Docstoc

Recovery Manager v2.0 User's Guide

Document Sample
Recovery Manager v2.0 User's Guide Powered By Docstoc
					Recovery Manager® 2.0
            USER’S GUIDE
Recovery Manager® 2.0
      USER’S GUIDE
                                                                Table of Contents



1.0   Recovery Manager Overview                                            1

      1.1    Recovery Manager Schedule Console Overview                    3
      1.2    Recovery Manager Boot Client Overview                         4
      1.3    The Recovery Center Overview                                  5

2.0   About Recovery Manager 2.0                                           6

      2.1    System Requirements                                           6
      2.2    Licensing                                                     6
      2.3    Installing Recovery Manager 2.0                               7
      2.4    Migration from Recovery Manager Version 1.2 to Version 2.0   11

3.0   Recovery Manager Schedule Console                                   12

      3.1    Activating Recovery Manager with the License Key             12
      3.2    Configuring the Recovery Manager Schedule Console            13
      3.3    Navigating the Recovery Manager Schedule Console             18
      3.4    The Recovery Manager Node                                    19
      3.5    The Schedules Node                                           19
      3.6    The Recovery Sets Node                                       21
      3.7    The History Node                                             22
      3.8    The Network Node                                             23
      3.9    The Active Directory Node                                    24
      3.10   Creating Recovery Point Schedules                            28
      3.11   Modifying Recovery Point Schedules                           37
      3.12   Working with SmartBind Schedules                             38
      3.13   The Recovery Set Editor                                      39

4.0   The Recovery Manager Boot Client                                    47

      4.1    Preinstalling the Recovery Manager Boot Client               47
      4.2    Creating the Boot Client                                     51

5.0   The Recovery Center                                                 60



6.0   The Recovery Center: Recovery                                       62

      6.1    Rolling Back a Single Computer                               63
      6.2    Rolling Back a Group of Computers                            69
      6.3    Analyze and Repair                                           75


                                                                                3
    7.0    The Recovery Center: Tools                                  94

           7.1    Explore Recovery Points                              95
           7.2    Editing the Registry                                 97
           7.3    Importing and Exporting Registry Keys                98
           7.4    Resetting Registry Permissions                       99
           7.5    Manage Computer                                     100
           7.6    System Information                                  101
           7.7    Event Viewer                                        102
           7.8    Filtering Event Logs                                103
           7.9    Service and Driver Manager                          104
           7.10   Viewing service and driver properties               105
           7.11   Logical Drives                                      106
           7.12   Editing Boot.ini                                    107
           7.13   Resetting Passwords                                 108

    8.0    The Recovery Center: Report                                109

           8.1    Recovery Point Summary                              110
           8.2    Rolled Back Systems                                 111
           8.3    Password Changes                                    112
           8.4    System Activity                                     113
           8.5    All Activity                                        114

    9.0    The Recovery Center: Maintenance                           115

           9.1    Create Recovery Point                               116
           9.2    Creating the Recovery Manager Boot Client           116
           9.3    Mobile User Recovery Tools – the Smart Fix Wizard   117

    10.0   Troubleshooting                                            128



    11.0   Frequently Asked Questions                                 129



    12.0   Technical Support                                          137




4
                                             1.0    Recovery Manager Overview


W        internals Recovery Manager 2.0 is an enterprise
           recovery solution that reduces time to recover and virtually eliminates data loss for the
Windows environment. From a single installation, Recovery Manager can remotely recover damaged
and unbootable Windows®-based servers and workstations across your network. Multiple systems
can be rolled back simultaneously for quick repair of damage caused by viruses, faulty service packs,
failed installations, and even errors caused by applications and users.
With Recovery Manager, you can undo harmful changes made to any computer on your network
and quickly restore settings without losing recent work such as saved documents, email, history, or
Favorites lists.
From a central location, Recovery Manager can:
    • Automatically take snapshots of system files, program files, user data, and user settings from
      computers throughout your enterprise.
    • Quickly restore damaged and unbootable systems to working condition.
    • Change passwords of systems that are inaccessible due to lost or locked-out local passwords.
    • Find and document changes that are causing undesirable system behavior; view event logs on
      damaged or unbootable systems; and view system information including service packs and
      hot fixes.
    • Perform custom repairs of damaged and unbootable computers – including editing the
      registry, modifying system files, and rolling back selected portions of previous system
      snapshots.
    • Rollback systems after faulty patches or installations.
    • Evaluate changes that will be caused by a patch.
    • Customize recovery protection so that you can focus on key applications or key data or key
      users.
    • Protect and recover mobile computers, even when not connected to the network.
You can perform these operations remotely on any system in your network.




                                                                                                        1
Figure 1-1

             Recovery Manager 2.0 consists of three primary components:
                 • The Recovery Manager Schedule Console, a Microsoft Management Console snap-in,
                   manages the scheduling and creation of system snapshots for the protected computers on
                   your network.
                 • The Recovery Center guides you through the process of rolling back or repairing failed
                   systems, analyzing system changes, and reporting recovery activity, and Recovery Point
                   availability. It includes tools for changing passwords, managing services and drivers, viewing
                   event logs and other useful aids.
                 • The Recovery Manager Boot Client enables access to remote systems for analysis and repair
                   in the event that they become unbootable or locked out.




2
1.1 Recovery      Manager Schedule Console Overview
The Recovery Manager Schedule Console is a Microsoft Management Console (commonly referred
to as the “MMC”) snap-in that manages the scheduling and creation of system snapshots, called
Recovery Points™, for computers anywhere on your network. Recovery Manager automatically
deploys a low-overhead agent to remote systems to create each Recovery Point.

Recovery Manager Schedules
Before you can create Recovery Points for a computer, the system must be included in at least one
schedule. A schedule defines when Recovery Points will be created, the list of systems to be protected
by this schedule, the schedule mode (standard or mobile), the Recovery Sets to be applied, and
how the Recovery Manager agent and Recovery Manager Boot Client should be deployed to the
protected clients.
The use of schedules provides an efficient way to create Recovery Points for collections of computers
that have similar recovery needs. For example, you might create a single schedule for a category
of mission-critical servers that requires Recovery Points to be created with equal frequency. Once
you create the schedule, you can easily change any of its properties (including the list of computers
included in it) at a later time.

Recovery Points
A Recovery Point is a point-in-time snapshot of a computer’s files and configuration settings
(depending on the Recovery Set selected). Similar to a Windows XP restore point, a Recovery Point
can be applied to undo harmful changes and to restore a system’s settings without losing recent work
such as saved documents, email, history, or Favorites lists. However, there are several important
differences between Recovery Points and Windows XP restore points.
    • Restore points are available with Windows XP. With Recovery Manager you can create
      Recovery Points for systems running Windows NT 4, Windows 2000®, Windows Server 2003®,
      as well as Windows XP®.
    • You can create and manage the Recovery Points for all the systems on your network from a
      single console.
    • Recovery Points use a central data repository for more efficient and secure storage of critical
      system data.
    • Recovery Points can be used to recover unbootable and locked-out computers. Restore points
      cannot be used unless you can boot the system.
    • Recovery Manager can roll back multiple systems simultaneously from a central location.
      Restore points can only be applied to one system at a time, from that system using a manual
      interface.
    • Unlike the all-or-nothing recovery capability of a Windows XP restore point, parts of a
      Recovery Point can be applied selectively, with the option to perform precision repairs using
      the extensive custom repair capability.
    • Restore points do not provide the ability to view and document changes that may have
      caused the undesirable system behavior.
    • Using Recovery Sets, Recovery Points are extensible to cover as much or as little system, data,
      or setting information that is appropriate for your needs. Restore Points consist solely of
      Microsoft-defined files and registry information.
    • Recovery Points make efficient use of network and storage resources by capturing only a
      single instance of each unique system file, regardless of the number of computers that may be
      using the file.
                                                                                                        3
    The File Store
    The central repository for Recovery Points is called the File Store.

    Recovery Sets and the Recovery Set Editor
    Recovery Sets specify the files, folders, and registry entries to include in a given Recovery Point.
    Recovery Manager includes four predefined Recovery Sets: System, Program Files, User Settings, and
    User Data. Any Recovery Point can include one or more Recovery Sets.
    Recovery Sets give you an easy way to tailor protection to the appropriate level for a particular
    collection of computers. Some groups may not generate valuable data on their desktops so
    providing protection for their system files alone would be sufficient. Other groups, such as a financial
    management group, might need frequent updates of the financial analyses they prepare so the system
    administrator would select the User Data Recovery Set for this group.
    In addition, if you have special protection requirements, you can create custom Recovery Sets with
    the Recovery Set Editor. For example, an engineering company needs frequent protection for its
    design files which are located in folders not included in any of the predefined Recovery Sets. The
    Recovery Set Editor enables the system administrator to define a unique Recovery Set specifically
    targeting these folders for protection.

    Schedule Modes
    Recovery Manager offers two different modes to provide uninterrupted coverage for both permanently
    situated computers and mobile computers. The standard schedule mode is appropriate for most
    systems. Standard schedules are launched from the Schedule Console and Recovery Points are
    saved in the central File Store. The mobile schedule mode is for systems such as notebooks that are
    frequently disconnected from the network. For these systems, Recovery Point creation is launched by
    the mobile computer itself. Recovery Points are stored locally and later synchronized to the central
    File Store when the system is reconnected to the network. A mobile system user can be granted
    permission to use the SmartFix Wizard™ to roll back the system or take Recovery Points should
    problems occur while away from the office.

    SmartBind™
    Recovery Manager works with Active Directory® to automatically schedule new computers as they
    are added to the network, ensuring that Recovery Points are taken for all systems in an Organization
    Unit even if they are renamed, re-imaged, or replaced.



    1.2   Recovery Manager Boot Client Overview
    The Recovery Manager Boot Client allows you to access a computer for repair if it becomes
    unbootable or if it becomes inaccessible due to a lost or locked-out password. The Recovery Manager
    Boot Client provides access to Recovery Manager’s recovery capabilities and tools described below
    under Recovery Center.
    The Recovery Manager Boot Client is provided on the Installation CD. To simplify recovery
    operations in the case of an emergency, you can preinstall it on all of your protected systems so
    that it is available as a boot option. Recovery Manager also enables you to create copies of the Boot
    Client CD, either the standard version as provided or a version you have customized to meet your
    configuration requirements.
    The wizard for creating the Boot Client is accessible through the Recovery Center and the Schedule Console.


4
1.3   The Recovery Center Overview
The Recovery Center enables you to recover and repair systems, analyze and document system
changes, and document recovery activity. It also provides tools for managing services and drivers,
editing a system’s registry, viewing event logs, resetting passwords, and editing the boot.ini.

Roll Back Systems
When you need to roll back a computer (whether one or multiple), you launch the Rollback Wizard
through the Recovery Center. It steps you through the process of selecting the appropriate Recovery
Point and Recovery Sets and at the end produces a report documenting changes made to the recovered
system.

Analyze and Repair
Recovery Manager can do more than restore your computers to a previous state. It also provides
the means for comparing what has changed between two Recovery Points so you can analyze the
root cause and determine what is necessary to prevent recurrence. This capability can be useful for
anticipating problems, for instance, you could determine changes that will be caused by a service
pack prior to deploying it to your entire organization. It also provides means for selectively rolling
back individual files.

Tools
When you need to manage services and drivers, edit a system’s registry, view event logs, reset
passwords on locked out systems, explore the disk volumes under repair, and edit the boot.ini, you
can turn to the Tools section of Recovery Manager for these and many other capabilities, even for
systems that are unbootable.

Recovery Point Explorer
With the Recovery Point Explorer, you can browse the contents of a Recovery Point and search for
specific files. It also enables you to copy a specific file from the Recovery Point to another location.

Reports
Recovery Manager produces several reports to document recovery activity. The Recovery Point
Summary documents the currently available Recovery Points for each system and their age. Other
reports document the systems that have been rolled back by Recovery Manager, systems for which
Recovery Manager has changed the password, activity by system, and a full report documenting all
Recovery Manager activities. These files can be saved and the activity report can be exported to a file
suitable for spreadsheets or databases for further analysis or reporting.

Manual Creation of Recovery Points
Occasionally you may need to create an ad hoc Recovery Point independent of the scheduled
snapshots you have planned through the Recovery Center Schedule Console. For instance, to
determine the impact of a service pack, you might deploy it to a test system and then take a Recovery
Point afterwards so that you could compare it to one that was taken just prior to the patch.

Creation of the Boot Client
The wizard for creating the Boot Client is accessible through the Recovery Center and the Schedule
Console.




