Windows Server Backup (Windows 2008 and SBS2008)

November 10th, 2008 by Paul Sterley | Filed under In the Windows Box, Windows Server.

Windows Server Backup
I took some brief notes on the subject a while back when I attended a Windows 2008 class. It seemed oddly devoid of features. I was hoping that SBS2008 would add some functionality to it, but I was disappointed. Perhaps Microsoft has been under a lot of pressure from third-party backup software vendors, who wanted the built-in backup software to be less appealing.

Update: I have since learned that there is an important difference in the SBS2008 implementation of Windows backup: SBS will decide for itself whether to run a full or differential backup, which is very useful. In Windows Server 2008, you must go back into the configuration after running your first full backup, and change the backup type to incremental, where it will stay.

Microsoft summarizes Windows Server Backup very well, as follows:
Windows Server Backup is intended for use by everyone who needs a basic backup solution-from small business owners to IT professionals in large enterprises. However, the design makes it especially well-suited for smaller organizations or individuals who are not IT professionals.

Reading between the lines, we can understand this to mean: “Use this built-in stuff to get the job done in a pinch, but if you want the usual backup software whiz-bang features, buy something else.

Not all bad, though:
You are probably familiar with Volume Shadow Copy. Maybe you’ve used it to get some files back without having to put a tape in the drive. Maybe you’ve even wished you could store that information on a separate disk, and have more granular control over when it runs. Well, that’s pretty much what you have here. Basically, the built-in backup is very good for keeping a local copy of your data that will do in a pinch – but you’ll want to be sure to have an offsite backup with a good rotation schedule as well. Don’t keep all of your eggs in this basket.

Microsoft has this to say about how the data is backed up and stored:
“Windows Server Backup uses Volume Shadow Copy Service (VSS) and block-level backup technology to back up and recover your operating system, files and folders, and volumes. After the first full backup is created, you can configure Windows Server Backup to automatically run incremental backups by saving only the data that has changed since the last backup. Even if you choose to always perform full backups, your backup will take less time than it did in earlier versions of Windows.”

For completeness, I might add that when you do a manual one-time backup, it writes to a VHD file.

Online References:
Here is Microsoft’s official word on Windows Server Backup:
http://technet.microsoft.com/en-us/library/cc770266.aspx

I found an article on the intertubes that describes WSB (Windows Server Backup) from an outside perspective in pretty good detail.
http://searchwinit.techtarget.com/tip/0,289483,sid1_gci1324328,00.html

Here is a command reference for the WBadmin utility:
http://technet.microsoft.com/en-us/library/cc754015.aspx
Powershell is also supported, though I did not find a direct link for that.

Since there are such good articles available, this description will focus on the key points that I found most noteworthy:

  • There is no tape drive support.
  • You can run backups to a UNC path or DVD drive, but only a manual one-time full backup.
  • I can only imagine the DVD drive being useful for a one-time system state backup.
  • WSB will only do the full/incremental cycle on a dedicated local disk, whether that be an internal hard disk, USB mass storage device, eSATA, etc.
  • When you prepare the locally attached device for scheduled backups, it is formatted by Windows Backup, and you cannot use it for anything but backups. The drive letter is removed. You can add a drive letter back to it, but when you try to open it, you get “Access is denied”. The security tab shows Administrators having full control, but you can’t access it.
  • You cannot exclude individual files/folders. You select things to back up at the volume level only. The command-line mode does offer a way to back up the system state only (see the command line reference above). Restoring gives you options for restoring individual files/folders, “Applications” (Exchange and SharePoint, for example), and entire volumes. You can restore them locally, or to another server.

2008 Backup uses a set of full, plus incremental backups.

The backup of my C drive in my test environment was fairly quick. It took about 10 minutes to back up 26GB of OS data, resulting in a VHD file that was roughly 13GB. Of course, a fresh lab machine always seems faster than production machines. When I went into the recovery area, all folders seemed to be present. The backup status detail showed that it used 13.82GB of space for that backup. That seems right for a bare-bones SBS 2008 installation (23GB uncompressed). The next two backups used 70MB of space, followed by 46MB of space. I’d done nothing except look around in the backup software. WSB will manage the space on the disk itself, deleting old backups to make room for new ones. it seemed pretty smart about knowing when to make a full and when to make an incremental backup. I performed a couple of one-time backups to USB disk – one was a “copy” (didn’t reset the archive attribute), and the other was a normal backup. WSB reacted appropriately on the next backup run in each case. Update: It is only SBS 2008 which intelligently handles full vs incremental backups. In Windows Server 2008, you must manage this manually.

When doing an individual file/folder recovery, WSB will refuse to write the files back to the original location if there is a system file anywhere in the selections. Since it considers desktop.ini to be a system file, this can get in the way quite often. You can work around this by restoring to an alternate location, with security, and move the files to their proper location afterward.

Here’s a brief comparison to StorageCraft’s ShadowProtect:

Windows Server Backup will do nearly as well as ShadowProtect. There is not quite as much flexibility, and there is no provision for media rotation to handle offsite backups – but if those are being handled by some other process, WSB will do a good enough job of local backup and restore. The log information and alerting features are not as good in WSB as they are in SP.

