Symantec LiveState Recovery Advanced/Standard Server Edition Implementation Guide

Symantec LiveState Recovery Advanced/Standard Server Edition Implementation Guide

The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement. Documentation version 6.0

Copyright Notice
Copyright 2005 Symantec Corporation. All Rights Reserved. Any technical documentation that is made available by Symantec Corporation is the copyrighted work of Symantec Corporation and is owned by Symantec Corporation. NO WARRANTY. The technical documentation is being delivered to you AS-IS, and Symantec Corporation makes no warranty as to its accuracy or use. Any use of the technical documentation or the information contained therein is at the risk of the user. Documentation may include technical or other inaccuracies or typographical errors. Symantec reserves the right to make changes without prior notice. No part of this publication may be copied without the express written permission of Symantec Corporation, 20330 Stevens Creek Blvd., Cupertino, CA 95014.

Trademarks
Symantec, the Symantec logo, Symantec LiveState, LiveUpdate, Symantec pcAnywhere, Symantec LiveState Recovery Restore Anyware Option, and Symantec Backup Exec are U.S. registered trademarks of Symantec Corporation. Microsoft, Windows, Windows NT, MS-DOS, and the Windows logo are registered trademarks or trademarks of Microsoft Corporation in the United States and other countries. Other brands and product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are hereby acknowledged.

Technical support
As part of Symantec Security Response, the Symantec global Technical Support group maintains support centers throughout the world. The Technical Support groups primary role is to respond to specific questions on product feature/function, installation, and configuration, as well as to author content for our Web-accessible Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering as well as Symantec Security Response to provide Alerting Services and Virus Definition Updates for virus outbreaks and security alerts Symantec technical support offerings include the following:

A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and Web support components that provide rapid response and up-to-the-minute information Upgrade insurance that delivers automatic software upgrade protection Content Updates for virus definitions and security signatures that ensure the highest level of protection Global support from Symantec Security Response experts, which is available 24 hours a day, 7 days a week worldwide in a variety of languages Advanced features, such as the Symantec Alerting Service and Technical Account Manager role, offer enhanced response and proactive security support

Licensing and registration

If the product that you are implementing requires registration and/or a license key, the fastest and easiest way to register your service is to access the Symantec licensing and registration site at www.symantec.com/certificate. Alternatively, you may go to www.symantec.com/techsupp/ent/enterprise.html, select the product that you wish to register, and from the Product Home Page, select the Licensing and Registration link.

Contacting Technical Support

Customers with a current maintenance agreement may access Technical Support information at the following URL: www.symantec.com/techsupp/ent/enterprise.html Select your region or language under Global Support.

Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to recreate the problem. When you contact Technical Support, please have the following information available:

Product release level Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description:

Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes

Customer service
Customer service information is available at the following URL: www.symantec.com/techsupp/ent/enterprise.html Select your country or language under Global Support. Customer Service is available to assist with the following types of issues:

Questions regarding product licensing or serialization Product registration updates such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade insurance and maintenance contracts Information about the Symantec Value License Program Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals

Contents

Technical support Chapter 1 Introducing Symantec LiveState Recovery

About Symantec LiveState Recovery .................................................. 9 Components of Symantec LiveState Recovery .................................... 10 How Symantec LiveState Recovery works .......................................... 11 How LiveState Recovery handles user changes during a backup ..................................................................................... 12 What you can do with Symantec LiveState Recovery ........................... 12 Where to get more information about Symantec LiveState Recovery .............................................................................. 13

Chapter 2

Installing Symantec LiveState Recovery

Preparing for installation ............................................................... System requirements .............................................................. Supported file systems and removable media .............................. Installation options ................................................................ 30-day evaluation .................................................................. Symantec LiveState Recovery licensing ..................................... Installing Symantec LiveState Recovery ........................................... Post-installation tasks ................................................................... About Driver Validation ........................................................... Testing Symantec Recovery Disk ............................................... Starting Symantec LiveState Recovery ....................................... Activating Symantec LiveState Recovery .................................... Keeping current with LiveUpdate .............................................. Uninstalling Symantec LiveState Recovery ....................................... 15 15 17 17 18 18 18 20 20 21 22 24 25 25

Chapter 3

Creating recovery points

About creating recovery points ....................................................... Best practices for system protection .......................................... Tips on using LiveState Recovery and creating recovery points ............................................................................ Backup of VSS-aware databases ................................................ 27 28 29 30

Contents

Storing recovery points ........................................................... Selecting a storage location for recovery points ........................... About verifying a recovery point ............................................... Setting the compression level for recovery points ........................ Ways to divide a recovery point into smaller files ......................... Advanced options for creating recovery points ............................ Manually creating a recovery point ................................................. About network credentials ....................................................... About scheduling incremental recovery points .................................. Ways to work with base recovery points and incrementals ............. Scheduling a recovery point ........................................................... Running a scheduled recovery point job immediately ................... Editing a recovery point job schedule ........................................ Disabling a recovery point job schedule ...................................... Deleting a recovery point job schedule ....................................... Stopping a task ........................................................................... Archiving a recovery point ............................................................. Deleting recovery points ............................................................... Rescanning a computers hard disk ................................................. Viewing events in Symantec LiveState Recovery ................................. Setting up notifications ................................................................. About SNMP traps .................................................................. Viewing the recovery point history of a drive ..................................... Cleaning the recovery point history ........................................... Setting a default recovery point location ........................................... Setting the default performance ...................................................... Adjusting the operation speed during a task ................................

31 32 36 37 38 38 41 44 44 45 55 61 62 62 63 63 63 65 66 66 66 68 68 69 70 70 71

Chapter 4

Restoring recovery points

About restoring a computer ........................................................... Storage locations for restoring recovery points ............................ Restore options ..................................................................... Restoring a recovery point ............................................................. Starting a computer in the recovery environment ............................... About restoring drives using the recovery environment ....................... Restore options ..................................................................... Restoring a single drive using the recovery environment ..................... Restoring drives using the recovery environment ............................... Restoring drives using a system index file in the recovery environment ......................................................................... Restoring using the Restore Anyware Option ..................................... Installing the Restore Anyware Option ....................................... 73 74 75 76 78 79 79 81 83 85 87 87

Contents

Using the Restore Anyware Option ............................................ Uninstalling the Restore Anyware Option ................................... Troubleshooting the Restore Anyware Option .............................. Restoring using the LightsOut Restore Option ................................... Installing the LightsOut Restore Option ...................................... Starting the LightsOut Restore Option Wizard ............................. Using the LightsOut Restore Option ........................................... Uninstalling the LightsOut Restore Option .................................. Troubleshooting the LightsOut Restore Option ............................