                                                                                                         5
                             2.0    About Recovery Manager 2.0

    2.1   System Requirements
    You can install the Recovery Manager 2.0 components (the Recovery Manager Schedule Console and
    the Recovery Center) on any Windows 2000 with Service Pack 4, Windows XP, or Windows Server
    2003 system. Minimum system configuration required for this installation is:

     Platform               900 MHz or higher x86-compatible CPU
     Memory                 256MB RAM (512MB recommended)
     Network Adapter        10 megabit or faster (100 MB recommended) wired Ethernet adapter
     Hard Disk Space        100 MB required for Recovery Manager console. Additional hard disk
                            space is required for the Recovery Point File Store.
     Operating System       Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP,
                            Microsoft Windows Server 2003

    Protected client systems (workstations or servers) must be running Windows NT 4 with Service Pack
    6a, Windows 2000, Windows XP, or Windows Server 2003. Minimum system configuration required
    for a client protected by Recovery Manager is:

     Platform               233 MHz or higher x86-compatible CPU
     Memory                 128 MB RAM (256 MB recommended)
     Network Adapter        10 megabit or faster (100 MB recommended) wired Ethernet adapter
     Hard Disk Space        10 MB required. (Additional hard disk space required for mobile systems
                            if scheduled in the mobile mode.)
     Operating System       Windows NT4 Service Pack 6a, Microsoft Windows 2000, Microsoft
                            Windows XP, or Microsoft Windows Server 2003.


    2.2   Licensing
    Recovery Manager is licensed by:
          • The number of servers that Recovery Manager will protect.
          • The number of workstations that Recovery Manager will protect.
          • The number of Operator Consoles you can install on your network.
    The number licensed for the three categories above is displayed in the product’s About dialog box.
    In addition, the number of licensed workstations and servers is displayed in the status bar of the
    Recovery Manager Schedule Console window, along with the number of workstations and servers
    currently scheduled for Recovery Points.
    Recovery Manager will not schedule more than the licensed number of nodes. Should an attempt be
    made to exceed the licensed maximum or to add, drop, and again add a system in violation of the
    end-user license agreement, a notification dialog will be displayed.
    It is the responsibility of the organization’s license administrator to ensure that the product is not
    distributed or installed in such a way that the number of licensed nodes is exceeded. For more help
    with licensing issues, please contact Winternals Software sales.


6
2.3   Installing Recovery Manager 2.0
To install Recovery Manager, insert the Recovery Manager Installation CD into the CD drive and
follow the instructions on each screen.

Installing MDAC
Recovery Manager 2.0 requires Microsoft Data Access Components (MDAC) version 2.8 or later.
Recovery Manager setup will install MDAC 2.8 if it is not detected. After MDAC 2.8 has been installed,
you will need to restart the computer and re-launch setup to continue with the installation.

License Agreement
The Winternals License Agreement that governs your use of Recovery Manager will be displayed.
Click YES to accept the terms of the license.




                       Figure 2-1




                                                                                                         7
             Setup Type
             The Installation Wizard installs the two Recovery Manager 2.0 components, the Recovery Manager
             Schedule Console and the Recovery Center.
             Select the type of installation you want, Complete or Custom. If you select Complete, then the
             Installation Wizard will install both the Schedule Console and the Recovery Center on your
             computer. If you select Custom, then it will install only the Recovery Center. You should set up your
             primary installation with both the Schedule Console and Recovery Center first before you create any
             Recovery Center-only installations on other systems.




Figure 2-2




8
Storage Settings
Next you need to specify the location for the central storage repository for the Recovery Points, called
the Recovery Point File Store.
It is important to note that the Recovery Point File Store location cannot be changed after the
installation is complete. For more information about planning the space requirements, refer to
“Recovery Manager 2.0 Best Practices Guide” on the Winternals website.
http://www.winternals.com/es/support/recoverymanager/bestpractices.asp




                       Figure 2-3




                                                                                                           9
             Database Setup
             Recovery Manager requires Microsoft SQL Server 2000 or higher or Microsoft SQL Server 2000
             Desktop Edition (MSDE). You can use an existing SQL Server or install the provided version of
             MSDE.
             To install MSDE and create the Recovery Manager 2.0 database on the local machine:
                 1. Select Install MSDE and the Recovery Manager 2.0 database on this computer.
                 2. Click Next.


                   Note
                   — If you install a new MSDE database over an existing database, any existing
                     Recovery Point data will be overwritten.




             To create the Recovery Manager 2.0 database on your own SQL server instance:
                 1. Select Use an existing MSDE or SQL installation.
                 2. Click Next.
                 3. Enter the Database Connection String or Select SQL Login to configure Server,
                    Trusted Connection, Login ID, and Password properties.
                 4. Select Options >> to configure additional Database, Language, Application Name,
                    and Workstation ID properties.




Figure 2-4


10
Completing the Installation
The Installation Wizard will complete the Recovery Manager installation. Click Finish to exit the
wizard.
You can launch the Recovery Manager Schedule Console by selecting the Run Recovery Schedule
Console check box or you can launch it at a later time from the Winternals Recovery Manager
Program group in the Start menu.



2.4 Migration      from Recovery Manager Version 1.2 to Version 2.0
If you have a current Recovery Manager 1.2 installation, you can migrate your Version 1.2 Recovery
Points to Recovery Manager 2.0 so that they will be available for system rollbacks. This migration is
handled automatically by the Installation Wizard.
If the Installation Wizard detects a Recovery Manager 1.2 installation on your computer, it displays
the Previous Version Detected window (Figure 2-5) immediately following the Setup window.
The migration process launches automatically at the end of the installation and could take a
considerable amount of time, depending on the number of systems and Recovery Points you have
in your Recovery Manager 1.2 installation. You cannot cancel the migration process once it starts.
Therefore if you do not want to migrate the 1.2 Recovery Points, then you should cancel this installation,
uninstall Recovery Manager 1.2, and then restart the Recovery Manager 2.0 installation.




                       Figure 2-5



                                                                                                             11
           3.0   Recovery Manager Schedule Console



     The Recovery Manager Schedule Console manages the scheduling and creation of Recovery Points
     for the computers you have licensed to protect with Recovery Manager.
     Before you can start using Recovery Manager, you need to activate it with your License Key. You also
     can configure the Recovery Manager Schedule Console options as described below.



     3.1   Activating Recovery Manager with the License Key
     The first time you run the Recovery Manager Schedule Console, it prompts you to enter your License
     Key. Browse for the text file containing the License Key. If you do not already have your License
     Key, you can obtain it by going to http://www.winternals.com/license and supplying your license
     numbers and quantities. Please contact Customer Service (customerservice@winternals.com) if you
     need assistance in obtaining or applying your license key.
     The New Schedule Wizard will also launch the first time you run the Schedule Console giving you
     the option to create your first schedule then or after you configure the Schedule Console.




12
3.2   Configuring the Recovery Manager Schedule Console
To configure options for Recovery Point storage, the boot menu, TCP/IP ports, the database, and
email notification, right-click the Recovery Manager node and then select Properties. Except for the
database properties, these options can be changed at a later time.




                                        Figure 3-1


From the Storage tab, you can view and set retention limits for Recovery Points based on age and
space limits for the File Store.
To set a Recovery Point age limit:
      • Select the Delete Recovery Points older than check box.
      • Click the UP or DOWN ARROW to specify a limit in days.
To set a storage space limit for Recovery Point File Store:
      • Select the Limit Recovery Point File Storage space to check box.
      • Click the UP or DOWN ARROW to specify a limit in Gigabytes.




                                                                                                      13
             Limiting Recovery Point retention, either by space or age, determines the oldest Recovery Point that
             will be available for system rollbacks. To stay within the specified limits, Recovery Manager prunes
             the oldest Recovery Points first.
             Refer to the topic, “How Much Space Should I Allocate for the File Store?” in the Frequently Asked
             Questions section at the end of this document for advice on determining space limits. Also refer to
             The Recovery Manager 2.0 Best Practices Guide posted on the Winternals web site:
             http://www.winternals.com/es/support/recoverymanager/bestpractices.asp




Figure 3-2



             From the Boot Menu tab, you can specify the text that will appear in the boot menu of computers
             with the Recovery Manager Boot Client preinstalled. You can also change the Boot.ini timeout value
             from the default of 5 seconds to a value between 1 and 100 seconds:
                 • Select the Change existing boot timeout value to check box.
                 • Click the UP or DOWN ARROW to set the time out value.




14
                                      Figure 3-3


From the Ports tab, you can set the ports that the Recovery Manager Schedule Console will use to
communicate with protected client computers and the File Store.


      Note
      — If you are utilizing the File and Printer Sharing mode of Recovery Manager, you
        also need to ensure that any firewall application in use allows for Windows File and
        Printer Sharing traffic throughout. For more information, refer to The Recovery
        Manager 2.0 Best Practices Guide posted on the Winternals web site:
      http://www.winternals.com/es/support/recoverymanager/bestpractices.asp




                                                                                                   15
Figure 3-4



             The Database tab displays the connection string for the Recovery Manager MSDE or SQL database
             that was entered during the installation process. NOTE: This cannot be changed after installation.




16
                                       Figure 3-5

From the Email tab you specify how and when you want to receive notification of significant Recovery
Manager events.
    1. Enter the name of the Simple Mail Transport Protocol (SMTP) server in the
       Outgoing mail (SMTP) Server box.
    2. Enter an email address which will be displayed in the From field of the email in the
       Send as box.
To receive email notification of Recovery Point schedule results:
    1. Select the Send email with Recovery Point schedule results check box.
    2. Enter an email address to which Recovery Manager should send notifications in the
       Send email to box.
    3. Specify the frequency and time to receive event notification.
To receive email notification that there is insufficient disk space to store Recovery Points:
    1. Select the Send email to notify of insufficient disk space for Recovery Points check
       box.
    2. Enter an email address to which Recovery Manager should send notifications in the
       Send email to box.
    3. The insufficient disk space notices are sent as soon as the condition is encountered
       and every hour thereafter.



                                                                                                     17
             3.3   Navigating the Recovery Manager Schedule Console
             The Recovery Manager Schedule Console’s tree view consists of one static top-level node (the
             Recovery Manager node) and five static subnodes:
                   • The Schedules Node
                   • The Recovery Sets Node
                   • The History Node
                   • The Network Node
                   • The Active Directory Node


             The following sections describe their purpose and usage.




Figure 3-6




18
3.4   The Recovery Manager Node
The Recovery Manager node provides access to Recovery Manager global settings. When you select
the Recovery Manager node, the following items are available from the MMC Action menu or from
the shortcut menu that appears when you right click:
      • About Recovery Manager to view Recovery Manager version and licensing information.
      • Create Boot CD … to create the Recovery Manager Boot Client image.
      • Recovery Point Summary displays a report indicating oldest and newest Recovery Points
        available for all scheduled systems.
      • Rolled Back Systems displays a report of systems that have been rolled back.
      • Password Changes displays a report of password change activity.
      • All Activity displays a report of all Recovery Manager activity.
      • Properties to view and configure storage, boot menu, TCP/IP ports, database, and email
        notification settings
      • Help to launch Recovery Manager help.


Viewing Recovery Manager Schedule Console Reports
To view HTML-formatted reports of Recovery Points, rolled back systems, password changes, and all
Recovery Manager activity, select the Recovery Manager node and choose a report from the MMC
Action menu or from the shortcut menu that appears when you right-click.
To save a report, choose Save As from your Internet Explorer File menu.
Additional reports regarding Recovery Manager activity are available from the REPORT section of
the Recovery Center where you can also save the All Activity report as a comma-delimited text file
(*.csv).



3.5 The    Schedules Node
Select the Schedules node to view a summary of schedules that you have created, including the last
run times and next scheduled run times.
For schedules that are not currently running the Result column will display the status of the last run:
Success if the schedules launched successfully or error text if they did not. In the event of an error,
the Result column provides diagnostic information.



Creating a New Schedule
To create a new schedule, select the Schedules node and choose New Schedule from the MMC
Action menu or from the shortcut menu that appears when you right-click. Newly created schedules
appear as the last entries in the Schedules node until the next time you launch the Recovery Manager
Schedule Console.




                                                                                                          19
     Schedule Subnodes
     After you have created a schedule, select the resulting schedule subnode to view a list of computers
     that are part of the schedule.
     For computers that have completed a Recovery Point schedule, you will see the date and time of the
     most recent execution, along with the Result: Success if the Recovery Point was successfully created,
     and error text if it was not.
     For computers that are in the process of creating a Recovery Point, you will see a real-time progress
     display.



     Schedule Subnode Properties
     To view and change a schedule’s execution times, schedule mode, Recovery Sets, and client deployment
     settings, select the schedule subnode, and click Properties. This action opens the Schedule Properties
     dialog box. You can configure the properties of the schedule from the tabs below following the same
     steps used to create a new schedule.
         • General - To configure schedule name, run time, account, and SmartBind settings.
         • Schedule Mode - To select schedule mode and configure mobile mode advanced settings.
         • Recovery Sets - To add or remove Recovery Sets to the schedule.
         • Client Deployment - To configure agent and Boot Client deployment settings.




20
3.6 The   Recovery Sets Node
Recovery Sets specify the files, folders, and registry entries to include in a specific Recovery Point.
You can apply one or more Recovery Sets to a Recovery Point schedule. You can also create and edit
custom Recovery Sets with the Recovery Set Editor.
From the Recovery Sets node you can view the available Recovery Sets (predefined as well as custom-
defined), apply Recovery Sets to existing schedules, or launch the Recovery Set Editor.
Recovery Manager includes four standard, predefined Recovery Sets:
    • System - Protects system files, system settings and boot files
    • Program Files - Protects files in the Program Files directory and subdirectories
    • User Settings - Protects all users’ registry settings
    • User Data - Protects data in the Documents and Settings directory and subdirectories


      Note
      — In order to protect program-related registry entries for installed programs, the
        System Recovery Set must always be selected with the Program Files Recovery
        Set.




