job, and then select Edit.

4. Select the required configuration item on the left. Key configuration screens are described below.

To learn more about the backup management options, see the Backup tab user guide.

Destination: Enabling single-instance store

Removable media backups created with the Backup-with-history mode selected can be configured to use single-instance store, so that only one unique copy of each file is stored on the backup destination. Single-instance store is enabled by default. Backups cannot use single-instance store when the backup is saved on a ReFS formatted destination (e.g. Windows Server 2012).

To modify this setting:

a. Select Destination from the left menu and expand Replication Mode Options.

b. Check the option, Use the single-instance store.

Manage backup - Removable media, destination screen

Replication options: Preserving NTFS file attributes

BackupAssist File Protection is able to preserve certain NTFS file attributes set on the original source files. To maintain NTFS file attributes you should choose a backup destination formatted using NTFS. Preservation of NTFS attributes is enabled by default on destinations that support it.

a. Select Replication options from the left menu and expand, File Replication options.

b. Check the option, Copy NTFS security attributes and alternate data streams.

You can also disable warnings that may appear in the backup report if the destination does not support NTFS attributes under the File Attribute Warnings heading.

Scheduling

Selecting Scheduling will display the Scheduling options. You can use this screen to change the default time and days of your scheme's daily backups. If you selected a scheme with archive backups (e.g. weekly, monthly), you can specify when each archive backup will run. The current scheme is shown, along with two pop-up menus: Select a new schedule and Customize schedule.

Select a new Schedule: This will display the pre-configured backup schemes that you chose from during the creation of your backup job. The selections available will depend on the type of destination media you have selected. You can select a different scheme using this option.

Customize schedule: This selection can be used to modify each backup within your current schedule. The customizations available will depend on the type of backup media used. For File Protection backups, the Method field can only be set to Automatic. This is because single instance store provides the benefit of incremental backups in a full backup format. This technology is managed by BackupAssist and does not require further modification.

For additional information on the Scheduling screen, please refer to the Backup tab user guide.

Files and applications

The Volume Shadow Copy Service (VSS) is a Microsoft Service that creates a copy of an application's data (e.g. Exchange and SQL) so the data can be backed up without interfering with the application. BackupAssist is a VSS-aware backup client, so it can backup application data using the VSS copy. BackupAssist will automatically detect locally running VSS applications and list them for selection during the Destination step of the backup job creation.

VSS applications are displayed under the Files and applications menu item. You can modify your backup job by selecting entire VSS applications or drilling down to individual components. In some cases, only applications that are currently running will be detected. If an application is not listed, try re-starting it and then click the Refresh button in BackupAssist.

If your backup job contains a Hyper-V guest with an Exchange Server, the authentication information for the guest should be entered into the Exchange VM Detection tab. Select the File and applications > Exchange VM Detection tab. With these credentials, BackupAssist can detect what guests have an Exchange Server, and list the EDB file available for each guest when you perform a restore using the Exchange Granular Restore console.

The Hyper-V process is automated but the restore requires both the Exchange Granular Add-on and the Hyper-V Advanced Add-on licenses.

Open files: VSS writers

If you selected a VSS application, it is recommended that you disable the Enable VSS writers option. If a VSS application is detected, the Volume Shadow Copy Service and Enable VSS writers options will be selected by default. VSS writers contact all applications before and after a backup. This process is slow and can cause the VSS application to register that a backup has been completed when it has not.

File Protection Backup Report

BackupAssist File Protection reports are very similar to those created from other backup engines. Some sections, however, are unique to File Protection and explained in greater detail below.

The File Replication section of the backup report, outlines how much data was backed up, how many files were backed up and includes details about single-instance store (if enabled).

The details outlined in the File Replication section include:

• Total file count : The total number of files that were selected for backup.
• Files copied : The actual number of files copied during the backup. If no files have been modified or no new files have been added since the last backup, BackupAssist will not copy them to your backup destination.
• Files where no copy required : If single-instance store is enabled, files that have not been changed since the last successful backup do not need to be copied to your backup destination.
• Total size : The total size of a full backup (i.e. all files selected for backup).
• Size of files copied : The amount of data that actually needed to be copied for this backup (i.e. new or modified data not already present at the backup destination).
• Size of files where no copy required : The total size of the files that did not need to be backed up due to single-instance store.

File Protection backup report

The Media Usage section of the backup report provides a list of File Protection backups stored at the backup's destination. This list can help you determine the number of backups stored on a device that you can restore from, and monitor the amount of free space available.