88 90 90 91 91 91 93 93 94

Chapter 5

Restoring files and folders

About restoring files and folders ..................................................... 95 Starting the Recovery Point Browser ............................................... 96 Verifying a recovery point ........................................................ 97 Opening or closing a recovery point in the Recovery Point Browser .......................................................................... 98 Restoring files from a recovery point ............................................... 98 Mounting a drive within a recovery point ........................................ 100 Dismounting a recovery point drive ......................................... 101 Restoring files using the recovery environment ................................ 102 Viewing the properties of a recovery point ....................................... 103 Viewing the drive properties of a recovery point ............................... 104 Viewing a file within a recovery point ............................................ 105

Chapter 6

Copying a drive
About copying a drive .................................................................. Preparing to copy drives .............................................................. Copying one hard drive to another hard drive .................................. Drive-to-drive copying options ................................................ 107 107 108 109

Appendix A

Troubleshooting Symantec LiveState Recovery

Troubleshooting Symantec LiveState Recovery ................................. Troubleshooting the installation .............................................. Troubleshooting recovery points ............................................. Troubleshooting scheduled recovery points ............................... Troubleshooting restoring recovery points from Windows ........... Troubleshooting the console .................................................. Troubleshooting the recovery environment ............................... Getting help for volumes on Windows ...................................... Troubleshooting error messages ................................................... Recovery Point Browser error messages .................................... 111 111 112 113 114 116 117 131 132 132

Contents

General error messages ......................................................... 133

Appendix B

Managing the Symantec LiveState Recovery Agent

Using the Symantec LiveState Recovery Agent ................................ Managing the agent using Windows Services ................................... Best practices for using services ................................................... Opening Services ................................................................. Starting or stopping the agent service ...................................... Setting up recovery when the agent does not start ...................... Viewing Symantec LiveState Recovery Agent dependencies ......... Controlling access to the Symantec LiveState Recovery Agent ............. Running the console using different user rights ......................... 139 140 141 142 142 143 144 145 147

Appendix C Glossary

About Active Directory

The role of Active Directory .......................................................... 149

Chapter

Introducing Symantec LiveState Recovery

This chapter includes the following topics:

About Symantec LiveState Recovery Components of Symantec LiveState Recovery How Symantec LiveState Recovery works What you can do with Symantec LiveState Recovery Where to get more information about Symantec LiveState Recovery

About Symantec LiveState Recovery

Symantec LiveState Recovery is a complete server volume and workstation protection system for Windows Server 2003, and Windows 2000 Server and Advanced Server. Symantec LiveState Recovery consists of the Symantec LiveState Recovery Agent and the Symantec LiveState Recovery management console. It also includes a utility called the Recovery Point Browser that simplifies the management of your backups. Rather than select individual files or folders to include in a backup image, you choose a drive to back up. Symantec LiveState Recovery copies the contents of that drive into a file called a recovery point. You can save recovery points to a hard drive, a USB or FireWire drive, a network drive, or to removable media. When you experience a problem with your computer or you need to restore a file, you can use an existing recovery point to restore a file, folder, or an entire drive,

10

Introducing Symantec LiveState Recovery Components of Symantec LiveState Recovery

if necessary to return your computer to a previous, working state with the operating system, applications, and data files intact. Using easy-to-follow wizards, you can perform fast and reliable system backups with zero downtime to the computer. Symantec LiveState Recovery uses intelligent data protection technology that ensures the availability of business-critical information when disaster strikes. Note: The Symantec LiveState Recovery CD, known as Symantec Recovery Disk, is used both to install the software and to boot a computer into the recovery environment. Be sure you store the CD in a safe place. Using Symantec LiveState Recovery helps you recover from the following problems:

Virus attack Poorly performing software Faulty Internet downloads Hard drive failure Files accidentally deleted or overwritten Corrupted files

Components of Symantec LiveState Recovery

Table 1-1 lists the main components for Symantec LiveState Recovery. Table 1-1 Component
Symantec LiveState Recovery console

Components of LiveState Recovery Description

The console, Symantec LiveState Recovery, lets you create, schedule, and restore recovery points from your computer, manage existing recovery points, and manage and view the complete status of the Symantec LiveState Recovery Agent, itself. You can also restore recovery points with the console's easy-to-use interface.

Introducing Symantec LiveState Recovery How Symantec LiveState Recovery works

11

Table 1-1 Component

Components of LiveState Recovery (continued) Description

The Symantec LiveState Recovery Agent is the unseen "engine" that actually creates and stores the recovery points on a computer. It is managed via the console. To access the Symantec LiveState Recovery Agent, you must be a domain user with local administration rights.

Symantec LiveState Recovery Agent

Recovery Point Browser

The Recovery Point Browser simplifies the maintenance and management of your recovery points. You can access your recovery points from within a single screen. You can view recovery point files contents, restore individual program and data files from within a recovery point, or mount a volume within a recovery point and share its contents on the network.

How Symantec LiveState Recovery works

Using Symantecs Virtual Volume Imaging (v2i) technology, Symantec LiveState Recovery creates a point-in-time virtual representation (virtual volume image) of your computers drive state. A virtual volume image (.v2i) is not simply a file system copy of the contents of a hard disk. Instead, it is a low-level image of the complete hard disk structure (sectors and clusters) and its data, compressed and written to a single file. This virtual representation is temporarily stored on the available free RAM that is present on the server volume. Symantec LiveState Recovery then generates an actual recovery point (backup image file) based on the details found in the virtual volume image.

12

Introducing Symantec LiveState Recovery What you can do with Symantec LiveState Recovery

Because the final recovery point is created based on the virtual volume image, Symantec LiveState Recovery performs backups quickly and does not interfere or interrupt the computers operations. You can continue to perform server functions such as managing user rights, or running server applications and tools.

How LiveState Recovery handles user changes during a backup

When a user begins a backup, Symantec LiveState Recovery starts the process of creating a virtual volume image while monitoring the file system for user changes. Any user changes that overlap with the V2i volume being backed up are still written to the hard disk in a normal fashion. This is because Symantec LiveState Recovery saves the old, overwritten data to a temporary space on the hard disk while insuring that any new data is still being saved. The old data is then written to the recovery point. The entire backup process is efficient because Symantec LiveState Recovery only writes sectors that contain data to the recovery point.

What you can do with Symantec LiveState Recovery

You can use LiveState Recovery in the following ways:

Create hot backup image files (full or incrementals) of volumes with zero downtime to the computer. Save recovery points to a local hard disk, a network hard disk, or to disk media such as CD-R, CD-RW, DVD-R(W), DVD+R(W), or REV, Zip, and Jaz drives. Restore a computer to original condition from a recovery point (full or incremental) or perform file-level restorations.

Introducing Symantec LiveState Recovery Where to get more information about Symantec LiveState Recovery

13

Use the Recovery Point Browser to mount a volume within a recovery point and scan for viruses or set up as a share on the network domain. Perform bare metal recovery.

Use Symantec LiveState Recovery Manager as a secure and centralized administration point to protect data throughout a network domain. LiveState Recovery Manager provides the ability to install LiveState Recovery (including Symantec LiveState Recovery Restore Anyware Option and Symantec LiveState Recovery LightsOut Restore Option) and to restore remotely. If you have existing installations of Symantec Backup Exec, you can also use LiveState Recovery Manager to back up the locations where your recovery points are stored to tape media .

Where to get more information about Symantec LiveState Recovery

Symantec LiveState Recovery documentation provides glossary terms, online Help, a Readme file, and the Users (Implementation) Guide. In addition to Symantec LiveState Recovery documentation, check the Symantec Web site and Knowledge Base for answers to frequently asked questions, troubleshooting help, online tutorials, and the latest product information. See www.symantec.com/techsupp.

14

Introducing Symantec LiveState Recovery Where to get more information about Symantec LiveState Recovery

Chapter

Installing Symantec LiveState Recovery

This chapter includes the following topics:

Preparing for installation Installing Symantec LiveState Recovery Post-installation tasks Uninstalling Symantec LiveState Recovery

Preparing for installation

Installation procedures might vary, depending on your work environment and how you want to install Symantec LiveState Recovery. Before you install Symantec LiveState Recovery, make sure your computer meets the system requirements. Review the Readme file on the installation CD for any known issues.