If you have migrated Recovery Points from Recovery Manager 1.2 to Recovery Manager 2.0 during
the installation process, the Legacy Recovery Set will be displayed among the available Recovery Sets.
The Legacy Recovery Set specifies the contents of Recovery Points created by Recovery Manager 1.2.
If you have special protection requirements, you can create custom Recovery Sets with the Recovery
Set Editor. Right click on the Recovery Set Node in the Recovery Manager Schedule Console to
launch the Recovery Set Editor.
The four pre-defined Recovery Sets cannot be modified.




                                                                                                         21
     3.7   The History Node
     From the History node, you can view the history of Recovery Manager’s schedule execution for
     Recovery Points in the File Store. The executions are listed most recent first and are labeled with the
     date and time of their execution as well as their schedule name.
     When you select the History node the following commands are available from the MMC Action
     menu or from the shortcut menu that appears when you right-click on the entry:
           • View to change the appearance of the display
           • Refresh to refresh the History node
           • Export List to save the contents of the Details pane as a text file
           • Help to open Help


     History Subnodes
     Select a History subnode to view Recovery Point schedule execution history for Recovery Points
     currently retained in the File Store. Recovery Manager creates a History subnode each time a Recovery
     Point schedule runs. If you select a History subnode, information will be displayed in the Details
     pane for scheduled computers including computer name, domain name, completion time, result
     and result description. If Recovery Point creation fails for any computer in a schedule, its History
     subnode will appear with an exclamation point on the right-hand side of its icon.
     To view additional computer properties:
           1. Select a History subnode.
           2. Select a computer from the list in the Details pane.
           3. Click Properties or choose Properties from the MMC Action menu or from the
              shortcut menu that appears when you right-click. This action opens the Computer
              Properties dialog box.
           4. Click System Info to view information about the computer’s configuration.
           5. Click the History tab to view information about the computer’s Recovery
              Point history.




22
3.8   The Network Node
Select the Network node to display a list of Network subnodes corresponding to domains accessible
through NETBIOS.
When you select the Network node, the following commands are available from the MMC Action
menu or from the shortcut menu that appears when you right-click:
      • Find Computer... to find a computer by name or description.
      • View to change the appearance of the display.
      • Refresh to refresh the Network node.
      • Export List to save the contents of the Details pane as a text file.
      • Help to open Help.


Select a Network subnode to display a list of computers accessible through NETBIOS.
When you select the Network subnode, the following commands are available from the MMC Action
menu or from the shortcut menu that appears when you right-click:
      • Find Computer... to find a computer by name or description
      • Launch Recovery Center to launch the Recovery Center
      • View to change the appearance of the display
      • Copy to copy the subnode for pasting into a schedule
      • Refresh to refresh the Network node
      • Export List to save the contents of the Details pane as a text file
      • Help to open Help


Browsing network subnodes
Double-click the Network node to expand and browse the Network subnodes.
You can identify computers that are already part of a Recovery Point schedule by a small clock that
appears on the lower right-hand side of their icons.
To quickly add computers or domains to a Recovery Point schedule, drag them onto the schedule.
When a Network subnode is selected you can sort the list of computers by clicking the Name, Type,
or Comment column in the Details pane.
When a Network subnode is selected you can view computer owner, hardware, and configuration of
the computer in the Details pane by opening its Computer Properties dialog box.
To open the Computer Properties dialog box, double-click the computer, or select the computer and
either click Properties or choose Properties from the MMC Action menu or from the shortcut menu
that appears when you right-click.




                                                                                                      23
             3.9   The Active Directory Node
             The Active Directory node allows you to view the computers and Organizational Units (OU) of
             an Active Directory (AD) domain. From the Active Directory node, you can connect to multiple
             domains, add systems, and bind OUs to Recovery Point schedules using SmartBind™ and search for
             computers by name or description.
             When you select the Active Directory node the following commands are available from the MMC
             Action menu or from the shortcut menu that appears when you right-click:
                   • Connect to Domain to connect to an Active Directory domain
                   • View to change the appearance of the display
                   • Export List to save the contents of the Details pane as a text file
                   • Help to open Help


             Connecting to an Active Directory Domain
             You need to connect to an Active Directory Domain if you want to schedule computers as an
             Organization Unit or use the SmartBind feature.
                   1. Select the Active Directory node.
                   2. Choose Connect to Domain from the MMC Action menu or from the shortcut
                      menu that appears when you right-click. This action launches the Choose Domain
                      connection dialog box.




Figure 3-7



                   3. Enter the domain name to connect to in the Domain field.
                   4. Select the Connect as check box to enter a user name and password.
             To disconnect from a connected domain, select the domain and choose Disconnect from Domain
             from the MMC Action menu or from the shortcut menu that appears when you right-click.
             Previously connected Active Directory domains will be reconnected on subsequent sessions if you
             are logged onto a computer with an authorized account.


24
Active Directory Subnodes
Active Directory subnodes display computers in Organization Units (OU), allowing you to view and
schedule computers on networks where NETBIOS is disabled.
When you select an Active Directory subnode, the following commands are available from the MMC
Action menu or from the shortcut menu that appears when you right click:
    • Disconnect from Domain to disconnect from the Active Directory domain
    • Find Computer to find a computer by name or description
    • Launch Recovery Center to launch the Recovery Center
    • View to change the appearance of the display
    • Copy to copy the subnode for pasting into a schedule
    • Export List to save the contents of the Details pane as a text file
    • Help to open Help


Browsing Active Directory Subnodes
To browse Active Directory subnodes, double-click the Active Directory node.
You can identify computers that are already part of a Recovery Point schedule by a small clock that
appears on the lower right-hand side of their icons.
A quick way to add computers, Organizational Units, or domains to a Recovery Point schedule is to
drag-and-drop them onto the schedule.
You can sort lists of Organizational Units and computers by clicking the Name, Type, or Description
column heading in the Details pane.
When an Active Directory subnode is selected you can view computer owner, hardware, and
configuration of computers in the Details pane by opening its Computer Properties dialog box. To
open the Computer Properties dialog box, double-click the computer or select the computer and
either click Properties or choose Properties from the MMC Action menu or from the shortcut menu
that appears when you right-click.
To find a computer in the Active Directory by name or description:
    1. Select an Active Directory subnode or Organizational Unit.
    2. Click Find, or choose Find Computer from the MMC Action menu or from the
       shortcut menu that appears when you right-click.
    3. Type any portion of the computer name or description and click Find Next.


Adding Computers from an Active Directory Subnode
To add computers to a schedule from an Active Directory subnode:
    • Drag Organizational Units (OU), and domains to the Schedule subnode.
    • Select a computer, OU, or domain and click Copy, or choose Copy from the MMC Action
      menu or from the shortcut menu that appears when you right-click. Then, select a Schedule
      subnode and click Paste, or choose Paste from the MMC Action menu or from the shortcut menu.



                                                                                                      25
     Multiple computers, OUs or domains can be selected by using the SHIFT and CTRL keys.
     When copying or dragging an OU into a schedule, you will be prompted to enable SmartBind
     scheduling. Click Yes to have SmartBind automatically schedule all computers contained by the OU.
     This action will remove existing computers from the schedule and replace them with the computers
     in the OU and update accordingly the scheduled systems count displayed in the Schedule Console
     status bar.

     Active Directory OU Commands
     When you select an Active Directory Organizational Unit (OU), the following commands are available
     from the MMC Action menu or from the shortcut menu that appears when you right-click:
         • Find Computer to find a computer by name or description
         • View to change the appearance of the display
         • Copy to copy the subnode for pasting into a schedule
         • Export List to save the contents of the Details pane as a text file
         • Help to open Help


     Viewing Properties of Computers on the Network
     When you select an Active Directory subnode, you can view computer owner, hardware, and
     configuration of a computer in the Details pane with the Computer Properties dialog box.


     To view detailed information about a computer’s configuration and Recovery Point history:
         1. Select an Active Directory subnode to view a list of scheduled computers in the
            Details pane.
         2. Select a computer from the list in the Details pane.
         3. Click Properties or choose Properties from the MMC Action menu or from the
            shortcut menu that appears when you right-click. This action opens the Computer
            Properties dialog box.
         4. Click System Info to view information about the computer’s configuration.
         5. Click the History tab to view information about the computer’s Recovery Point history.




26
Figure 3-8




             27
             3.10   Creating Recovery Point Schedules
             The first time you run the Recovery Manager Schedule Console, it launches the New Schedule Wizard
             which will take you through the steps for creating a schedule for generating Recovery Points.
             You can also launch the New Schedule Wizard by clicking on the icon in the MMC menu toolbar
             (when the Schedule node is selected) or by right-clicking on the Schedules node and selecting
             New Schedule.




Figure 3-9




28
The Schedule Settings dialog box of the New Schedule Wizard (and the General tab of an existing
schedule’s Properties dialog box) lets you define a schedule’s characteristics, in the following steps:
    1. Name - Enter a name for the schedule in the text box.
    2. Description - Type a description to distinguish this schedule from your others.
       This information is also displayed on the General tab of the Schedule Properties.
    3. Click Modify … to launch the Windows Task Scheduler to define the Recovery
       Point schedule.
    4. Click Account … specify the user account and password for the schedule.




               Figure 3-10




                                                                                                         29
              Recovery Point Schedule
              Click the Modify button on the Schedule Settings window to open the Windows Task Scheduler
              which allows you to define the schedule for Recovery Point execution. By selecting Show multiple
              schedules, you can create a complex schedule with combinations of any number of daily, weekly, and
              monthly executions.




Figure 3-11



              After you have defined the schedule, click OK to close the scheduler. A description of the schedule
              will appear in the Schedule Settings window.




30
User Account
Click the Account… button on the Schedule Settings window to open a user-browser dialog box.
Then specify the username and password for the Task Scheduler to use to launch the schedule.
The account that you specify must have administrative privileges on the computer where Recovery
Manager is installed, as well as on the computers that belong to the schedule that you are creating.




           Figure 3-12




                                                                                                       31
              Selecting Schedule Mode
              For maximum protection, Recovery Manager offers two schedule modes to provide uninterrupted
              coverage for both permanently-situated computers and mobile computers. Chose either Standard
              Schedule Mode or Mobile Schedule Mode.




Figure 3-13



              Standard schedule mode is appropriate for protecting most systems (servers or workstations)
              in your environment. In standard mode, schedules are launched from the Recovery Manager
              Schedule Console and Recovery Points are saved in the central File Store created during the Recovery
              Manager installation.
              Mobile schedule mode is appropriate for mobile systems such as notebook computers that are
              frequently disconnected from the network. It enables both ongoing protection and the ability to
              perform repairs and rollbacks even when the system is not connected to the network.
              In mobile mode, schedules are launched from the mobile computer itself and Recovery Points are
              saved on it locally. These locally-saved Recovery Points are synchronized back to the File Store the
              next time the schedule runs from the Recovery Manager Schedule Console when the mobile system is
              also connected to the network. The mobile user can use the Recovery Point Explorer to view Recovery
              Points and restore them. Recovery Point Explorer is on the Start menu under the Programs folder.
              When permission is granted, the mobile computer user can manually create Recovery Points and
              perform rollbacks using the SmartFix Wizard. Click Mobile Settings... to configure additional user
              permissions, power management, and storage settings. See the Help File for more information.


32
Selecting Recovery Sets
From the Recovery Sets window, select the Recovery Sets to apply to a schedule. Recovery Sets
specify the files, folders, and registry entries to include in a given Recovery Point. A Recovery Point
Schedule can include one or more Recovery Sets.
In order to back up program-related registry entries for installed programs, the System Recovery Set
must always be selected with the Program Files Recovery Set.




                Figure 3-14


If you have special protection requirements, you can create custom Recovery Sets with the Recovery
Set Editor. Right click on the Recovery Set Node in the Recovery Manager Schedule Console to
launch the Recovery Set Editor.




                                                                                                         33
              Client Deployment Settings
              From the Client Deployment Settings window in the New Schedule Wizard (and the Client
              Deployment tab of an existing schedule’s Properties dialog) you can choose how to deploy the
              Recovery Manager agent and Recovery Manager Boot Client to your protected systems.




Figure 3-15



              The Recovery Manager agent enables communication between the Recovery Manager Schedule
              Console and protected client computers during Recovery Point generation. The agent must be
              installed on all computers in a schedule before the initial execution of that schedule. Recovery
              Manager can automatically deploy and install the agent, or the agent can be installed manually or by
              means of group policy or login script.

              Options for Installing the Recovery Manager agent
              For Recovery Manager to deploy and install the agent automatically on client computers, select
              the Automatically install the Recovery Manager agent check box. Automatic deployment of the
              agent requires File and Printer Sharing to be enabled on both the operator console system and the
              protected clients.
              If you do not choose automatic installation, then you must install the agent manually or by group
              policy or login script as described below.




34
Installing the Recovery Manager agent manually
You can manually install the Recovery Manager agent on computers connected to networks without
File and Printer Sharing enabled by copying the agent RMAgent.msi from the Recovery Manager
installation directory to the client and double-click on it.

