Before you start the exercises, start the following virtual machines:
• 6419A-NYC-DC1
• 6419A-NYC-SVR1
Ensure that the 6419A-NYC-DC1 virtual machine has fully started before you start the 6419A-NYC-SVR1 virtual machine.
Exercise 1: Evaluating the Existing Backup Plan
Task 1: Start the NYC-DC1 and NYC-SVR1 virtual machines 1. In the Lab Launcher, next to 6419A-NYC-DC1, click Launch.
2. In the Lab Launcher, next to 6419A-NYC-SVR1, click Launch.
3. Log on to each virtual machine as WOODGROVEBANK\Administrator with the password Pa$$w0rd.
4. Minimize the Lab Launcher window.
Task 2: Review the existing backup plan
1. You have agreed that no more than one day's data should be lost in the event of a disaster. Critical data includes the Sales, Finance, and Projects data. Does the current backup plan meet this requirement?
Answer: No. The current weekly backup plan means that, if data is lost, the data that is restored could be up to a week old.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
L15-158 Module 15: Planning for Windows Server 2008 Backup
2. Currently, you copy the Human Resources confidential data onto a removable hard disk that is attached to a computer in the Human Resources office. This task is performed weekly by using a script to preserve the encryption on the files. What are the consequences of this process and how would you address them?
Answer: The issue is that the confidential files are on an easily removable device in an unsecured office. You could provide a secure data storage device, or you could place the removable hard disk in a secure area after the backup job is complete.
3. You have also agreed that, if a server fails, you should be able to restore that server, including all installed roles, features, applications, and security identity, in six hours. Does the current backup plan enable you to restore the servers in this way?
Answer: No. No system state backups are being performed on the servers, so the servers must be rebuilt in the event of a failure. This would make restoring the original configuration very difficult.
Task 3: Propose changes to the backup plan
1. Propose an appropriate backup frequency for the shares in the following table:
Backup Frequency
Sales Daily Finance Daily
Human Resources Daily
Technical Library Weekly
Projects Daily, or perhaps more frequently 2. How would you address the requirement to restore the servers and how
frequently would you back up the servers?
Answer: Back up the system state data on the servers so that you can restore them later. The backup should be at an appropriate frequency, so this will depend on how often the server configuration is changed. Typical schedules may be weekly or monthly.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
Lab A: Planning Windows Server 2008 Backup Policy L15-159
Exercise 2: Updating the Backup Policy
Task 1: Create a backup strategy to comply with the SLA
1. You should be able to restore critical data, which includes the Sales, Finance, and Projects shares, as quickly as possible in the event of a disaster. What factors affect how quickly you can restore data?
Answer: The size of the backed-up data and the backup hardware and media both affect how quickly you can restore data.
2. Given that you have a limited budget to meet the SLA requirements, how could you maximize your budget while providing backup for the entire network data for which you are responsible?
Answer: Consider using a tiered approach to back up and restore: use faster backup hardware and media for critical data, which costs more, but use slower backup hardware and media for noncritical data to reduce costs.
Task 2: Create a backup strategy to comply with legal requirements
• How will you ensure that the required data is stored for the minimum legal requirement period and that the data is available for audit purposes when it is required?
Answer: Various approaches are valid, such as:
• Create separate archive backups for legal compliance purposes. Include only the required data in these archives. A user who has restore privilege is required to access the data if an audit is performed. You must also
consider the storage lifetime of the media—a tape may not retain seven-year-old data if it is not refreshed.
• Store the legal compliance data on a separate network device such as another server or archive device. This device may offer policies to help you control retention requirements.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
L15-160 Module 15: Planning for Windows Server 2008 Backup
Exercise 3: Reviewing Backup Policy and Plans
The main task for this exercise is to discuss your solutions with the class.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
Lab A: Planning Windows Server 2008 Backup Policy L15-161
Exercise 4: Implementing the Backup Policy
Task 1: Initialize the backup storage volume
1. On NYC-SVR1, click Start, point to Administrative Tools, and then click Computer Management.
2. In the Computer Management console pane, click Disk Management.
3. In the Initialize Disk dialog box, click OK.
4. In the details pane, next to Disk 2, right-click Unallocated, and then click New Simple Volume.
5. In the New Simple Volume Wizard, click Next.
6. On the Specify Volume Size page, review the configuration options, and then click Next.
7. On the Assign Drive Letter or Path page, review the configuration options, and then click Next.
8. On the Format Partition page, in the Volume label field, type Backup.
9. Select the Perform a quick format check box, and then click Next.
10. On the Completing the New Simple Volume Wizard page, click Finish.
11. When the format operation is complete, close Computer Management.
Task 2: Create the new backup schedule
1. On NYC-SVR1, click Start, point to Administrative Tools, and then click Windows Server Backup.
2. In the Windows Server Backup window, on the Action menu, click Backup Schedule.
3. In the Backup Schedule Wizard, click Next.
4. On the Select backup configuration page, click Custom, and then click Next.
5. On the Select backup items page, clear the Allfiles (E:) and Backup (F:) check boxes, and then click Next.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
L15-162 Module 15: Planning for Windows Server 2008 Backup
6. On the Specify backup time page, click More than once a day.
7. Under Available time, click 12:30 PM, click Add, and then click Next.
8. On the Select destination disk page, click Show All Available Disks.
9. In the Show All Available Disks dialog box, select the Disk 2 check box, and then click OK.
10. On the Select destination disk page, select the Disk 2 check box, and then click Next.
11. In the Windows Server Backup dialog box, click Yes.
12. On the Label destination disk page, click Next.
13. On the Confirmation page, click Finish.
14. On the Summary page, click Close.
15. Close Windows Server Backup.
Task 3: Backup the Domain Recovery Agent’s Private Key
1. On NYC-DC1, click Start, point to Administrative Tools, and then click Group Policy Management.
2. In the Group Policy Management window, expand Forest:
WoodgroveBank.com, expand Domains, expand WoodgroveBank.com, and then click Group Policy Objects.
3. In the details pane, right-click Default Group Policy and click Edit.
4. In the Group Policy Management Editor window, under Computer
Configuration, expand Policies, expand Windows Settings, expand Security Settings, expand Public Key Policies, and then click Encrypting File System.
5. In the details pane, right-click Administrator, point to All Tasks, and then click Export.
6. In the Certificate Export Wizard, click Next.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
Lab A: Planning Windows Server 2008 Backup Policy L15-163
7. On the Export Private Key page, select the Yes, export the private key radio button, and then click Next.
8. On the Export File Format page, click Next.
9. On the Password page, in the Password and Type and confirm password (mandatory) fields, type Pa$$w0rd, and then click Next.
10. On the File to Export page, in the File Name field, type C:\AdminKey.pfx, and then click Next.
11. On the Completing the Certificate Export Wizard page, click Finish.
12. In the information dialog box, click OK.
13. Close all windows
Task 4: Lab Shutdown
1. For each virtual machine that is running, close the Virtual Machine Remote Control (VMRC) window.
2. In the Close box, select Turn off machine and discard changes, and then click OK.
3. Close the 6419A Lab Launcher.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
L15-164 Managing Windows Server 2008 Restore