System requirements
To install and use Symantec LiveState Recovery, your computer must meet the minimum requirements described in Table 2-1. Table 2-1 Component
Processor

Minimum system requirements Requirements

Dependent on the operating system

16

Installing Symantec LiveState Recovery Preparing for installation

Table 2-1 Component

Operating system

Minimum system requirements (continued) Requirements

Windows Server 2003, Windows 2000 Advanced server (SP4 or later), Windows 2000 Server (SP4 or later) ,Windows XP Professional/Home, or Windows 2000 Professional

RAM

Symantec LiveState Recovery Agent 256 MB

Symantec LiveState Recovery management console and Recovery Point Browser 256 MB Symantec Recovery Disk 256 MB minimum for most machines, 384 recommended. Symantec Recovery Disk (the recovery environment), is not installed; instead, it runs directly from the Symantec LiveState Recovery CD Symantec LiveState Recovery LightsOut Restore Option 1 GB Hard Disk Free Space Symantec LiveState Recovery Service 65.2 MB Recovery Point Browser 30.6 MB

Microsoft .NET Framework 1.1 110 MB of hard disk space required, 40 MB additional hard disk space required for installation program (150 MB total), if not already installed Storage space on the network for recovery points Symantec LiveState Recovery LightsOut Restore Option 500 MB

CD-ROM or DVD-ROM drive

Any speed and bootable in BIOS 62.48 MB To see if Symantec LiveState Recovery supports your CD or DVD writer, visit http://www.symantec.com/techsupp/lsrdriver. Specify your OS and the manufacturer of your CD or DVD writer to see if your device is supported.

Installing Symantec LiveState Recovery Preparing for installation

17

Table 2-1 Component

Software

Minimum system requirements (continued) Requirements

The first time you start Symantec LiveState Recovery, you are prompted to install the Microsoft .NET Framework 1.1, if it has not already been installed. The .NET Framework is a required component to run Symantec LiveState Recovery.

Supported file systems and removable media

Symantec LiveState Recovery supports the following file systems and removable media.
Supported file systems FAT16, FAT16X, FAT32, FAT32X, NTFS, dynamic disks, Linux Ext2, Linux Ext3, and Linux swap partitions You can save recovery points locally (that is, recovery points are created and saved on the same computer where the console is installed) or to most CD-R, CD-RW, DVD-R(W), and DVD+RW recorders on the market today. For an updated list of supported drivers, see the Symantec Web site. Symantec LiveState Recovery also supports saving recovery points to most USB devices, 1394 FireWire devices, REV, Jaz, or Zip drives, and magneto-optical devices.

Removable media

Note: This product does not support RAM drives

or backing up directly to tape.

Installation options
If you need a data protection solution for enterprise workstations, use the latest version of Symantec LiveState Recovery Desktop. If you need a data protection solution for home computers, use the latest version of Norton Ghost.

18

Installing Symantec LiveState Recovery Installing Symantec LiveState Recovery

30-day evaluation
If you are installing the 30-day evaluation of Symantec LiveState Recovery, you can install all the applications and create recovery points of system and data volumes. You can also perform restorations of data volumes and files/folders. However, the system volume restoration function and the Copy Drive feature are not available with the evaluation. You also have open access to Symantecs online technical support library. You can view up-to-date support information, including a searchable knowledge base, software library files, frequently asked questions, customer-to-customer newsgroups, and additional technical information at the Symantec Support Knowledge Base. Symantec LiveState Recovery Evaluation expires 30 days after your first use of the software. However, you can upgrade to the full version at any time (even after the trial expiration) without reinstalling the software. See Activating Symantec LiveState Recovery on page 24. See sea.symantec.com.

Symantec LiveState Recovery licensing

Symantec LiveState Recovery licensing is based on the number of protected servers. For example, if your organization is protecting 100 servers, the price you pay for Symantec LiveState Recovery is based on 100 servers, regardless of how many servers are running the Recovery Point Browser and where the recovery points are saved.

Installing Symantec LiveState Recovery

Before you begin, ensure that you have carefully reviewed the requirements and scenarios for installing Symantec LiveState Recovery. See System requirements on page 15. During the installation process, you may be required to restart the computer. If so, after the computer restarts, log in again using the same user credentials to ensure proper functionality. Warning: The Symantec LiveState Recovery product CD is used both to install the software and to start a computer in the recovery environment, known as Symantec Recovery Disk. Be sure you store the CD in a safe place.

Installing Symantec LiveState Recovery Installing Symantec LiveState Recovery

19

To install Symantec LiveState Recovery

Insert the Symantec LiveState Recovery CD into the media drive of the computer. If CD auto-run is enabled, the installation program launches automatically.

2 3 4 5 6 7

If the CD auto-run is not enabled, click Start > Run, type <drive>:\setup.exe (where <drive> is the drive letter of your media drive), and then click OK. In the CD browser panel, click Install LiveState Recovery. In the Welcome window, click Next. Read the license agreement, and then click I accept the terms in the license agreement. Click Next. If you want to change the default location for the Symantec LiveState Recovery program files, click Change, locate the folder where you want to install Symantec LiveState Recovery, and then click OK. Click Next. The default selection is Complete. If you want to customize your settings, click Custom, and then click Next to change your settings. The following are the Custom options:

8 9

LiveState Recovery Service CD/DVD Support Recovery Point Browser Live Update

10 Click Next. 11 Click Install.

A progress screen shows the status of the installation.

12 If a driver is missing, you are notified with the name of the driver(s). 13 Click Finish to complete the installation. 14 Click Yes to exit the install wizard and reboot the computer.
You must restart your computer before running Symantec LiveState Recovery. When the computer reboots, you are returned to the Windows desktop.

15 Remove the Symantec LiveState Recovery CD from the media drive.

20

Installing Symantec LiveState Recovery Post-installation tasks

Post-installation tasks
After installing, you should test Symantec Recovery Disk by starting the computer using the Symantec LiveState Recovery CD, especially if the Driver Validation indicated that there were any unavailable drivers for devices when using Symantec Recovery Disk. You can also perform the following post-installation tasks.

See About Driver Validation on page 20. See Testing Symantec Recovery Disk on page 21. See Activating Symantec LiveState Recovery on page 24. See Keeping current with LiveUpdate on page 25. See Uninstalling Symantec LiveState Recovery on page 25.

About Driver Validation

Driver Validation checks whether there are available drivers in Symantec Recovery Disk for network and storage devices on the computer. Running the Driver Validation helps to assure that the recovery functionality you might need later will work with your computers device configuration. When you install Symantec LiveState Recovery, the installation program automatically runs the Driver Validation tool to check devices against drivers available in the recovery environment (Symantec Recovery Disk) and displays the validation results.

Getting Driver Validation results

When drivers for all devices in use by the computer are available in the recovery environment, the Driver Validation tool displays a message indicating that the storage devices and network cards detected have drivers in Symantec Recovery Disk. When storage and network devices cannot be used when booting with Symantec Recovery Disk because the drivers are not included, a Driver Validation Results dialog appears. While you can use Symantec LiveState Recovery, you should obtain the necessary drivers and test Symantec Recovery Disk before you must rely on the functionality provided by the recovery environment. If a panel appears listing devices, know that

Drivers for listed devices are not available in the recovery environment. Without the drivers, the devices cannot be used in the recovery environment.

Installing Symantec LiveState Recovery Post-installation tasks

21

If a network card driver is not detected, contact technical support. If a storage controller driver is not detected, if you have the necessary drivers, you can add additional drivers when booting with Symantec Recovery Disk by pressing <F6> at the Press any key to boot from CD prompt. See You cannot access (or see) the local drive where your recovery points are saved on page 123.