Deploying the Recovery Manager agent by group policy or login script
For networks with File and Print Sharing disabled you can deploy the Recovery Manager agent by
script or group policy.
To deploy the agent with a script, add the following line to your script.
msiexec.exe /qn /i \\<computer name>\<share name>\<path>\RMAgent.msi
PORTNUMBER=XXXXX
(Include the PORTNUMBER parameter if you changed it from 21062.)
To publish the agent to computers or users by group policy:
    1. Add RMAgent.msi to the Software Installation section of the Group Policy Object
       (GPO)
    2. Assign the GPO to Organizational Units (OUs)


To deploy the Agent to Windows NT4 clients, perform the following actions:
    1. Copy the Windows Installer file, InstMsiW.exe, located in the Recovery Manager
       folder to the NT4 client.
    2. From a command window, run InstMsiW.exe.




      Notes
      — When deploying the agent by group policy or script, create a folder on a network
        share to hold the MSI package. Copy RMAgent.msi to the folder and assign the
        appropriate permissions to allow users and computers to read and run the file.
      — The agent installer package, RMAgent.msi, is located in the Recovery Manager folder.
      — RMAgent.msi will install RMAGENT as a manual startup type service.




Option for Preinstalling the Recovery Manager Boot Client
The Boot Client provides administrators access to a system that has become locked out or unbootable.
Preinstalling the Boot Client on a computer provides the option to select the Recovery Manager Boot
Client from the boot menu in the event the system encounters a problem.
To preinstall the Boot Client on a computer, select the Preinstall the Recovery Manager Boot Client
check box. After a schedule has been created, you can change this setting on the Client Deployment
tab of the Schedule subnode Properties.




                                                                                                       35
              If the preinstall option is selected, Recovery Manager will verify that the Boot Client is preinstalled on
              all scheduled systems each time the Recovery Manager Schedule Console starts. If Recovery Manager
              identifies a scheduled system that does not have the Boot Client installed, then it will launch the Boot
              Client Preinstallation Manager to preinstall the Boot Client.
              If you do not elect to preinstall the Boot Client, then should a protected client fail, you can boot it with the
              Installation CD which contains the Boot Client image or a Boot Client CD which you have created.

              Selecting and Adding Computers
              The Select Computers for New Schedule window appears when you click Add on the Computers
              window of the New Schedule Wizard (and when you choose Add Computers for an existing schedule
              from the Recovery Manager Schedule Console Action menu).




Figure 3-16



              To add computers using the Select Computers dialog box, select the domain or workgroup that you
              want to browse in the top drop-down menu, then select individual systems (or groups of systems
              using the SHIFT and CTRL keys) and click Add to paste them in the lower edit box.
              Note that instead of using the Select Computers dialog box, you may find it faster to add computers
              from the Recovery Manager Schedule Console’s Network Node or the Active Directory Node because
              these actions support drag-and-drop operations on multiple systems, OUs, and entire domains.
              Once you have selected all the systems for this schedule, click Finish to return to the Recovery
              Manager Schedule Console.




36
3.11   Modifying Recovery Point Schedules
Schedules can be changed any time after they are initially created. To view and change a schedule’s
execution times, schedule mode, Recovery Sets, and client deployment settings:
1. Select the Schedule subnode .
2. Click Properties or choose Properties from the MMC Action menu or from the shortcut menu
that appears when you right-click.
This action opens the Schedule Properties dialog box. You can configure the properties of the
schedule from the following tabs:
• General - To configure schedule name, run time, account, and SmartBind settings.
• Schedule Mode - To select schedule mode and configure Mobile Mode advanced settings.
• Recovery Sets - To add or remove Recovery Sets to the schedule.
• Client Deployment - To configure agent and Boot Client deployment settings.
The tabs of the Schedule Properties dialog box correspond to pages of the New Schedule Wizard.




                    Figure 3-17



                                                                                                      37
     3.12   Working with SmartBind Schedules
     Recovery Manager schedules with the SmartBind feature selected work with Active Directory to
     link computers in an Organizational Unit (OU) to a Recovery Point schedule automatically. Each
     time a SmartBind schedule runs, it queries Active Directory and updates the schedule members and
     scheduled systems count accordingly.
     To SmartBind an OU to a schedule:
            • From the Active Directory node of the Schedule Console, select and drag an OU to an
              existing schedule.
            • Click Yes when prompted to bind the schedule to the OU.


     When binding a schedule to an OU that contains sub-OUs, you will be prompted to bind the sub-
     OUs. Click Yes to add all computers in the OU and sub-OUs. Click No to bind only computers in
     the top level of the OU.
     To disable SmartBind and unbind a schedule from an Organizational Unit:
            1. Select the Schedule subnode.
            2. Click Properties or choose Properties from the MMC Action menu or the
               shortcut menu that appears when you right-click. This action opens the Schedule
               Properties dialog box.
            3. Click the General tab.
            4. Clear the SmartBind check box.




             Notes
             — SmartBind Schedules appear with a small folder on the lower right-hand side of
               their icons.
             — Computers cannot be manually added or removed from a schedule that is bound to
               an OU. The Add Computer menu option will not be available.
             — Clearing the SmartBind check box removes all currently included computers from
               a schedule. You will be prompted to save or delete Recovery Points for these
               computers.
             — Binding an OU to an existing schedule will cause computers previously included to
               be removed. You will be prompted to save or delete the Recovery Points for these
               computers.
             — OU-bound schedules display the name of the OU in the General tab of the
               Schedule Properties dialog box.




38
3.13   The Recovery Set Editor
Recovery Sets specify the files, folders, and registry entries to include in a Recovery Point. With
the Recovery Set Editor you can create custom Recovery Sets to tailor protection to your special
organizational needs.




           Figure 3-18

To launch the Recovery Set Editor, click the Recovery Sets node from the Schedule Console and
select Recovery Set Editor from the shortcut menu that appears when you right-click or select the
Recovery Set Editor from the MMC Action menu.

Creating a Recovery Set
To create a custom Recovery Set from the Recovery Set Editor, click the New icon on the toolbar or
select New from the File menu. Use the four tabs to specify your selection criteria for your custom
Recovery Set.
       1. On the General tab, enter a description for the new Recovery Set.
       2. Use the Extensions tab to protect or OMIT specific file types, such as *.JPG or
          *.DOC.
       3. Use the File tab, to protect or OMIT specific files and directories.
       4. Use the Registry tab to select or EXCLUDE specific registry entries.




                                                                                                      39
              Click Save to save your custom Recovery Set. Recovery Sets, which are saved with an .rsd extension,
              should be saved to the Recovery Manager installation directory of the Schedule Console computer to
              appear in the Recovery Sets node of the Schedule Console.
              Although the default Recovery Sets included with Recovery Manager are locked and cannot be
              modified, they can be used as templates for custom Recovery Sets. See “How do I create a custom
              Recovery Set” in the Frequently Asked Questions section at the end of this manual.
              To open an existing Recovery Set, click Open or select Open from the File menu, browse to the
              Recovery Set file, click Open.
              To Preview a Recovery Set, click Preview or select Preview from the File menu. This action creates
              a Recovery Point using the selected Recovery Set and then displays its contents using the Recovery
              Point Explorer so you can see which files and settings it would actually capture. This is useful for
              determining whether your custom Recovery Set has been defined to meet your requirements.


                    Note
                    — A Recovery Point created by the Preview function is not actually saved in the File
                      Store




              Recovery Set Editor - Extensions Tab
              From the Extensions window, you can select file types to be included or excluded by specifying the
              file name extensions.




Figure 3-19


40
To add file name extensions to the Recovery Set, click Add. This action opens the Add Extensions
window. Type the string expression in the New Extension box and click OK.




                                                   Figure 3-20


To remove an extension string from the list, select it and click Remove.
To exclude all files that contain the specified file name extensions, select the Exclude Extensions
check box.


      Note
      — An extension string expression can include any number of wildcard characters,
        where an asterisk (*) matches arbitrary text and a question mark (?) matches a
        single arbitrary character.




                                                                                                   41
              Recovery Set Editor - File Tab
              From the File tab, you can select files and folders for inclusion in or exclusion from a Recovery Set.
              Click Add from the File tab which opens the Add File and Folders Items page.




Figure 3-21



              To add file or folders to the Recovery Set, click Add from the File tab.




42
                      Figure 3-22

To select file and folder items to add to the Recovery Set, use the tree view to select file and folder
items, or enter a file or folder path in the Path window.




                                                                                                        43
              Modifying Item Properties
              To modify an item’s properties, select an item in the tree view and click Modify Item or select
              Properties from the shortcut menu that appears when you right click.




Figure 3-23



              From the Item Properties window, you can set the following properties:
                  • Item selected for Recovery Set - to include a file or folder.
                  • Include Item - to include a file or sub-folder from a selected folder.
                  • Include All Subfolders - to traverse a folder and add all files and subfolders.
                  • Exclude Item - to remove a selected folder.


              You can use wild cards in file or folder paths to exclude files and folders where an asterisk (*) matches
              arbitrary text and a question mark (?) matches a single arbitrary character.
              Folders meeting the Wildcard Exclusions criteria are excluded from the Recovery Set even if they are
              directly selected in the tree view.
              Files explicitly excluded in the tree view are excluded from the Recovery Set regardless if they are
              included in the Extensions tab.
              If the Recovery Manager File Store is included in a Recovery Set, data in the File Store will be lost if a
              rollback is performed. Make sure that the File Store is excluded from any Recovery Set.




44
Recovery Set Editor - Registry Tab
From the Registry tab you can specify registry paths and keys to include in a Recovery Set. Click Add
which opens up the Add Registry Items window.




         Figure 3-24


To select Registry items to add to the Recovery Set, use the tree view to select Registry items, or enter
a registry key path in the Key Path window or enter a Registry value in the Value Name window.
Click Add after manually entering key paths and value names to save them to the Recovery Set.
To remove an item from the Recovery Set, select the item and click Remove.




                                                                                                            45
Figure 3-25




46
                               4.0    The Recovery Manager Boot Client

The Recovery Manager Boot Client enables you to roll back failed systems, and perform custom
repairs to unstable or unbootable systems. There are three ways to start systems with the Boot
Client:
      • Preinstall the Boot Client on computers before they need repair, then select as a boot time
        option when needed.
      • Boot systems with the Boot Client provided on the Recovery Manager Installation CD.
      • Boot systems from a CD created with the Recovery Manager Boot Client Wizard (which can
        include customizations for your environment).
It is recommended that you create a Boot Client CD to keep on hand at each physical location.
This helps ensure that you can access systems for repair, regardless of hard disk corruption or other
problems.
Before problems occur, you should check critical systems to verify that they can be booted from
CD. Systems that cannot be easily booted from CD should have the Recovery Manager Boot Client
preinstalled.



4.1   Preinstalling the Recovery Manager Boot Client
Preinstalling the Boot Client makes it possible to access and repair a failed computer without the
system administrator going to its physical location. Preinstallation, which requires approximately
150 MB of disk space, is accomplished through the Recovery Manager Schedule Console by one of
the following methods.
      • Create a new schedule and select the Preinstall Recovery Manager Boot Client option in the
        Client Deployment Settings window.
      • Add the computer to an existing schedule that has the Preinstall Recovery Manager Boot
        Client option selected in the Client Deployment tab of the schedule Properties.
      • Highlight a Schedule subnode, select a computer that does not have the Recovery Manager
        Boot Client preinstalled, and choose Preinstall Boot Client from the Action menu or from
        the shortcut menu that appears when you right-click.


These actions launch the Boot Client Preinstallation Manager.



The Boot Client Preinstallation Manager
When launching the Boot Client Preinstallation Wizard for the first time or when adding a computer
to a schedule that has the Preinstall the Recovery Manager Boot Client check box selected, Recovery
Manager will prompt you to select the Boot Client image source.




                                                                                                        47
Figure 4-1



             Select Use standard Recovery Manager Boot Client image to use the standard Boot Client provided
             on the Installation CD. Or if you need to create a custom boot image (containing additional third
             party mass storage or network controller drivers), select Create custom Recovery Manager Boot
             Client image. This action will launch the Boot Client Wizard.
             Browse to specify the location of the Boot Client files either copied onto the hard drive during the
             installation or created by the Boot Client Wizard.




Figure 4-2


48
This action launches the Recovery Manager Boot Client Preinstallation window. Click Start to begin
preinstallation of the Boot Client right away, or select Limit preinstall times to set a range of time
when preinstallation can occur. The Boot Client Preinstallation Manager installs or uninstalls the
Boot Client on a single computer at a time. The active system is shown as Active in the Operation
column while others are shown as Queued, Waiting for time window, or Completed. The progress
of the current operation appears in the Active Item Progress area.
To cancel an operation, select a computer from the list and click Cancel. To cancel all active and all
queued operations, click Cancel All. The Boot Client Preinstallation Manager window remains open
until all queued operations are completed and allows you to inspect the results. Click Close to close
the window.
After preinstallation, subsequent reboots of the client give the user the option to boot normally or
to start the Recovery Manager Boot Client. By default the system proceeds with a normal boot if no
selection is specified within 5 seconds. (Note: the time-out limit can be changed on the Boot Client
tab of the Recovery Manager node properties in the Schedule Console.)