  ShadowProtect Windows Backup
Volume Level Backups Yes Yes
Block Level Backups/Deltas Yes Yes
File/Folder Level Exclusions No No
Scheduling Granularity 15 mins 30 mins
Control over Retention Period Yes No
Scheduled Backups to Network Yes No
Scheduled Backups to USB Yes No
Convert Backup Files to VM Yes No
Application Recovery No Yes
Tape Drive Support No No
Uses Volume Shadow Copy Yes Yes
Back Up System State Only No Yes
Hardware Independent Restore Sort Of Sort Of
Bootable Recovery Environment Yes Yes
Cost $500 “Free”

Tags: , , , , , , ,

8 Responses to “Windows Server Backup (Windows 2008 and SBS2008)”

  1. lovemyguitar | 27/11/08

    I’m very disapointed with microsoft. Backup is the most crucial job a file server must perform, and they simple ignored that in 2008. what is the solution? i cannot go and test every backup software on the market, ntbackup was simple and functional.

  2. Paul Sterley | 27/11/08

    lovemyguitar:

    I’m sure that many people feel the way you do about this. There is another side of the coin though. NTBackup did not support block-level backups, and thus was not very efficient. Also, dealing with incrementals was difficult, a very manual process. As a result, we never used incrementals – always full every night, or differential. When using these with non-rotating B2D storage, it was difficult to maximize backup history without runnig out of space. A system that uses block-level backups, manages incrementals for you, and creates its own rotation based on available space is very attractive. I do wish they had left the granularity in there, but I suspect that the removal had something to do with the way backups are done now, at the block level.

    What is the solution? Well, unfortunately, if you require more features, the solution is to evaluate what is on the market. You don’t have to test each one. You can weed most of them out by reading reviews and looking at feature sets and pricing. Narrow it down to a half-dozen, and test those.

  3. Matt Harding | 11/08/10

    Wondering if you can answer a simple question; I’ve prepared 6 disks for backups in SBS 2008.

    If they are used in succession (mon, tue, wed…); will the server write a full set to the first, then differential data to each subsequent disk(?); or will it always start with a full backup on a new disk?

    I’m hoping (expecting) option 2… because I’ll be annoyed if I have to insert disk 1, then 2, then 3, then 4, and so-on; if i ever need to do a restore.

  4. Paul Sterley | 11/08/10

    I don’t really know. It bears experimenting with.
    I think the reason they allow for multiple disks is so that you can swap them, and it will do a full each time you swap them, and differentials on that disk until you remove it. I suspect what will happen is that when mutliple disks are attached at the same time, it will write a full to the first disk it can find, and then keep writing differentials to that same disk until it is removed. Then it will go find another disk to start a new chain with a full backup. That’s just a guess though. That’s the way I would write it – but that’s not a good indication of how they’d do it.
    I’ll be interested to read your follow-up on what happens.

  5. Matt Harding | 11/08/10

    Hi Paul,

    Wow, you reply FAST!

    In actual fact I’ve done some testing in the last short while…

    I’ve noted that each time I do a backup on a new disk it takes about the same about of time; about 25-minutes in this case, writing constantly at about 20Mbps, as you’d expect with a sequential block-level transfer. Subsequent backups to the same disk take only a few minutes, and the transfer rate fluctuates greatly, as you would expect from the random access while reading/writing differential data.

    I’m rather proud of my short-term backup solution… backing up an ESXi based SBS 2008 server to a USB RDX Drive… the drive is shared at a block-level from an admin PC with the StarWind iSCSI Target Service installed, a simple icon (command script) stops the StarWindService (to remove the exclusive lock on the drive), prompts the user to swap the cartridge, and then restarts the service when the next cartridge is inserted… meanwhile SBS doesn’t miss a beat, the iSCSI Initiator fixes it up in a few moments so it is right to go for the next backup :)

    Who said you cant use USB Removeable Backup drives/media with ESXi! :P

  6. Paul Sterley | 11/08/10

    I reply fast when you catch me sitting at my computer and working on something that can be interrupted.

    Thanks for the follow-up. That’s valuable content. I may link it over from another thread about USB on ESXi on this blog.

    I think I may have misunderstood your original post. I thought you wanted to know what would happen if you left all of the drives connected at the same time. I wondered why you’d want to do that, but sometimes it is better not to ask. :)

  7. Matt Harding | 11/08/10

    I’m guessing you’re in the States? It’s 5:10am here… I’m off to bed!

    and, lol… no. not all at once.

    I also have a 7th device configured, another iSCSI Target but on a OpenFiler guest on the same host… I had intended to set it with a ‘lower priority’, so it would only be written to if someone forgot to put in a cartridge; but I was dissapointed to find that you cannot actually prioritise the devices. If 2 or more configured devices are connected simultaneously, it seems it will read/write the backups 2 or more times!

    Thanks for the great site Paul…

  8. Paul Sterley | 11/08/10

    Indeed I am in the US. It’s been a while since I talked nearly real-time with someone in AU. Couple of years ago I managed an AD migration for a branch office of WDSGlobal in Wollongong. Screwed up my sleep schedule something fierce.

    Bummer about the failover device. Was a great idea.

Share Your Thoughts