Note: You should put all additional storage controller drivers on a CD or floppy disk for quick access for later use. Before relying on Symantec Recovery Disk to restore a recovery point (or use other functionality), you should obtain the necessary drivers and test booting with Symantec Recovery Disk to verify that drivers for the specified devices can be used before you must depend on the functionality in the recovery environment. Saving the validation results can be useful when adding additional drivers or when contacting support concerning missing network card drivers.

Testing Symantec Recovery Disk

You should test Symantec Recovery Disk (the recovery environment) to ensure that it runs properly on your system. See How Symantec LiveState Recovery works on page 11. Warning: The Symantec LiveState Recovery CD is used both to install the software and to boot a computer into the recovery environment, known as Symantec Recovery Disk. Be sure you store the CD in a safe place. If Symantec Recovery Disk does not run as expected, you can take action early to fix the problems. Then if your backed up computer experiences a catastrophic failure later, you will be assured that you can run Symantec Recovery Disk to recover the system or your data. If you experience problems while testing the recovery environment, you may find a solution below.

You are having problems booting into Symantec Recovery Disk from the Symantec LiveState Recovery CD. See Starting a computer from the CD drive on page 123.

22

Installing Symantec LiveState Recovery Post-installation tasks

You do not have the necessary NIC drivers to access recovery points on a network. See You cannot access the network drive where your recovery points are saved on page 124. You do not have the necessary storage drivers to access recovery points on the computer. See You cannot access (or see) the local drive where your recovery points are saved on page 123. You need information about your system to help you run the recovery environment. See Getting system information from Windows on page 111.

See Troubleshooting the recovery environment on page 117. To test Symantec Recovery Disk

1 2

Run Driver Validation to ensure Symantec Recovery Disk will work with the network and storage devices on the computer. Boot into Symantec Recovery Disk using the Symantec LiveState Recovery CD. See Starting a computer in the recovery environment on page 78.

When you have booted into Symantec Recovery Disk, do one of the following:

If you intend to store recovery points on a network, run a mock restore of a recovery point that is stored on a network to test network connectivity. If you intend to store recovery points on the computer, run a mock restore of a recovery point that is stored locally to test local hard drive connectivity.

See Restoring a single drive using the recovery environment on page 81.

Starting Symantec LiveState Recovery

Symantec LiveState Recovery is installed in the Windows Program Files folder by default. During installation, Symantec LiveState Recovery places a program icon in the Windows system tray from which you can open the console. You can also open LiveState Recovery from the Windows Start menu. To use the full version of Symantec LiveState Recovery, you must activate the software. See Activating Symantec LiveState Recovery on page 24.

Installing Symantec LiveState Recovery Post-installation tasks

23

To start Symantec LiveState Recovery

Do one of the following:

On the classic Windows taskbar, click Start > Programs > Symantec LiveState Recovery > LiveState Recovery Advanced Server (or LiveState Recovery Standard Server). On theWindows 2003 taskbar, click Start > All Programs > Symantec LiveState Recovery > LiveState Recovery Advanced Server (or LiveState Recovery Standard Server). In the Windows system tray, double-click the Symantec LiveState Recovery tray icon. In the Windows system tray, right-click the Symantec LiveState Recovery tray icon, and then click Run Symantec LiveState Recovery.

Installing Microsoft .NET Framework

The first time you run Symantec LiveState Recovery, if Microsoft .NET Framework 1.1 is not installed, you are prompted to install it. The .NET Framework is a required component to run Symantec LiveState Recovery. To install Microsoft .NET Framework

1 2 3 4 5 6

Start Symantec LiveState Recovery. When prompted to install Microsoft .NET Framework 1.1, click Yes. In the Microsoft .NET Framework Setup window, read the license agreement. Click I agree to accept the license agreement. Click Install. Click OK when the installation is complete. After installing the .Net Framework, the Symantec LiveState Recovery console will continue to launch.

Installing the Symantec license file

The first time you run Symantec LiveState Recovery, the Install License panel appears. You can install a license file to activate the full version or use the trial version. See 30-day evaluation on page 18. See Activating Symantec LiveState Recovery on page 24.

24

Installing Symantec LiveState Recovery Post-installation tasks

Activating Symantec LiveState Recovery

Product activation is a technology that protects users from pirated or counterfeit software by limiting use of a product to those users who have acquired Symantec LiveState Recovery legitimately. Product activation requires a unique serial number and a license file for each installation of a product. You must activate Symantec LiveState Recovery within 30 days of installing it. Product activation is completely separate from registration. When you first start the software, you are asked to enter the path to the license file to activate Symantec LiveState Recovery. If you choose not to activate, each time you start the software an alert appears to remind you to activate Symantec LiveState Recovery. To use the full version of Symantec LiveState Recovery, you must activate the software by obtaining a license file using the serial number for your purchased product. If you do not activate Symantec LiveState Recovery within 30 days of installing it, the software will stop working. You can activate it after the 30 days have elapsed. See 30-day evaluation on page 18. The licenser distinguishes your computer from others without storing information about you or your computers hardware and software. Unlocking your software may trigger an optional registration. Registration data is generally used for demographic purposes and is not resold. You can opt out of marketing-oriented uses of your data as part of registration. To activate Symantec LiveState Recovery

On the Help menu, in Symantec LiveState Recovery, click Unlock Trial Product. In the Install License panel, you can purchase Symantec LiveState Recovery, use the serial number to get a license file, and install a product license file.

If you do not have a license file, use the Symantec LiveState Recovery serial number to obtain the license file.

If you do not have a serial number for Symantec LiveState Recovery (because you have not purchased the software), click Buy Now to pay for the software and receive a serial number. If you have a serial number for Symantec LiveState Recovery, click Get License to obtain a license file.

3 4

If you have a license file, click Browse to locate and open the license file. Click Install.

Installing Symantec LiveState Recovery Uninstalling Symantec LiveState Recovery

25

Keeping current with LiveUpdate

Using your Internet connection, you can receive software updates associated with your version of the product. When you run LiveUpdate, you connect to the Symantec LiveUpdate server and select the product updates that you want to install. Run LiveUpdate as soon as you have installed the product. Once you know that your files are up-to-date, run LiveUpdate periodically to obtain program updates. To obtain updates using LiveUpdate

1 2 3

On the Help menu, click LiveUpdate. In the LiveUpdate window, click Start to locate updates. Updates, if available, are downloaded and installed. When the installation is complete, click Close. Some program updates may require that you reboot your computer before the changes will take effect.

Uninstalling Symantec LiveState Recovery

If you are upgrading Symantec LiveState Recovery from a previous version, the product automatically uninstalls previous versions when you install the latest version. If needed, you can manually uninstall the product. To uninstall Symantec LiveState Recovery

1 2 3

From Windows, click Start > Settings > Control Panel > Add or Remove Programs Select Symantec LiveState Recovery 6.0, and then click Remove > Yes. You can choose to keep your current jobs, histories, and command files on your computer for future installations of the LiveState Recovery product, rather than uninstalling them. After the uninstall completes, you must reboot your machine for the changes to take effect.

26

Installing Symantec LiveState Recovery Uninstalling Symantec LiveState Recovery

Chapter

Creating recovery points

This chapter includes the following topics:

About creating recovery points Manually creating a recovery point About scheduling incremental recovery points Scheduling a recovery point Stopping a task Archiving a recovery point Deleting recovery points Rescanning a computers hard disk Viewing events in Symantec LiveState Recovery Setting up notifications Viewing the recovery point history of a drive Setting a default recovery point location Setting the default performance

About creating recovery points

When you create a recovery point, you can customize how and where you want to store it. You can also set options for verifying the integrity of the recovery point, the level of compression you want, or adding encryption to a recovery point.

28

Creating recovery points About creating recovery points

Best practices for system protection

This section describes best practices for protecting your system that you should implement whenever possible.

Before creating a recovery point

Strategies you can use to help ensure successful base recovery points (especially on servers) include the following:

Simplify recovery and reduce the time it takes to create recovery points. Separate the boot/operating system from the business data. Put the boot/operating system and the data on their own respective drives. This separation speeds the creation of recovery point files and narrows what needs to be restored. Run Windows Disk Defragmenter and chkdsk utilities before base recovery points.

During a recovery point creation

Symantec LiveState Recovery greatly simplifies the creation of recovery points. To take advantage of this, consider the following strategies.

Create recovery points often and regularly. Use the Configure Jobs Wizard to schedule the consistent creation of recovery points. Save recovery points to the proper location. This product supports saving recovery points to a network hard disk or to a local hard disk (including USB, FireWire, REV, Zip, and Jaz drives, and magneto-optical devices). It does not support saving recovery points directly to a tape drive. To save recovery points to tape, save the recovery point to another drive, and then use your existing tape backup strategy to save the recovery point to tape.

After creating a recovery point

Strategies you can use to help you successfully manage recovery points after they are created include the following:

Maintain duplicate recovery points for safety. Store recovery points elsewhere on the network and create CDs, DVDs, or tapes of the recovery points for storage off-site in a safe and secure place. Verify that recovery point or set of recovery points is stable and usable.

Creating recovery points About creating recovery points

29

Document and test your entire restore process by doing regular restores of recovery points (using the console and the Symantec recovery environment), and single files (using Recovery Point Browser). Doing so can uncover potential hardware or software problems. Use Verify recovery point after creation at the time you create a recovery point or use Verify recovery point from Recovery Point Browser to periodically check the integrity of all your recovery points.

Consolidate incremental recovery points. Combine incremental recovery points to reduce the number of files you have to maintain. This strategy also uses hard disk space more efficiently. Review the Events tab. Periodically review the contents found in the Events tab of the console to ensure stability in the computer system. Review the contents of recovery points. Ensure that you are backing up essential data by periodically reviewing the contents of recovery points.

Tips on using LiveState Recovery and creating recovery points

The following information may help when you create recovery points:

You may find it helpful to test recovery points. If a recovery point is successful and is stored in the location you want, you can use the Configure Jobs Wizard to create subsequent recovery points at regular intervals. Symantec LiveState Recovery does not need to be open for a recovery point creation to take place. Therefore, after you create a recovery point job, you can exit Symantec LiveState Recovery. Your computer, however, must be running so a recovery point or recovery point job can occur. To verify that a recovery point was made, check the information in the History tab or the Events tab, both found in the Advanced View. To test a recovery point job, click the Jobs tab in the Advanced View, and then select the recovery point job you just created. On the Tools menu, click Run Job Now. All recovery point jobs are saved, so you can edit or run them later. Do not run a disk defragmentation program while a recovery point is being created or unexpected results may occur. If you have two or more volumes that are dependent on each other or they are used as a group by a program such as a database service, you should back up the volumes together. With Symantec LiveState Recovery, you can back up multiple volumes simultaneously by selecting two or more volumes in the

30

Creating recovery points About creating recovery points

Configure Jobs Wizard or in the Create Recovery Point Wizard. Simultaneous recovery points provide the safest protection for shared volumes that are running data-intensive applications. Backing up volumes simultaneously also cuts down back up times and maximizes efficiency across shared data volumes.

If the computer you are backing up has power management features (such as going into hibernation after a period of inactivity), they may conflict with Symantec LiveState Recovery during the creation of a recovery point. If you experience any of these problems, you may need to reboot the computer, turn off all power management features, and then create the recovery point again. Check inside the Microsoft Services console (services.msc) to ensure that the Symantec LiveState Recovery Agent is running (started). If it is running, you will be able to use the console to create recovery points of the computer. See Managing the agent using Windows Services on page 140.

Backup of VSS-aware databases

Symantec LiveState Recovery can co-exist with Microsoft VSS (Volume Shadow Copy Service) to automate the process of backing up VSS-aware databases like production Exchange 2003 and SQL 2005 databases, transaction logs on Windows Server 2003, Active Directory, and the latest versions of Oracle. VSS-aware databases are auto-enabled and cannot be turned off. See Backup of non-VSS-aware databases on page 53. VSS allows IT administrators to create a shadow copy backup of volumes on a server. The shadow copy includes all files (including open files). When a Symantec LiveState Recovery job starts, Symantec LiveState Recovery alerts the VSS that a recovery point is about to be created. VSS then communicates this information to the VSS-aware databases and puts them into a quiesced (safe) state. (Symantec LiveState Recovery always attempts to communicate with VSS if it is installed on a desktop or server and tries to provide VSS with information to quiesce databases.) While in this quiesced state, the databases continue to write to transaction logs, and Symantec LiveState Recovery takes an instantaneous snapshot that also includes any open files. When the snapshot is complete, VSS is notified, the databases are activated, and the transaction logs continue writing to the database. (To verify that there are no errors and that VSS is running, you should check Microsoft error logs.) While the recovery point is being created from the snapshot, the databases and applications return to an active state and continue to write data.

Creating recovery points About creating recovery points

31

This kind of integration means that you can back up business-critical databases at anytime during the day without affecting productivity. Additional points for backing up and restoring VSS-aware databases:

Symantec LiveState Recovery prevents VSS snapshots from occurring during the time Symantec LiveState Recovery is creating a recovery point. If a full system restore is done from a Symantec recovery point, individual files can be restored from a previous VSS snapshot. However, the recommended restore process is to use Symantec LiveState Recovery to mount the recovery point as a virtual drive (using the Recovery Point Browser), and then restore the files you need. After a full system restore from a Symantec recovery point, a VSS snapshot that was taken prior to the date and time of the recovery point can no longer be used to restore the entire system.

Warning: Database corruption may occur if the computer is low on hard disk space when you are rebuilding a database at the same time you are running a job. To avoid database corruption, you should quiesce the database before backing it up, and you should not rebuild or restore the database at the same time you are backing it up.

Storing recovery points

You can save recovery points to a local hard drive, local removable media, a network drive, or a local USB, FireWire, or REV drive. Table 3-1 shows the advantages and disadvantages of using different locations for storing recovery points. Table 3-1 Location
Hard drive

Recovery point storage locations Advantages

Disadvantages

Fast create and restore

Uses valuable drive space

Can schedule unattended Vulnerable to loss if the recovery points hard drive fails Inexpensive because drive space can be overwritten repeatedly

32

Creating recovery points About creating recovery points

Table 3-1 Location

Recovery point storage locations (continued) Advantages

Protection from hard drive failure Ideal for off-site storage

Disadvantages

Removable media (local)

Cannot create unattended recovery points; process is manual Media can be expensive Reserves hard drive space for other uses Restore can be slower than from other locations, especially for individual files and folders
Additional expense for the drive itself Can schedule unattended Must have supported recovery points storage device drivers to Inexpensive because restore from Symantec drive space can be Recovery Disk; could overwritten repeatedly require additional media Off-site storage is along with the Symantec possible Recovery Disk CD Reserves hard drive space for other uses Must have supported NIC drivers to restore from Can schedule unattended Symantec Recovery Disk recovery points Must understand and Inexpensive because assign the appropriate drive space can be rights for the users who overwritten repeatedly will perform recovery Protection from local points and restores hard drive failure Off-site storage (through existing network recovery point strategies)

USB/FireWire/REV drive (local)

Fast create and restore

Network drive

Fast create and restore

Selecting a storage location for recovery points

When you create or schedule a job, you can specify where the recovery point will be saved. You can also save time by using Options to set a default recovery point location that you want to use whenever a recovery point is created. See Setting a default recovery point location on page 70.

Creating recovery points About creating recovery points

33

Table 3-2 describes the recovery point storage location options that are available. Table 3-2 Location
To local destination

Storage location for recovery point Description

The recovery points are stored on the hard drive of the computer that is being backed up. You need to specify the drive and folder (for example, E:\Data_Recovery_Points\) where you want the recovery points stored.

Note: It is highly recommended that you save

recovery points to a secondary hard drive, a network location, or removable media.

Note: While it is possible to save the recovery

point to the same drive that you are backing up, it is not recommended for several reasons. As the number or size of recovery points grows, you will have less disk space available for regular use. Also, the recovery point is included in subsequent recovery points of the drive, increasing the size of those recovery points. And finally, if the computer suffers a catastrophic failure, such as a primary hard drive going bad, you may not be able to recover the recovery point you need, even if you save it to a different drive on the same hard drive. Use Norton PartitionMagic to create a partition on your desktop (work) computer or home computer hard drive that is dedicated to recovery points.

34

Creating recovery points About creating recovery points

Table 3-2 Location

Storage location for recovery point (continued) Description

The recovery points are stored on the hard drive of the computer that is being backed up. You need to specify the drive and folder (for example, E:\Data_Recovery_Points\) where you want the recovery points stored.

To local destination

Note: It is highly recommended that you save

recovery points to a secondary hard drive, a network location, or removable media.

Note: While it is possible to save the recovery

point to the same drive that you are backing up, it is not recommended for several reasons. As the number or size of recovery points grows, you will have less disk space available for regular use. Also, the recovery point is included in subsequent recovery points of the drive, increasing the size of those recovery points. And finally, if the computer suffers a catastrophic failure, such as a primary hard drive going bad, you may not be able to recover the recovery point you need, even if you save it to a different drive on the same hard drive. Use Symantec VolumeManager to create new partitions on a server hard disk that are dedicated to storing recovery points. If you are managing the server remotely, the recovery point will be stored on the server, not on the computer where you are running the Symantec LiveState Recovery console.

Creating recovery points About creating recovery points

35

Table 3-2 Location

Storage location for recovery point (continued) Description

The recovery points are stored on the network. You need to specify the UNC path (\\computer\share) to the folder on the network where you want the recovery points stored. Alternatively, you can click Browse to navigate to the appropriate network folder. Type a domain or computer name, a user name, and password. For example: share = \\computername\share credentials = \\<computername>\<local username> = <domain>\<domain user> share = \\IPaddress\share = <IP ADDRESS>\<local user> The user name you type must have read-write access to the network folders where the recovery points will be stored. Symantec LiveState Recovery uses this login information to access the network when you create a recovery point.

To a network destination

36

Creating recovery points About creating recovery points

Table 3-2 Location

Storage location for recovery point (continued) Description

If you enter a drive that is a CD/DVD location, the recovery points are stored on disk media.

To a CR-RW/DVD-RW destination

Note: The CD-RW/DVD-RW option may not be

available in your version of Symantec LiveState Recovery. To upgrade to a version that supports this option, visit sea.symantec.com. You need to specify the CD or DVD drive where the recovery points will be sent. Make sure the media is new and blank. Partially written CD or DVD media should not be used. When you save a recovery point to removable media, the files are automatically split into the correct sizes if the backup spans more than one media. The files are named according to the naming convention for spanned recovery points. See Ways to divide a recovery point into smaller files on page 38. Because jobs are designed to run without user intervention (possibly when the computer is unattended), you cannot save scheduled recovery points directly to removable media.

About verifying a recovery point

You can use Verify Recovery Point to determine whether a recovery point or set of recovery points is valid or corrupt. If you verify a recovery point at the time you create a recovery point, the recovery point or set of recovery points will be checked to see that all of files are available, the internal data structures in the recovery point match the data that is available, and the recovery point can be uncompressed to create the expected amount of data (if you selected a compression level at the time of creation). Note: Verifying a recovery point doubles the time (approximately) required to create the recovery point.

Creating recovery points About creating recovery points

37

If you decide not to verify the recovery point at the time of creation, you can still check the integrity of a recovery point any time after it is created by opening the file in the Recovery Point Browser. See Verifying a recovery point on page 97.

Setting the compression level for recovery points

When you create or schedule a job or archive a recovery point using the Recovery Point Wizard, you can choose the compression level for the recovery points. Table 3-3 describes the available compression levels. Table 3-3 Compression levels for recovery points Description
Uses no compression. This is most useful if storage space is not an issue. However, if you are saving the recovery point to a busy network drive, using high compression may be faster than no compression because there is less data to write across the network. Uses low compression for a 40% average data compression ratio on recovery points. This is the default. Uses medium compression for a 45% average data compression ratio on recovery points. Uses high compression for a 50% average data compression ratio on recovery points. This is usually the slowest method. When a high compression recovery point is created, CPU usage may be higher than normal. Other processes on the computer may also be slower. To compensate, you can adjust the operation speed of Symantec LiveState Recovery. This may improve the performance of other resource intensive applications that you are running at the same time. See Setting the default performance on page 70.

Compression level
None

Standard

Medium

High

38

Creating recovery points About creating recovery points

Ways to divide a recovery point into smaller files

You can split a recovery point into two or more smaller files. This is useful if you are creating or archiving a recovery point that you want to copy to removable media later for safekeeping. The recovery point is split into smaller, more manageable segments. You can then copy the segments onto separate, removable media. If you are creating a recovery point of thousands of files on a computer that has low memory, splitting the recovery point into smaller segments may help speed the process. If a recovery point is divided into multiple files, the filenames for subsequent files will be appended with _S01, _S02, and so forth. For example, if the default filename were C_Drive.v2i, the second filename would be C_Drive_S01.v2i, and so on. If you are creating or archiving a recovery point directly to removable media, you do not need to select this option; the recovery point will be split into multiple files automatically to fit on the media that you selected.

Advanced options for creating recovery points

When you create or schedule a job or archive a recovery point, you can set the advanced options for the recovery points. Table 3-4 describes the advanced options that are available for recovery points. Table 3-4 Option
Use password

Advanced options Description

If you select this option, you can specify a password for the recovery point. A user must type the password before restoring a recovery point or opening it in the Recovery Point Browser. You can specify specific password criteria, if you are encrypting the recovery point. See Recovery point encryption on page 39. You can remove a password from a recovery point. See Archiving a recovery point on page 63.

Use Encryption

See Recovery point encryption on page 39.

Creating recovery points About creating recovery points

39

Table 3-4 Option

Advanced options (continued) Description

To break the recovery point into small segments, select this option, and then type the maximum size (in MB) for each file. For example, if you plan to copy a recovery point to CDs, specify a file size of 700 MB or less. See Ways to divide a recovery point into smaller files on page 38.

Divide into smaller files to simplify archiving

Ignore bad sectors during copy

If you want the ability to create a recovery point even if there are bad sectors on the hard drive, select this option. Although most drives do not have bad sectors, the potential for problems increases during the lifetime of the hard drive. This option is not applicable for archiving recovery points.

Disable SmartSector Copying

SmartSector technology speeds up the copying process by only copying clusters and sectors that contain data. However, in some cases, it may be desirable to copy all clusters and sectors in their original layout, whether or not they contain data. If you want to copy both used and unused clusters and sectors, select Disable SmartSector Copying. Selecting this option increases processing time and usually results in a larger recovery point size. This option is not applicable for archiving recovery points.

Recovery point encryption

You can enhance the security of your data by using AES (Advanced Encryption Standard) to encrypt recovery points that you create or archive. This is especially useful if you are storing recovery points on a network and need a high level of security protection against unauthorized access and use. You can also encrypt recovery points that were created with earlier versions of Symantec LiveState Recovery by using the Archive Recovery Point feature in the Recovery Point Browser. However, encrypting those files will make them readable with the current product only. See Archiving a recovery point on page 63.

40

Creating recovery points About creating recovery points

You can view the encryption strength of a recovery point at any time by viewing the properties of the file. Encryption strengths are available in 128-bit, 192-bit, or 256-bit. While higher bit strengths require longer passwords, the result is greater security for your data. Table 3-5 explains the bit strength and required password length. Table 3-5 Bit strength
128 (Standard) 192 (Medium) 256 (High)

Password length Password length

8 characters or longer 16 characters or longer 32 characters or longer

You must enter the correct password before you can access or restore an encrypted recovery point. Besides bit strength, the make-up of the password can improve the security of your data. For greatest security, passwords should use the following general rules:

Avoid using consecutive, repeating characters (for example, BBB or 88). Avoid using common words that you would find in a dictionary. Use at least one number. Use both uppercase and lowercase alpha characters. Use at least one special character such as ({}[],.<>;:"?/|\`~!@#$%^&*()_-+=). Change the password after a set period of time using the Archive Recovery Point feature in the Recovery Point Browser. Note: Passwords are case-sensitive. When you access or restore a password encrypted recovery point, Symantec LiveState Recovery will prompt you for the password. If you do not enter the correct password, or you forget the password, you will not be able to open the recovery point. Store the password in a secure place; Symantec has no method for opening encrypted recovery points.

Creating recovery points Manually creating a recovery point

41

Manually creating a recovery point

You can create a recovery point manually. This is particularly useful if you are about to install a new product, some critical files have changed, or many file changes have occurred in a session, and you need to immediately create a recovery point. You can schedule the creation of recovery points instead of creating them manually. See About scheduling incremental recovery points on page 44. You can back up a database. See Backup of VSS-aware databases on page 30. Symantec LiveState Recovery supports saving recovery points to a network hard disk or to a local hard disk (including USB and FireWire drives, Zip, and JAZ drives, and magneto-optical devices). It does not support saving recovery points directly to a tape drive. To save recovery points to tape, save them to another drive, and then use your existing tape backup strategy to save the recovery point to tape. To manually create a recovery point

Do one of the following:

In the Basic View, click Create Recovery Point, and then click Next. In the Advanced View on the Drives tab, click Tools > Create Recovery Point, and then click Next. Notice on the Drives tab that any unprotected drives are labeled blank in the Last Recovery Point column.

Select one or more drives to back up, and then click Next. A separate recovery point will be created for each drive you select. You can click a drive letter to view a graphical representation of the drives used and total free space. A drive with a red X next to it indicates that the drive is not available for backing up, usually because the drive has been deleted or the entire hard disk has been removed from the computer since you installed Symantec LiveState Recovery.

42

Creating recovery points Manually creating a recovery point

In the Location dialog box, select from the following options:

Folder for recovery point storage Browse to the location where you want the recovery points stored. If you receive a message stating that there may not be enough available space at the specified location, you should specify a new location rather than continuing with the Wizard and possibly not being able to save a complete recovery point. See Storing recovery points on page 31. See Selecting a storage location for recovery points on page 32. Rename Click Rename, and then type a new file name if you want to rename the recovery point instead of using the default file name. You can enter a user name and password if needed for network access. See About network credentials on page 44.

Network Credentials

4 5

Click Next. In the Options dialog box, select from the following options:
Compression drop-down list Select the compression level for the recovery point.

None Standard Medium High

See Setting the compression level for recovery points on page 37. Results may vary depending on the types of files saved in the drive you are backing up. Verify recovery point after creation Select this option to determine whether a recovery point or set of files is valid or corrupt immediately following its creation. Type a description that you want associated with the recovery point.

Description text box

Creating recovery points Manually creating a recovery point

43

Advanced

In the Advanced Options dialog box, select the options you want to use such as encrypting the recovery point, and then click OK. Your options are:

Use password Use Encryption

Divide into smaller files to simplify archiving Ignore bad sectors during copy

Disable SmartSector Copying

See Advanced options for creating recovery points on page 38.

6 7

Click Next. If appropriate, specify a command file (.exe, .cmd, .bat) from each drop-down list to run during a particular stage in the recovery point creation process, and then specify the amount of time (in seconds) you want the command to run before it is stopped. If you just added the command file to the CommandFiles folder, you may need to click Back, and then Next to see the files in each stages drop-down list. You can specify the location of the command files.

Before data capture After data capture After recovery point creation

See Run command files during recovery point creation on page 51.

8 9

Click Next . In the Completing the Create Recovery Point Job Wizard dialog box, review the options you have selected, and then click Finish. When the backup begins, you can watch its progress in the Progress and Performance dialog box.

10 In the Progress and Performance dialog box, do one of the following:

Drag the slider left or right to adjust the operation speed of Symantec LiveState Recovery while the recovery point is being created. See Setting the default performance on page 70. Click Cancel Operation to stop the creation of the recovery point.

44

Creating recovery points About scheduling incremental recovery points

Click Hide during the creation of the recovery point to close the wizard and return to the console; the backup will continue. Click Close after the creation of the recovery point to close the wizard and return to the console.

About network credentials

If you are connecting to a computer on a network, you are required to enter the user name and password for network access, even if you have previously authenticated to the network. This is because the LiveState Recovery service runs as the local System account. When entering network credentials, the following rules apply:

If the computer you want to connect to is on a domain, you would enter the domain name, user name, and password. For example: domain\username If you are connecting to a computer in a workgroup you would enter the remote computer name and user name. For example: remote_computer_name\username If you have mapped a drive, you might be required to supply the user name and password at this dialog because the service runs in a different context and cannot recognize the mapped drive.

By going to the Tools menu and selecting Options, you can set a default location, including network credentials. Then when you create future jobs, the dialog will default to the location you specified. Another option would be to create a specific "backup" user account for the enterprise and configure the LiveState Recovery service to use this account.

About scheduling incremental recovery points

You can create jobs to automate the creation of recovery points using a weekly or monthly schedule. This method is useful if you want to create base only recovery points during off-hours when you are not present, or if you want to create a base with incremental recovery points without interrupting your normal workflow. While the computer must be turned on to perform a recovery point at the scheduled time, the console does not need to be open for the scheduled recovery point job to take place, nor does a user have to be logged into the computer. You can manually create recovery points instead of scheduling them. See Manually creating a recovery point on page 41. You can back up a database.