Removing the Recovery Manager Boot Client
To remove the Boot Client from a computer, perform one of the following actions:
    • Delete the computer from all schedules that have the Preinstall Recovery Manager Boot
      Client option selected. This action will launch the Boot Client Preinstallation Manager
      window to uninstall the Boot Client.
    • Select a computer from a schedule and choose Uninstall Boot Client from the MMC Action
      menu or from the shortcut menu that appears when you right-click. This action will launch
      the Boot Client Preinstallation Manager window to uninstall the Boot Client.
    • In Add/Remove Programs, uninstall Winternals RMBootClient.
    • Use this command line:
    msiexec.exe /qn /x {5C428D20-B6E0-4EE1-8831-683A372A45C6}


Booting with the Preinstalled Client
To access an unbootable computer which has the Recovery Manager Boot Client preinstalled, restart
the system and select the Winternals Recovery Manager Boot option. A progress display will be
visible while the system initializes.
The following events take place when initializing the system:
    1. Registering network components - detects and loads drivers for network hardware
    2. Configuring network components - initializes the TCP/IP stack
    3. Starting the DHCP client - queries a DHCP server for an IP address
    4. Starting the Network Location Awareness Service - detects the logical network to
       which the computer is attached




                                                                                                         49
Figure 4-3



             After initialization, the system will display Waiting for Connection until a remote system
             administrator connects with this machine to make repairs from the Recovery Center. Then it will
             display this administrator’s name. Also displayed are the local IP address and the Recovery Manager
             Agent version number. For the system name, it displays the name the Boot Client assigns to the
             session, beginning with “MININT.”
             If the system has multiple network cards installed or if you need to manually enter an IP address,
             click Configure from the IP Address drop-down menu to open the Recovery Manager Boot Client
             TCP/IP Configuration window.
             You can select from the list of detected network adapters and choose to obtain an IP address
             automatically or enter an IP address. To configure additional DHCP and WINS options and view
             network information, click Advanced. If you wish to restore default TCP/IP settings, click Restore.




50
       Notes
       — Systems running the Boot Client automatically reboot after 24 hours of continuous
         operation. You should complete any repairs to systems running the Boot Client
         beyond this time.


       — When booting a system that belongs to a mobile mode schedule, depending
         on Boot Client permissions granted, the user may have access to additional
         SMARTFIX options.




Booting with the Boot Client CD
To access a computer using the Boot Client CD, insert the CD and restart the system. During
initialization the computer will display a progress screen, followed by the connection screen.



4.2   Creating the Boot Client
The Boot Client Wizard which takes you through the steps of creating a Boot Client image can
customize an image with special device drivers that you supply, including OEM drivers for storage
devices not natively supported by the Windows XP-compliant Boot Client. The Wizard can also burn
CDs with the Boot Client image so that you can have additional copies of either the standard or a
custom Boot Client image.
There are two ways to access the Boot Client Wizard:
      • Launch the Recovery Center and under Maintenance in the Task pane, click Create
        Boot Client.
      • In the Recovery Manager Schedule Console, right-click the Recovery Manager node and
        select Create Boot CD.




                                                                                                    51
Figure 4-4



             Preparing Files
             The Boot Client Wizard extracts the files required from the Recovery Manager installation folder. No
             files from the Windows operating system are used to create the Boot Client.

             Adding Mass Storage Drivers
             If your protected computers have mass storage hardware that is not natively supported by the
             Recovery Manager Boot Client, you can add those drivers here.
             To add an OEM SCSI driver:
                 1. Click Add Device.
                 2. Locate the TXTSETUP.OEM configuration file for the driver.
                 3. Click Open to display a list of mass storage devices.
                 4. Select the device to support.
                 5. Click OK.




52
The Boot Client Wizard requires Windows XP- or Server 2003-compliant drivers to access storage
hardware not natively recognized by the Boot Client.




                 Figure 4-5




                                                                                                 53
             Adding Network Adapter Drivers
             If your protected computers have network adapters that are not natively supported by the Recovery
             Manager Boot Client, you can add those drivers through a process similar to adding the Mass Storage
             Drivers.




Figure 4-6




54
Adding Other Files
You also can add other files.




                    Figure 4-7




                                 55
             Boot Client Permissions
             Because Recovery Points are stored locally on computers in mobile mode schedules, mobile mode
             computer users can access the SmartFix Wizard contained in the Boot Client to perform repairs
             when their system becomes locked out or unbootable. From the Boot Client Permissions window,
             you can grant permissions for the user of this Boot Client image to use the SmartFix Wizard to create
             Recovery Points manually or to roll back the computer to a previous state.




                   Notes
                   — SmartFix Wizard permissions can also be set in the mobile mode schedule
                     properties. However, if booting with a Boot Client CD instead of a preinstalled
                     Boot Client, the permissions specified on the CD override permissions specified
                     elsewhere.
                   — On the TCP/IP Ports tab of the Schedule Console properties, you can change the
                     port number that the Boot Client uses to communicate with the Recovery Center.




Figure 4-8



     56
Saving the Boot Client Files
From the Save Boot Client Files window, choose the location for the Boot Client files which will be
preinstalled on the protected client systems.




                  Figure 4-9




                                                                                                     57
              Creating the Boot Client CD Image
              From the Create Boot Client CD window, you can save the Boot Client image or burn a Boot Client
              CD. If your CD burner is not recognized by the CD recording feature of the Boot Client Wizard,
              then you will need to create the Boot Client CD using the recording software that came with your
              computer or CD burner. (Refer to the “Frequently Asked Questions” under “Trouble Shooting” in
              the Help File for a list of CD Burners supported by the Boot Client Wizard.)




Figure 4-10




                    Notes
                    — If you encounter problems booting with the Boot Client CD, confirm that the
                      computer’s BIOS settings list the CD drive as the first device in the boot sequence
                      and that the computer supports booting from CD.
                    — The Windows XP CD-RW recording feature does not support burning .iso image files to CD.
                    — After creating the bootable CD from the .iso image, the CD should contain the
                      following files and folders:
                       • I386 Folder      • WIN51            • Winbom.ini
                       • Bootsect.bin     • WIN51IS          • License.txt




58
Summary Information
A final summary window appears after the wizard has created the Boot Client image. Click Finish
to exit the wizard.




                 Figure 4-11




                                                                                                 59
                                                       5.0    The Recovery Center

             From the Recovery Center, you can create Recovery Points, repair and diagnose systems, roll back
             computers using Recovery Points, view reports logging Recovery Manager activity, and create the
             Boot Client.
             The Recovery Center displays information in the Task, Computer Selection, and Details panes.




Figure 5-1




60
The Task pane contains the following menu groups:
    • Recovery - Analyze, repair, and roll back systems.
    • Tools - Various administration utilities.
    • Report - Recovery Manager activity reports.
    • Maintenance - Create ad hoc Recovery Points and create the Boot Client .


Click   to expand or click     to collapse each of the menu groups.
The Computer Selection pane displays information about all scheduled computers. From the
Computer Selection pane, you can select a single system or multiple systems to recover. Select a view
from the Selection View drop down list box to view computers by:
        Active Directory - to view all selected and unselected computers via an Active Directory tree view.
        All Computers - to view a list of all selected and unselected computers.
        Network - to view all selected and unselected computers via a NETBIOS tree view.
        Schedule - to view all selected and unselected computers by schedule.
        Selected Computers - to view a list of all selected computers.


The Details pane displays information about the computer selected in the Computer Selection pane.
You can view a detailed history of Recovery Points successfully created for a selected computer by
clicking the Recovery Points tab at the top of the Details pane.




                       Figure 5-2




                                                                                                              61
                              6.0    The Recovery Center: Recovery

             From the Recovery menu group of the Task pane (or from the Recovery menu), the following
             commands are available:
                    Roll Back Systems - Launches the Recovery Rollback Wizard to rollback a single system or
                                        group of systems.
                    Analyze and Repair - Launches the Analyze and Repair window to select Recovery Points
                                         for comparison.




Figure 6-1




62
6.1   Rolling Back a Single Computer
If the system to be rolled back is unbootable or locked out, first boot it using either the preinstalled
Boot Client or a Boot Client CD. Then from the Recovery Center, select the computer to roll back
from the Computer Selection pane.
Select Roll Back Systems from the Recovery menu (or from the Recovery menu group in the Task
pane or from the shortcut menu that appears when you right click a computer in the Computer
Selection pane). This action launches the Recovery Manager Rollback Wizard which will guide you
through the steps to roll back a single computer to a previous state.




         Figure 6-2




                                                                                                          63
             Selecting a Recovery Point
             From the Select a Recovery Point window, select a date that contains Recovery Points. (Dates that
             contain Recovery Points are displayed in boldface.) Recovery Points created on the selected date
             display in the Recovery Point list pane. The Rollback Operation area contains additional details
             about the selected Recovery Point.




Figure 6-3




64
Selecting Recovery Sets
The Select Recovery Sets window displays Recovery Sets contained in the Recovery Point. In the
example shown below, the Recovery Point contains the System, Program Files, and User Data
Recovery Sets, but not the User Settings Recovery Set.
All Recovery Sets are selected by default. If you do not want to roll back all, you can clear the check
marks and select the Recovery Sets you do want to roll back.
Note: To roll back program-related registry entries, the System Recovery Set must be selected with
the Program Files Recovery Set.




         Figure 6-4




                                                                                                          65
             Rollback Options
             Prior to performing a rollback, the Rollback Wizard creates a Recovery Point of the client system in
             its current state. This can be useful for root cause analysis to determine the source of the system’s
             problems or it can provide a means to undo a rollback if necessary.
             From the Rollback Options window, enter a description for the Recovery Point which the Wizard is
             about to create that explains the system’s current state or the failure circumstances.
             When you click Finish, the rollback operation will begin.
             It is recommended that you select the Reboot computer after rollback check box to reboot the client
             system automatically after the roll back completes.




Figure 6-5




66
Viewing Rollback Progress
The progress of the operation displays in the Progress bar. It is important not to make any other
changes to the computer while the rollback operation is in progress.
You can cancel the rollback operation by clicking Cancel or by clicking Cancel from the shortcut
menu that appears when you right click the computer in the list.




              Figure 6-6




                                                                                                    67
             When the operation completes, Recovery Manager generates a rollback report that documents
             rollback date and time, computer name, and files restored by the roll back.
             You should reboot the system for the changes to take effect.




Figure 6-7




68
6.2   Rolling Back a Group of Computers
If the systems to be rolled back are unbootable or locked out, first boot them using either the
preinstalled Boot Client or a Boot Client CD. Then from the Recovery Center, select the computers
to roll back from the Computer Selection pane.
Select Roll Back Systems from the Recovery menu (or from the Recovery menu group in the Task
pane, or from the shortcut menu that appears when you right click a computer in the Computer
Selection pane).
This action launches the Recovery Manager Rollback Wizard which will guide you through the
rollback process which is very similar to rolling back a single system.
From the Select a Recovery Point window, select a date that contains Recovery Points. (Dates that
contain Recovery Points are displayed in boldface.) All Recovery Points created on the selected date
are displayed in the Recovery Point list window. The Rollback Operation area contains additional
details about the selected Recovery Point.
When rolling back multiple computers from different schedules, it is possible that Recovery Point
dates may not coincide. If a Recovery Point is not available for a computer on the selected date, you
can let the Rollback Wizard select the Recovery Point created most recently before the specified
date.




                    Figure 6-8




                                                                                                        69
             From the Rollback Options window, enter a description for the Recovery Point which the Wizard is
             about to create that explains the systems’ current state or the failure circumstances. Select the Reboot
             computer after rollback check box to reboot the client system after the roll back completes.




Figure 6-9




70
Confirming Selected Computers
When rolling back multiple systems using Recovery Points created by different schedules, it is possible
that the some Recovery Points may not contain the Recovery Sets specified in the Select Recovery
Sets window. If a Recovery Point for a computer does not contain all of the Recovery Sets selected,
then the check box next to the computer name will be cleared and the missing Recovery Sets will be
listed in the Status column. Choose a different Recovery Point by selecting the check box next to the
computer name. This action will launch the Select a Different Recovery Point window where you
can choose another Recovery Point and select different Recovery Sets.
If you do not need to select a different Recovery Point, then when you click Finish, the rollback
operation will begin.




                     Figure 6-10




                                                                                                          71
              Selecting a Different Recovery Point
              If the Recovery Point you selected does not include the required Recovery Sets, you can select a
              different Recovery Point. Select one of the available Recovery Points and click Next.




Figure 6-11




72
Selecting Different Recovery Sets
Now that you have selected a different Recovery Point, you need to specify the appropriate Recovery
Sets to roll back




                    Figure 6-12




                                                                                                      73
              Viewing Rollback Progress
              The progress of the operation displays in the Progress bar. When the operation completes, Recovery
              Manager generates a rollback report that you can view with Internet Explorer.
              You can cancel the rollback operation for the group by clicking Cancel or you can cancel the rollback
              operation for a single computer by selecting Cancel from the shortcut menu that appears when you
              right click a computer in the list.
              It is important not to make any changes to the computers while the rollback operation is in
              progress.
              You should reboot the rolled back systems so the changes can take effect.




