544
this command saves lives (thelemmy.club)
submitted 5 months ago by to c/linuxmemes@lemmy.world
46 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 119 points 5 months ago (5 children)

Real sys admins know this pain (rm suffers no fools) and accept the consequences of recovering from backups as pennance. No backups? Then you aren't really a sys admin then, are you?

  • permalink
  • fedilink
  • source
  • hideshow 10 child comments
    •
  • [–] 63 points 5 months ago* (2 children)

    Once I had to restore an entire organization from shadow copies because the IT director didn’t believe in off-site backups or using endpoint protection. The whole network got a ransomware that included the backups, but did not include the shadow copies on the main file server.

    At least I got to help them build a disaster recovery procedure, and pick out a new EDR.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 17 points 5 months ago (2 children)

    Are shadow copies like snapshots?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 23 points 5 months ago* (2 children)

    Yes, they are essentially file snapshots. Shadow copies in a Microsoft environment at least are basically file history without using file history. So when you modify a file when it's enabled, it makes a copy of the last version of the file.

    But since it's not meant to be a actual backup solution, it's meant to be on a file-by-file basis. I think that means they had to go through and manual restore n a file by file basis

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 16 points 5 months ago (1 child)

    If I remember correctly, we were able to restore folders from the shadow copies. I certainly didn’t go file by file. I might have used a tool to do it. But as you pointed out, it’s not a proper backup so we had to do quite a bit of reconciliation to make sure we restored everything and document anything we couldn’t restore.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 5 months ago (1 child)

    Yeah, shadow copies on Windows servers are snapshots of files. They allow users to see previous versions of a file.

    It’s not really intended as a backup solution on its own, but some backup software does use the volume shadow copy service (VSS) to perform backups on Windows servers.

    I was basically restoring files from this prompt in Windows.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •