civic00typer
Gawd
- Joined
- Dec 5, 2003
- Messages
- 517
I put this question before Microsoft today, however I didn't receive an answer that made sense... imagine that. Here is the scenario:
**You have enabled Volume Shadow Copy Service
1. What happens when you first enable this service? Does it start tracking changes to the file system immediately?
2. How does this service know what has changed? Baseline snapshot or the entire system or reference a transaction log file?
**Now, you have a volume with 500GB of data. Somewhere along the lines someone accidently deleted 100GB of data. You now need to restore this data, first (easiest) process is to leverage a shadow copy.
1. If the original data no-longer exists... how can you recover the 100GB of data from a volume shadow copy? My best guess is a baseline snapshot (original data) that future snapshots are built upon using copy-on-write (differential). However, that would mean your baseline snap would be 500GB as well.
2. If you don't have a base snap (an unknown in this scenario) how do you pull back 100GB of data if the volume shadow copies only represent the deltas? What happens if another 100-200GB of data were written to the disk before discovering the missing 100GB of data?
3. How does this work???? I understand the functions of VSS and its function in ensuring consistent backups and that it uses a copy-on-write to create snapshots. How can you restore data if you don't have an original?
Please share your thoughts on this topic. I have looked at the TechNet articles from Microsoft regarding VSS, no information explaining the above scenario and how this data can be recovered.
**You have enabled Volume Shadow Copy Service
1. What happens when you first enable this service? Does it start tracking changes to the file system immediately?
2. How does this service know what has changed? Baseline snapshot or the entire system or reference a transaction log file?
**Now, you have a volume with 500GB of data. Somewhere along the lines someone accidently deleted 100GB of data. You now need to restore this data, first (easiest) process is to leverage a shadow copy.
1. If the original data no-longer exists... how can you recover the 100GB of data from a volume shadow copy? My best guess is a baseline snapshot (original data) that future snapshots are built upon using copy-on-write (differential). However, that would mean your baseline snap would be 500GB as well.
2. If you don't have a base snap (an unknown in this scenario) how do you pull back 100GB of data if the volume shadow copies only represent the deltas? What happens if another 100-200GB of data were written to the disk before discovering the missing 100GB of data?
3. How does this work???? I understand the functions of VSS and its function in ensuring consistent backups and that it uses a copy-on-write to create snapshots. How can you restore data if you don't have an original?
Please share your thoughts on this topic. I have looked at the TechNet articles from Microsoft regarding VSS, no information explaining the above scenario and how this data can be recovered.