Figure 6-13




74
6.3   Analyze and Repair
To compare two Recovery Points, click Analyze and Repair from the Recovery menu of the Recovery
Center. This action opens the window for selecting the Recovery Points to analyze.




                     Figure 6-14

      1. Select the Recovery Points to compare from the First Recovery Point and Second
         Recovery Point drop down list boxes.
      2. Select Recovery Sets to compare. You must have at least one matching Recovery Set
         selected from both lists to continue. To compare drivers and services, the System
         Recovery Set must be selected for both Recovery Points.
      3. Click OK. This action opens the Analyze and Repair window.


It may take several minutes to compare the two Recovery Points.




                                                                                                  75
              Compare and Restore Files, Drivers, and Services
              From the comparison window, you can compare two Recovery Points or roll back specific files,
              drivers, services, and registry entries. Information is displayed in the Details pane and the Recovery
              Points Description pane.




Figure 6-15




76
From the Recovery Points Description area you can select Recovery Points for comparison and view
Recovery Point creation dates.
Select Differences Only to display only files that have changed between the two Recovery Points.
Select Show All to display all files from both Recovery Points.
Click Select to choose different Recovery Points to compare.
Recovery Point information is displayed in the Details pane from the five tabs:
    • Files - displays file information including the name of the file, the location of the file, and
      details about how the file has changed between the two Recovery Points.
    • Drivers - displays driver information including the name of the driver, a brief description of
      the driver and details about how the driver has changed between the two Recovery Points.
    • Services - displays services information including the name of the service, a brief description
      of the service and details about how the service has changed between the two Recovery Points.
    • Registry - displays registry information.
    • Selected - displays all items selected from the Files, Drivers, Services, and Registry tabs.


Click Select All to select the check boxes for all files in the selected tab.
Click Unselect All to clear the check boxes for all files in the selected tab.
Click Rollback to roll back selected files.
Click Report to view a report that displays the differences between the two Recovery Points.
Click Close to exit the Analyze and Repair window.




      Notes
       The Differences Only and Show All features affect content in all tabs, not just the tab
       currently displayed.
       The Differences Only feature is selected by default.
       The Rollback feature rolls back selected items from all tabs, not just from the tab
       currently displayed.
       The Report feature generates a report from the content displayed by all of the tabs.
       If the Differences Only option is selected, then the resulting report will include only
       items that differ between the two Recovery Points selected. If the Show All option is
       selected then the a report will be generated of all Recovery Point content.




                                                                                                        77
              Files Tab
              The Files tab displays File related information for the two selected Recovery Points.




Figure 6-16



              To display only files that have changed between Recovery Points, click Differences Only.
              To display all Recovery Point files click Show All.
              The Differences Only and Show All features affect content in all tabs, not just the currently selected
              tab.
              To roll back specific files:
                  1. Select the files to roll back from the Details pane.
                  2. Click Rollback.




78
This action will launch the Copy Selected Items window where you can replace a file or group of files
with versions contained in the older or newer Recovery Point.
To select all items in the tab, click Select All.
To clear all items in the tab, click Unselect All.
To view a detailed HTML comparison report of the Recovery Points click Report. The Report feature
generates a report from the content displayed by all of the tabs. If the Differences Only option is
selected, then the resulting report will include only items that differ between the two Recovery Points
selected. If the Show All option is selected then a report will be generated of all content from both
Recovery Points. The Rollback feature rolls back selected items from all tabs, not just from the tab
currently displayed.




                                                                                                          79
              Viewing File Properties
              To view more detailed information about a specific file, select Properties from the shortcut menu
              that appears when you right click a file in the File tab.




Figure 6-17



              The Properties window displays the file name and the old and new values for the following
              attributes:
                  • Alternate Name - Short name in classic 8.3 (filename.ext) file name format
                  • Attributes - File Attributes such as Read Only, System, Archive, Hidden
                  • Creation Time - Date the file was created
                  • Description - The name of the program that uses this file
                  • Directory Name - The name of the directory where the file is located
                  • File Size - Size of the file in bytes
                  • Last Modified - Date when the file was most recently modified
                  • Version - Version number


              Click Show All Values to display all File attributes and values.
              Click Differences Only to display only attributes and values that have changed.
              Click OK to return to the Analyze and Repair window.


80
Comparing Text Files
To view more detailed information about a specific file, select Properties from the shortcut menu
that appears when you right click a file in the File tab.




         Figure 6-18

If a text file has been modified, then you can view and compare the text differences between the older
and newer versions.
To view the text differences, select Compare Files from the shortcut menu that appears when you
right click a text file from the Files tab. This action will generate a report that displays the changes
between the two text files including lines added, lines changed, and lines removed.


      Note
      Selecting the Compare Files feature for a binary file will display only the file name and
      creation date.




                                                                                                          81
              Drivers Tab
              The Drivers tab displays driver related information of the two selected Recovery Points.




Figure 6-19



              To display only Drivers that have changed between Recovery Points, click Differences Only.
              To display all Recovery Point Drivers click Show All.
              To roll back specific drivers:
                  1. Select the drivers to roll back from the Details pane.
                  2. Click Rollback.




82
This action will launch the Copy Selected Items window where you can roll back a driver or group
of drivers to versions contained in the older or newer Recovery Point.
To select all items in the tab, click Select All.
To clear all items in the tab, click Unselect All.
To view a detailed HTML comparison report of the Recovery Points click Report.


       Note
       The Differences Only and Show All features affect content in all tabs, not just the
       currently selected tab.
       The Report feature generates a report from the content displayed by all of the tabs.
       If the Differences Only option is selected, then a the resulting report will include only
       items that differ between the two Recovery Points selected.
       If the Show All option is selected then the a report will be generated of all content
       from both Recovery Points.




                                                                                                   83
              Services Tab
              The Services tab displays service related information of the two selected Recovery Points. .




Figure 6-20



              To display only Services that have changed between Recovery Points, select Differences Only. To
              display all Recovery Point Services click Show All.
              To roll back specific services:
                  1. Select the services to roll back from the Details pane.
                  2. Click Rollback.




84
This action will launch the Copy Selected Items window where you can roll back a service or group
of services to versions contained in the older or newer Recovery Point.
To select all items in the tab, click Select All. To clear all items in the tab, click Unselect All.
To view a detailed HTML comparison report of the Recovery Points click Report.




      Note
       The Differences Only and Show All features affect content in all tabs, not just the
       currently selected tab.
       The Report feature generates a report from the content displayed by all of the tabs.
       If the Differences Only option is selected, then the resulting report will include only
       items that differ between the two Recovery Points selected.
       If the Show All option is selected then a report will be generated of all content from
       both Recovery Points.




                                                                                                       85
              Registry Tab
              The Registry tab displays registry related information of the two selected Recovery Points.




Figure 6-21



              To display only registry entries and values that have changed between Recovery Points, select
              Differences Only. To display all Recovery Point Registry entries and values, click Show All.
              To roll back specific registry entries:
                   1. Select the registry entries to roll back from the Details pane.
                   2. Click Rollback.




86
This action will launch the Copy Selected Items window where you can roll back a registry entry or
group of registry entries, to versions contained in the older or newer Recovery Point.
To select all items in the tab, click Select All. To clear all items in the tab, click Unselect All.
To view a detailed HTML comparison report of the Recovery Points click Report.




      Note
       The Differences Only and Show All features affect content in all tabs, not just the
       currently selected tab.
       The Report feature generates a report from the content displayed by all of the tabs.
       If the Differences Only option is selected, then the resulting report will include only
       items that differ between the two Recovery Points selected.
       If the Show All option is selected then a report will be generated of all content from
       both Recovery Points.




                                                                                                       87
              Selected Tab
              The Selected tab displays a summary of selected items from the Files, Drivers, Services, and
              Registry tabs.




Figure 6-22



              To display only selected items that have changed between Recovery Points, click Differences Only. To
              disp lay all selected items click Show All.
              To roll back the selected items:
              1. Select the items to roll back from the Details pane.
              2. Click Rollback.




88
This action launches the Copy Selected Items window where you can roll back the selected items to
versions contained in the older or newer Recovery Point.
To select all items in the tab, click Select All.
To clear all items in the tab, click Unselect All.
To view a detailed HTML comparison report of the Recovery Points click Report.




       Note
       The Differences Only and Show All features affect content in all tabs, not just the
       currently selected tab.
       The Report feature generates a report from the content displayed by all of the tabs.
       If the Differences Only option is selected, then the resulting report will include only
       items that differ between the two Recovery Points selected.
       If the Show All option is selected then a report will be generated of all content from
       both Recovery Points.




                                                                                                    89
              Rolling Back Files
              From the Copy Selected Files window, you can view the rollback progress.




Figure 6-23



              Select the Recovery Point that contains the version of the files that you want to roll back to.
              It is recommended to reboot the client computer after rolling back files for changes to take effect.




90
         Figure 6-24


After the rollback process completes, Recovery Manager will generate a report that can be viewed
by Internet Explorer. The rollback report displays rollback date and time, computer name, and files
restored in the roll back.
You should reboot the system for the changes to take effect.




                                                                                                     91
              Viewing a Recovery Points Comparison Report
              From the Analyze and Repair window you can view a report that displays the differences between
              Recovery Points.




Figure 6-25



              The comparison report displays the following information:


                  • Date and time when the report was created
                  • Creation date and time of the first Recovery Point with comments
                  • Creation date and time of the second Recovery Point with comments
                  • Summary of the files that have changed between the two Recovery Points
                  • Summary of drivers that have changed between the two Recovery Points
                  • Summary of services that have changed between the two Recovery Points
                  • Summary of the registry keys that have changed between the two Recovery Points




92
                        Figure 6-26

The report also displays detailed information about the files that have changed including:
    • File path
    • A brief description of the file
    • File creation date
    • File modification date
    • File size in bytes
    • File attributes
    • A brief description of how the file has changed




                                                                                            93
                                       7.0    The Recovery Center: Tools

             From the Tools menu group you can access administrator’s utilities for analyzing, managing, or
             repairing a selected system.




Figure 7-1




94
The following commands are available from the Tools menu, or the Tools menu group of the Task
pane or from the shortcut menu that appears when you right click a computer in the Scope pane.
They can access or repair one system at a time.
        Explore Recovery Points - launches the Recovery Point Explorer to explore the contents of
        a Recovery Point
        Edit Registry - allows you to edit the registry of the selected computer
        Manage Computer - lets you access various administrative tools to manage the selected computer
        Edit Boot.ini - to edit the Boot.ini of the selected computer
        Change Password - changes the password for any local account for the selected computer
        (which must be booted to the Boot Client).




7.1   Explore Recovery Points
With the Recovery Point Explorer, you can browse the contents of a Recovery Point and search for
specific files to copy to another location. Information is displayed in the Computer Selection box,
Recovery Set pane, Details pane, and Recovery Point Selection box.




             Figure 7-2




                                                                                                         95
     The Computer Selection box displays the currently selected computer.
     The Recovery Set pane displays the selected Recovery Point’s respective Recovery Set information in
     a tree view.
     The Recovery Point Selection box displays Recovery Point information for the selected computer.
     The Details pane displays file information or registry key values related to the folder selected in the
     Recovery Set pane.
     The following toolbar buttons are available:
              to search a Recovery Point for a specific file.
              to copy a file from the Recovery Point to another location.
              to launch Help.




96
7.2   Editing the Registry
The Recovery Manager Registry Editor, similar to the Windows XP Registry Editor, enables you to
edit the registry of a computer booted with the Boot Client.




           Figure 7-3

The Registry Editor supports editing of the HKEY_CLASSES_ROOT and HKEY_LOCAL_MACHINE
keys only because:
      • Systems booted with the Boot Client have no current hardware configuration loaded,
        eliminating the need to edit the HKEY_CURRENT_CONFIG, the root key that links to the
        part of the registry representing the active hardware profile.
      • There is no HARDWARE subkey under HKEY_LOCAL_MACHINE, because the system
        creates the HARDWARE key for an installation when it boots.


The Registry Editor understands the following registry value types:
      • String                • Expandable String          • DWORD
      • Multi-String          • Binary


       Note
        If any of the registry hives of the system that you are repairing are missing or corrupt,
        one or more subkeys under HKEY_LOCAL_MACHINE will not be available.




                                                                                                    97
             7.3   Importing and Exporting Registry Keys




Figure 7-4



             The Registry Editor supports registry key import and export, like Windows Regedit. This allows
             you to save registry key information to a text file and to import registry key information into the
             registry.
             To export a registry key, select a key and click Export from the Registry menu.
             To import a key, click Import from the Registry menu.




                    Note
                    The Registry Editor saves files in a .reg file format that is compatible with Windows
                    2000, XP, and Server 2003 registry editors.




98
7.4   Resetting Registry Permissions
Use the Regedit permissions reset feature if a system becomes unbootable due to registry key security
permissions preventing the system from accessing critical areas of the registry.
To reset permissions on a key:
      1. Select the key to reset.
      2. Choose Reset Permissions from the Edit menu or from the shortcut menu that
         appears when you right click.
      3. On the Reset Permissions box, select Reset permissions on all child objects to reset
         permissions on the key and all of its subkeys.
      4. Click OK.




       Note
       • Permissions cannot be reset on a hive root, for example HKEY_CLASSES_ROOT,
         HKEY_LOCAL_MACHINE.
       • Resetting permissions makes objects fully accessible to any user. It is recommended
         that you lock down the appropriate keys after the system starts normally.




                                                                                                        99
             7.5   Manage Computer
             From the Recovery Manager Computer Management console, you can access administrative tools
             to manage selected computers.




Figure 7-5



             The Computer Management console displays information in a two-pane view that is similar to
             Windows Explorer.
             The Scope pane displays the following nodes:
                     System Information - to view detailed information about a selected computer’s configuration.
                     Event Viewer - to examine the System, Application, and Security event logs of the selected system.
                     Service and Driver Manager - to view configuration settings of drivers and services.
                     Logical Drives - to explore and copy files to and from the selected system.




100
7.6   System Information
From the System Information node you can view detailed information about the selected system
including the Windows version, service packs, hot fixes, registered owner and organization, and
more.




         Figure 7-6




       Note
       The System root value can be useful to determine the location of key system files,
       such as service and driver files and registry hives.
       The Real computer name field displays the IP address assigned to the system. In
       the picture above, two IP addresses are displayed, one for each of two network cards
       installed in the system.
       The System Information node reports the installation’s computer name as well as the
       computer name (listed as the “Real computer name”) that the computer is currently
       using. If the computer is booted into Windows then the real computer name is the
       same as the computer name.
       If the system is booted from the Boot Client then the Real computer name reports
       the name that Client assigns to the session, a name that starts with “MININT”.




                                                                                                 101
             7.7   Event Viewer
             From the Event Viewer node you can examine the System, Application, and Security event logs of the
             selected system to help determine the cause of unexpected system behavior.




Figure 7-7



             To view detailed information about an event, choose Properties from the MMC Action menu or
             from the shortcut menu that appears when you right-click. Click Microsoft Knowledge Base to view
             detailed information about the event from Microsoft’s online knowledge base.




102
7.8   Filtering Event Logs




          Figure 7-8


To filter the Event Logs or to search for a specific event ID, select Filter... from the View menu. This
action launches the System Log Filter where you can filter the event logs by Event Types, Event
Source, Category, Event ID, User, Computer, or Date range.




                                                                                                         103
             7.9   Service and Driver Manager
             From the Service and Driver Manager node, you can view information about services and drivers
             and disable a driver or service that may prevent a system from booting.




Figure 7-9




104
7.10   Viewing Service and Driver Properties
To view service and driver properties, select a service or driver, and then choose Properties from the
MMC Action menu or from the shortcut menu that appears when you right-click, or double-click
the item.




          Figure 7-10

The Properties dialog box displays the driver or service name and display name, path to the executable,
and the current startup type.
To disable a service or driver, display its properties and change the Startup type to Disabled. Doing
so may render a system unbootable so this should be done very carefully.




                                                                                                          105
              7.11   Logical Drives
              From the Logical Drives node, you can browse, and move, and copy files to and from the volumes
              of a selected system.




Figure 7-11



              To browse the remote drive, click the drive letter in the Details pane. This action launches Windows
              Explorer.




                     Notes
                     File and Printer Sharing must be enabled on the host and client to browse remote
                     drives.
                     You can also copy files to and from systems booted to the Boot Client.




106
7.12   Editing Boot.ini
With the Recovery Manager Notepad you can edit the BOOT.INI to change the default operating
system, or the time-out value, or add switches to modify the behavior of Windows.




                        Figure 7-12




       Notes
       It is recommended to backup the Boot.ini file before editing.
       For more information about Boot.ini options, see the “Boot INI Options Reference”
       document on the Sysinternals website.
       http://www.sysinternals.com/ntw2k/info/bootini.shtml




                                                                                              107
              7.13   Resetting Passwords
              If you are unable to log in to a computer because a local account password has been lost or locked out,
              start the remote computer with the Boot Client and reset the password with the Change Password
              utility of the Recovery Center.




Figure 7-13



              To change a password:
                     1. Select a local account from the Account drop down list box.
                     2. Enter the new password in the New password box.
                     3. Reenter the new password in the Confirm password box.
                     4. Click Set Password.


                      Notes
                      Client computers must be started with the Boot Client to allow the Change Password
                      utility to read account information from the client computer’s registry.
                      You can change a password for only one account per session. You must restart the
                      client computer for the password change to take effect.
                      If you have a local or domain policy that enforces password complexity, the new
                      password must conform to this policy or it will silently fail to be changed.
                      The Change Password utility requires that the System Registry hive (%Systemroot%\
                      System32\Config\System) be intact.
                      The Change Password utility works by installing a run once service on the client
                      system that changes the password right before the Windows login. If you boot into
                      Safe Mode or the Recovery Console immediately after setting the new password,
                      the password will not have yet been applied because the Safe Mode and Recovery
                      Console environments start before the Change Password service runs.
                      The Change Password utility will not change Active Directory domain accounts.




108
                                              8.0        The Recovery Center: Report

Recovery Manager creates several reports to document its activities and the status of available
Recovery Points.




            Figure 8-1


From the Report menu group of the Task pane (or from the Report menu,) you can access the
following reports that are viewable with the Internet Explorer. To save a report, click Save As from
the Internet Explorer File menu.
    • Recovery Point Summary - reports age of Recovery Points for scheduled systems.
    • Rolled Back Systems - reports systems that have been rolled back.
    • Password Changes - reports systems for which have had passwords changed.
    • System Activity - reports activity for a specific system.
    • All Activity - reports activity for all systems.
    • Export All Activity - saves all activity report information to a text file or comma delimited
      text file (.csv file). CSV files are useful for importing into databases, spreadsheets and other programs.


                                                                                                                109
             8.1   Recovery Point Summary




Figure 8-2



             The Recovery Point Summary report displays Recovery Point information for all scheduled
             systems:
                   • System Name – Name of a system with Recovery Points in the File Store.
                   • Newest Recovery Point - The creation date and time of the most recent Recovery Point in the
                     File Store for the specified system.
                   • Age in Days - Age of the most recent Recovery Point in days.
                   • Oldest Recovery Point - The creation date and time of the oldest Recovery Point in the File Store.
                   • Age in Days - Age of the oldest Recovery Point in days.
                   • Number of Recovery Points - Total number of Recovery Points in the File Store for the specified system.




110
8.2   Rolled Back Systems
This report displays a history of systems that have been rolled back.




           Figure 8-3


The Rolled Back Systems report displays rollback information for all scheduled systems including:
      • System Name - Name of the system that was rolled back
      • Date Rolled Back - Date and time of the rollback
      • Rolled Back By - Name of the account that initiated the rollback
      • Description - Type of rollback performed




                                                                                                    111
             8.3   Password Changes
             The Password Changes report displays a history of all passwords changed by Recovery Manager.




Figure 8-4



             The Password Changes report displays information about systems whose passwords were changed
             by Recovery Manager including:
                   • System Name - Name of system for which the password was changed.
                   • Date - Date and time of the password change
                   • Changed By - Name of computer from which the password change operation originated




112
8.4   System Activity
The System Activity report displays a summary of Recovery Point activity for selected systems.
Information includes the name of the Schedule Console computer, account name, and type of
activity. The results are grouped by computer name.




                   Figure 8-5




                                                                                                 113
             8.5   All Activity
             The Recovery Manager Activity report displays a summary of Recovery Point activity for all scheduled
             systems. Information includes the name of the Schedule Console computer, account name, type of
             activity, and comments. The results are grouped by date and by computer name.




Figure 8-6




114
                            9.0   The Recovery Center: Maintenance

From the Maintenance menu group of the Task pane (or from the Maintenance menu), you can
manually create Recovery Points or create the Boot Client.
       Create Recovery Point - Create a Recovery Point for a single system or group of systems.
       This manual or ad hoc approach allows you to take a Recovery Point at any time,
       independent of your Recovery Point schedules, should the situation require it.
       Create Boot Client - Launches the Recovery Manager Boot Client Wizard to create a Boot
       Client image and optionally to create a Boot Client CD.




                   Figure 9-1




                                                                                                  115
      9.1   Create Recovery Point
      To manually create a Recovery Point for a single computer or a group of computers:
            • From the Recovery Center, select a computer or a group of computers from the Computer
              Selection pane.
            • Click Create Recovery Point from the Maintenance menu group of the Task pane (or from
              the Maintenance menu or from the shortcut menu that appears when you right click a
              computer in the Computer Selection pane).


      This action launches the Create Recovery Point Wizard which guides you through the process of
      creating a Recovery Point. The steps are like those used to define a scheduled Recovery Point.


            1. Select the Recovery Sets to include.
            2. Enter a description to identify the Recovery Point


      Click Finish and the Recovery Point will be generated. A window will be displayed for monitoring
      the Recovery Point progress.




      9.2   Creating the Recovery Manager Boot Client
      The steps for creating the Recovery Manager Boot Client are described in detail in Section 4.2.




116
9.3   Mobile User Recovery Tools – the SmartFix Wizard
Recovery Manager automatically installs the SmartFix Wizard and Recovery Point Explorer on
computers in mobile mode schedules so users can repair and roll back their systems even when
disconnected from the network.
Users must be logged in to an account that is a member of the local Administrator’s group.
Permissions must be granted to users in the Schedule Mode Properties to access the SmartFix Wizard.

Using the SmartFix Wizard to Roll Back a Computer to a Previous State




         Figure 9-2


Select Roll back my computer to an earlier time to roll back the computer to a previous state.




                                                                                                      117
             Selecting a Recovery Point




Figure 9-3



             From the Select a Recovery Point window of the SmartFix Wizard, you can roll back your system
             to a previous state. The calendar pane displays dates that contain Recovery Points in boldface. The
             Recovery Point list pane displays the times and descriptions of available Recovery Points for the
             selected calendar date.
             To choose a Recovery Point to roll back:
                 • Select a Recovery Point date from the calendar pane. Dates that contain Recovery Points are
                   displayed in bold text.
                 • From the Recovery Point list, select the Recovery Point you want to apply and click Next.




118
Selecting Recovery Sets
From the Choose Recovery Sets window of the SmartFix Wizard, select the Recovery Sets to include
in the rollback operation.




                    Figure 9-4


You must specify at least one Recovery Set to continue.
To recover program-related registry entries for installed programs, the System Recovery Set must be
selected with the Program Files Recovery Set.




                                                                                                      119
             Confirming Rollback Options




Figure 9-5



             The Confirm Rollback Options window contains a summary of the selected Recovery Sets, Recovery
             Point date and description. Click Next to continue with the rollback operation.




120
Completing the Rollback
Next Recovery Manager creates a Recovery Point of the current system state before rolling back the
system so you can undo any changes if necessary. After the rollback process completes, click Report
to view a summary report that displays the rollback date and time, the computer name, and files
restored by the rollback operation.
Rebooting the system after the rollback is strongly recommended so that the changes can take
effect.




          Figure 9-6




                                                                                                      121
Figure 9-7




122
Using the SmartFix Wizard to Create a Recovery Point Manually




        Figure 9-8


Before installing any programs, service packs, or other updates that may make your system unstable,
it is strongly recommended that you create a Recovery Point. This will enable you to roll back your
system to the state before the changes were applied. Select Create a Recovery Point to manually
create a Recovery Point.




      Notes
      If you need to determine how your computer has been modified by changes that have
      already occurred, manually create a Recovery Point of its current state so that you can
      compare it to a Recovery Point taken in a previous state.




                                                                                                      123
            Providing a Recovery Point Description




Figure9-9



            Enter a description for the Recovery Point including details that describe the current status of the
            systems or the circumstances under which this Recovery Point was taken.




124
Selecting Recovery Sets




                    Figure 9-10


From the Select Recovery Sets window of the SmartFix Wizard, select one or more Recovery Sets to
include in this Recovery Point.




      Notes
      To protect program-related registry entries for installed programs, the System
      Recovery Set must always be selected with the Program Files Recovery Set.
      The SmartFix Wizard displays Recovery Sets that currently exist in the local File
      Store. You cannot create new Recovery Sets from the SmartFix Wizard like you can
      with the Recovery Set Editor from the Schedule Console.




                                                                                                   125
              Viewing Recovery Point Progress




Figure 9-11



              The Creating Recovery Point page displays the Recovery Point progress.
              You cannot stop Recovery Point creation once it has started.




126
Viewing the Recovery Point Report




                                 Figure 9-12


From the Recovery Point Created window, you can view the Recovery Point date, description, and
Recovery Sets selected. To generate a detailed report that can be viewed with the Internet Explorer,
click Report.




                                 Figure 9-13


The next step should be to reboot the system so the rollback changes can take effect.


                                                                                                       127
                                                          10.0     Troubleshooting

      For troubleshooting advice, refer to the Recovery Manager 2.0 Best Practices Guide which
      provides advice for implementing and using Recovery Manager, including Recovery Point File
      Store optimization and security considerations, such as dealing with firewalls and permissions, and
      troubleshooting.


      http://www.winternals.com/es/support/recoverymanager/bestpractices.asp




128
                                            11.0      Frequently Asked Questions

How do I Use Recovery Manager to Determine How a System Was Modified by a
Software Update?
Before deploying a software update to your systems, it is important to know which files and folders
may be affected. After installing the software update on a test system, you can use Recovery Manager
to determine the files and folders that have been modified with the following steps:
    1. Create a Recovery Set to protect all files, folders, and registry entries on
       %systemdrive%.
    2. Create a new Recovery Point schedule.
    3. Launch the New Schedule Wizard.
    4. From the Schedule Mode page, select Standard Mode.
    5. From the Recovery Sets page of the New Schedule Wizard, add the Baseline
       Recovery Set to the schedule.
    6. Clear the check boxes for the other Recovery Sets.
    7. From the Computers page, add the test system to the schedule.
    8. Manually create a Recovery Point for the test system to serve as a baseline reference.
    9. Install the software update on the test system.
    10. Manually create a second Recovery Point of the test system.
    11. Launch the Analyze and Compare feature of the Recovery Center and compare
        the two Recovery Points.
    12. From each of the Analyze and Compare tabs, you can view a detailed HTML
        report of the comparison by clicking Report.


You can also use this method to determine which files, folders, and registry entries are created when
new software is installed on a client.



How do I Install the Recovery Manager Agent on Computers that do not have File
and Printer Sharing Enabled?
Recovery Manager depends on File and Print Sharing to automatically deploy the agent. For
computers that do not have File and Printer Sharing enabled, you can either manually install the
agent or you can deploy the agent by group policy or script. The steps for either procedure are in
Chapter 3.




                                                                                                       129
      How do I Preview the Changes that will be Applied to a Client by a Rollback?
      Before rolling back a system with a specific Recovery Point, you can preview the changes that would
      be made to it:
          1. From the Recovery Center, select the computer from the Scope pane.
          2. Select Create Recovery Point from the Maintenance menu group of the Task pane
             or from the Maintenance menu or from the shortcut menu that appears when you
             right-click a system in the Scope pane. This action launches the Create Recovery
             Point Wizard.
          3. Create a Recovery Point.
          4. From the Recovery Center, click Analyze and Repair from the Recovery menu.
             This action opens the Analyze and Repair window.
          5. From the First Recovery Point drop down list box, select the newly created
             Recovery Point.
          6. From the Second Recovery Point drop down list box, select the Recovery Point
             intended for the rollback operation.
          7. Click OK.


      A comparison will be displayed which identifies the differences between the two Recovery Points,
      giving you a preview of what would be changed if you performed a rollback using the second
      Recovery Point.



      How do I Create Recovery Points of the Schedule Console Computer?
      In order to protect the integrity of the Recovery Manager database and File Store, Recovery Manager
      prevents the Schedule Console computer from being added to Recovery Point schedules. As a
      precaution, include the Recovery Manager database and File Store as part of your conventional
      backup routine.



      What CD Burners are Supported by the Boot Client Wizard?
      Please refer to Frequently Asked Questions in the Recovery Manager Help File for a list of CDROM/
      DVD recorders that are natively supported by the CD burning capability of the Boot Client Wizard.




130
How Much Space Should I Allocate for the File Store?
The space required for Recovery Manager’s File Store depends on the following conditions:


    • The number of systems scheduled for Recovery Points
    • The Recovery Sets specified for the Recovery Points
    • The number and size of applications installed on the protected clients
    • The version of Windows installed on the protected clients
    • The service pack of Windows installed on the protected clients
    • The user files and documents on the protected clients if the Recovery Sets specified
      include them


The four predefined Recovery Sets (System, Program Files, User Data, and User Settings) vary in the
amount of space they require and the growth rate.
The Recovery Manager File Store manages space efficiently by storing only one copy of any file with
a unique content address computed by a 128 bit MD5 cryptographic algorithm. So, clients that
contain a large number of identical files will use less File Store space than clients that contain a large
number of different files.
For the System Recovery Set, protected clients tend to contain a large number of identical files so
storage space is utilized most efficiently. However, for the User Data Recovery Set, it is likely that the
number of identical files contained by protected clients will be low which will increase the storage
space required.
Space required to create Recovery Points that contain the Program Files Recovery Set will be affected
by the number and size of applications installed on each client and how many applications are
identical among the clients.
Space requirements for customized Recovery Sets (created with the Recovery Set Editor) will depend
on the user-defined selection of files and settings.
The recommended approach for determining the required storage space is to derive it from observing
Recovery Manager in your environment over an initial test period:
     1. When you first install Recovery Manager, do not specify a limit for the File Store
        size and do not set a limit on the number of days of Recovery Points to be retained.
     2. Schedule a set of systems and let Recovery Manager create Recovery Points for
        these systems on a regular basis for several days to a week.
     3. Note the space require to make the initial Recovery Point and then compare to
        the subsequent ones. The first Recovery Point should require the most space and
        subsequent ones less.
     4. Determine the maximum Recovery Point age that would be acceptable to you
        when rolling back a system.
     5. Determine the space required to store Recovery Points for at least one Recovery
        Point for each protected client.




                                                                                                            131
      Based on the rate of expansion of the File Store for each Recovery Point schedule after the initial
      instance, you can determine the space required for at least one Recovery Point per client and the size
      that will be exceeded when Recovery Points have accumulated beyond the age you have determined
      to be acceptable.
      It is recommended that you allow sufficient space for the File Store to contain at least one Recovery
      Point per client plus space for several incremental Recovery Points within your specified limit on
      Recovery Point age.
      For more information on this topic, please check the Winternals Knowledge Base and the Recovery
      Manager 2.0 Best Practices Guide on the support web site at http://www.winternals.com/support.



      What Files and Folders are Protected by the System Recovery Set?
      The System Recovery Set is a standard, predefined Recovery Set that protects all system files, system
      settings, and boot files. For a complete list of the file name extensions, files and folders, and registry
      entries included in the System Recovery Set, check under Frequently Asked Questions in the
      Troubleshooting section of the Help File where you can obtain a detailed answer to this question.
      The System Recovery Set cannot be changed. However, you can save a copy of the Recovery Set for
      use as a template when creating new Recovery Sets.



      What Files and Folders are Protected by the Program Files Recovery Set?
      The Program Files Recovery Set is a standard, predefined Recovery Set that protects all files in the
      Program Files folder and subfolders. To view the details:
          1. Launch the Recovery Set Editor.
          2. Click Open.
          3. Locate the Program Files .rsd file located in the Recovery Manager
             installation folder.
          4. Click Open.


      This action will display the files folders and registry entries that the Program Files Recovery Set
      protects in the Recovery Set Editor tabs.
      The Program Files Recovery Set cannot be changed. However, you can save a copy of this Recovery
      Set for use as a template when creating new Recovery Sets with the Recovery Set Editor.




132
What Files and Folders are Protected by the User Settings Recovery Set?
The User Settings Recovery Set protects all user settings such as Display preferences, Power
Management, keyboard, network share settings, printer connections, and other related settings
located in the HKEY_USER registry hive.



What Files and Folders are Protected by the User Data Recovery Set?
The User Data Recovery Set is a standard, predefined Recovery Set that protects all files in the
Documents and Settings folder and subfolders. More specifically, it protects the following files,
folders, and registry entries.

File Name Extensions
*.*

Files and Folders
%Profiles%
%Profiles%\*\Temp
%Profiles%\*\Temporary Internet Files
%Profiles%
%Profiles%\*\Temp
%Profiles%\*\Temporary Internet Files

Registry Entries
None
The User Data Recovery Set cannot be changed. However, you can save a copy of this Recovery Set
for use as a template when creating new Recovery Sets with the Recovery Set Editor.



How do I Create a Custom Recovery Set?
To protect specific files, folders, or registry entries, use the Recovery Set Editor to create custom
Recovery Sets tailored to your requirements. For example, if you have applications that install
components in nonstandard directories, customize a Recovery Set that includes only those specific
directories.
To create a custom Recovery Set, launch the Recovery Set Editor by right-clicking the Recovery Set
node in the Schedule Console. Use the Editor to select the files, folders, and registry entries you want
to include or exclude in the Recovery Point and save the Recovery Set definition in the Recovery
Manager installation directory (C:\Program Files\Winternals\Recovery Manager\ ) so it can be
accessed by the Recovery Manager Schedule Console.




                                                                                                          133
      The four predefined Recovery Sets can serve as templates or starting points for creating your own
      custom Recovery Sets. Follow these steps:
          • Open a predefined Recovery Set
          • Save it under a different name.
          • Modify the settings in the four tabs (General, Extensions, File and Registry) as required.
          • Save the modified definition.


      How Can I Duplicate Schedules?
      You can quickly create a new schedule with settings that match an existing schedule using copy-and-
      paste:
          • Select the Schedule subnode and click the Copy toolbar button, or choose Copy from the
            MMC Action menu or from the shortcut menu that appears when you right-click.
          • Select the Schedule node and click the Paste toolbar button, or choose Paste from the MMC
            Action menu or from the shortcut menu that appears when you right-click.


      Whenever you paste a schedule, you will be prompted to enter the user name and password for the
      new schedule.



      What are the Differences between Recovery Points and Windows Restore Points?
      Recovery Points are similar to Windows XP Restore Points, but Recovery Manager provides these
      additional capabilities:
          • Restore Points can only be used to repair a system that is bootable whereas Recovery Manager
            can use Recovery Points to repair or roll back systems that have become locked out or
            unbootable.
          • Restore Points are only available for Windows XP. Recovery Manager can create Recovery
            Points not only for Windows XP but also for Windows NT4, Windows 2000, and Windows
            Server 2003.
          • Restore Points can only be used to repair one system at a time and only from the system
            itself. Recovery Manager can roll back multiple systems across the network from a single
            installation.
          • The contents of a Recovery Point can be customized with the Recovery Set Editor.




134
How Do I Roll Back a Computer to a Previous State?
You can use the Roll Back Systems feature in the Recovery Center to restore a system to a previous
state captured in a Recovery Point:
    1. Launch the Recovery Center.
    2. From the Computer Selection pane, select the computer(s) to roll back.
    3. Choose Roll Back Systems from the Recovery menu. This action launches the
       Recovery Manager Rollback Wizard which will guide you through the rollback
       process.


How Do I Find a Computer by Name or Description in the Active Directory?
To find a computer in the Active Directory by name or description from the Recovery Manager
Schedule Console:
    • Select an Active Directory subnode or Organizational Unit.
    • Click the Find toolbar button, or chose Find Computer from the MMC Action menu or
      from the shortcut menu that appears when you right click.
    • Enter any portion of the computer name or description and click Find Next.


What Should I Know About Recovery Manager, Windows XP, and Server 2003 Clients?
If your remote computers are running Windows XP or Server 2003, the Windows Firewall,
Internet Connection Firewall or Simple File Sharing features may interfere with Recovery Manager
communication. You may need to turn off Simple File Sharing and adjust Windows Firewall settings
to allow the Recovery Manager to communicate with its protected clients.
To turn off Simple File Sharing in Windows XP, perform the following steps:
    1. Double-click My Computer on the desktop.
    2. On the Tools menu, click Folder Options.
    3. Click the View tab
    4. Clear the Use Simple File Sharing (Recommended) check box.


To adjust Windows Firewall settings in Windows XP, perform the following steps:
    1. Click Start and then click Control Panel.
    2. In the Control Panel, click Security Center, and then click Windows Firewall.
    3. On the Exceptions tab, click Add Port.
    4. In the Add a Port dialog box, add the two TCP/IP ports Recovery Manager uses to
       communicate.
    5. Click OK.




                                                                                                     135
      To adjust Internet Connection Firewall settings in Server 2003, perform the following steps:
          1. Click Start and then click Control Panel.
          2. In the Control Panel, click Network Connections.
          3. Click Local Area Connection.
          4. Click Properties.
          5. Click Advanced.
          6. Select the Internet Connection Firewall checkbox.
          7. Click Settings to open the Advanced Settings window.
          8. Click Add to open the Service Settings window.
          9. Add the TCP/IP ports Recovery Manager uses to communicate.




136
                                                                12.0     Technical Support

To view the online help, press F1 or click Help on the Recovery Manager Schedule Console
Action menu.
To view the Recovery Manager Support Knowledge Base, visit:
        - www.winternals.com/support
The Recovery Manager 2.0 Best Practices Guide provides advice for implementing and using
Recovery Manager, including Recovery Point File Store optimization and security considerations,
such as dealing with firewalls and permissions.
        - /www.winternals.com/es/support/recoverymanager/bestpractices.asp
To request help for issues not covered in the Online Help or Support Knowledge Base:
        - Visit: http://www.winternals.com/support/getsupport.asp
        - Send email to support@winternals.com
        - Contact your Winternals Partner


Customers who have purchased a Gold, Platinum, or Platinum Plus Service agreement may receive
phone support by calling Winternals Support at 512-330-9861, or by contacting your Winternals
Partner. When you call, please have the following information ready:
        - Your Recovery Manager license number and version number
        - The Windows version (including Service Pack) of the computer where the
          problem occurred
        - The memory size, disk types, and file system types.




                                                                                                  137
3101 Bee Caves Road
Suite 150
Austin, TX 78746
www.winternals.com
Ph 512.330.9130
Fax 512.330.9131      Rev. 0305

				
DOCUMENT INFO
Shared By:
Categories:
Tags:
Stats:
views:10
posted:11/13/2011
language:English
pages:142