Creating recovery points About scheduling incremental recovery points

45

See Backup of VSS-aware databases on page 30. To verify that a recovery point completed as scheduled, you can open Symantec LiveState Recovery and check the information in the History tab or the Events tab, both found in the Advanced View. Note: Symantec LiveState Recovery supports saving recovery points to a network hard disk or to a local hard disk (including USB, Firewire, Zip, Jaz, and REV drives, and magneto-optical devices). It does not support saving recovery points directly to a tape drive. To save recovery points to tape, save the recovery point to another drive, and then use your existing tape backup strategy to save the recovery point to tape.

Ways to work with base recovery points and incrementals

Table 3-6 describes the advantages and disadvantages of scheduling base-only recovery points or base with incremental recovery points. The Base with incrementals feature may not be available in your version of Symantec LiveState Recovery. To upgrade to a version that supports this feature, visit sea.symantec.com. Warning: The base recovery point and all associated incremental recovery points must be kept together in the same folder. If any recovery point is missing, the recovery point set becomes invalid and you will not be able to restore the data.

46

Creating recovery points About scheduling incremental recovery points

Table 3-6 Type

Types of scheduled recovery points Description

An incremental recovery point has the following advantages and disadvantages:

Base with incrementals

An incremental recovery point saves only the hard disk sectors that have changed since the base recovery point or the previous incremental recovery point was created. A base recovery point is the same as a full recovery point, except that it has incremental tracking turned on for the selected drive. A base recovery point is associated only with its own incremental recovery point files. Incremental recovery points require less time to create than full recovery points, and they make better use of storage media. Event monitors can be used to trigger the automatic creation of incremental recovery points. The Configure Jobs Wizard does not let you save a scheduled base with incremental recovery points to removable media.

Creating recovery points About scheduling incremental recovery points

47

Table 3-6 Type

Types of scheduled recovery points (continued) Description

When using incremental recovery points on a monitored drive, if the computer loses power or is shut down abnormally, and then on reboot an attempt is made to create an incremental recovery point based on the last incremental recovery point. (The reconciliation could take as long as a full recovery point.) If you use a base with incrementals to back up a hard drive, when you restore to a given point-in-time, the base recovery point, plus all the incrementals taken up to that point-in-time, are used for the restore. For example, suppose you have a base recovery point with eight incremental recovery points. You decide to restore to the point-in-time that the fourth incremental was taken. When you restore, the base recovery point and the first four incrementals are used to restore the recovery point. When you create a base with incrementals, if you select a hidden drive (partition) and a non-hidden partition in the same recovery point job, the hidden partition will only be backed up when a base recovery point is specified; no incremental recovery points will be created. Incremental recovery points can be consolidated, thus reducing the amount of storage required.

Base with incrementals (continued)

48

Creating recovery points About scheduling incremental recovery points

Table 3-6 Type

Base only

Types of scheduled recovery points (continued) Description

A Base only recovery point has the following advantages and disadvantages: A Base only recovery point backs up the entire selected drive. A Base only recovery point is not associated with incremental recovery points in any way. Full recovery points stand on their own, so using full recovery points is a less complicated recovery point method than using a base with incrementals. You can take a Base only recovery point of a drive (using the Run Job Now feature), even if that drive is currently being tracked using Base with Incrementals.

See Running a scheduled recovery point job immediately on page 61.

Schedule options
Table 3-7 lists the recovery point schedule options that are available: Table 3-7 Option
Weekly

Recovery point schedule options Description

Base only: A full recovery point is created at the time and days of the week you specify. Base with Incrementals: A base recovery point is created at the time and days you specify; incremental recovery points are created at the time and interval you specify.

Monthly

Base only: A full recovery point is created at the time and days of the month you specify. Base with Incrementals: A base recovery point is created at the time and days of the month you specify; incremental recovery points are created at the time and on the days of the week you specify.

Creating recovery points About scheduling incremental recovery points

49

Table 3-7 Option

Recovery point schedule options (continued) Description

Save all the recovery point settings except the schedule. You can later run the recovery point job at your convenience using the Run Job Now feature or assign a schedule to the backup by editing the recovery point job. See Running a scheduled recovery point job immediately on page 61. See Editing a recovery point job schedule on page 62.

No schedule (save for later)

Event options
When you create a base with incrementals recovery point job, you can select which events will trigger the automatic creation of incremental recovery point. For example, at the time you log off of a computer or install an application, you can have Symantec LiveState Recovery create an incremental recovery point. Note: Event options may not be available in your version of Symantec LiveState Recovery. To upgrade to a version that supports this feature, visit http://sea.symantec.com Table 3-8 outlines the event options you can enable when you create a base with incrementals. Table 3-8 Event
Any user logs on to the computer

Event options Description

An incremental recovery point is created at the time a user logs on to the computer where the Symantec LiveState Recovery Agent is installed.

Any user logs off the computer (Not at An incremental recovery point is created at the Shutdown or Restart) time a user logs off the computer where the Symantec LiveState Recovery Agent is installed, but not during a shutdown or restart.

50

Creating recovery points About scheduling incremental recovery points

Table 3-8 Event

Event options (continued) Description

An incremental recovery point is created at the time a user installs an application on the computer where the Symantec LiveState Recovery Agent is installed. An incremental recovery point is created when changes to the hard drive on the computer where the Symantec LiveState Recovery Agent is installed exceed a specified number of megabytes.

Any application is installed

The data added to a drive exceeds XX MB

Consolidating incremental recovery points

The base recovery point and all of its incrementals taken up to a specific point-in-time are required when restoring a recovery point to a given point-in-time. Depending on the duration of the recovery point job, there could be a lot of incremental recovery points. You can reduce the amount of storage space for the recovery point set by consolidating multiple incremental recovery point images to a single incremental recovery point. (The base recovery point is still required for a restore.) Note: The consolidation of incremental recovery points feature may not be available in your version of Symantec LiveState Recovery. To upgrade to a version that supports this feature, visit sea.symantec.com. While consolidating incremental recovery points may save disk space and provide a method to take frequent recovery points during the day while consolidating incremental recovery points for previous days, depending on the number of incremental recovery points that have been consolidated, additional memory may be required for restoring or browsing a consolidated incremental recovery point. Additionally, consolidating recovery points over the network may significantly increase network traffic. Table 3-9 outlines the consolidation options you can set when you schedule a base with incrementals or manually consolidate incrementals. Table 3-9 Consolidation
Never

Consolidation options Description

No consolidation of incrementals is performed.

Creating recovery points About scheduling incremental recovery points

51

Table 3-9 Consolidation

Every 12 hours

Consolidation options (continued) Description

A consolidation of incrementals more than 12 hours old is performed every 12 hours. Also, after the first incremental of the day is taken, all incremental files from two days previous are consolidated to a single file. A consolidation of incrementals more than 4 hours old is performed every 4 hours. Also, after the first incremental of the day is taken, all incrementals from the two days previous are consolidated to a single file.

Every 4 hours

See Scheduling a recovery point on page 55. To consolidate incremental recovery points manually

1 2 3 4 5

In the Advanced View, click the History tab. In the list box, select a recovery point. On the Tools menu, click Consolidate Incremental Recovery Points. Select a range of incremental recovery points you want to consolidate, and then click OK. Click Yes to consolidate the selected range of incrementals into a single incremental recovery point. See Consolidating incremental recovery points on page 50.

Run command files during recovery point creation

To integrate with any recovery point routines you may be running on the computer, or to integrate with applications that may be using a drive on the computer, you can specify command files (.exe, .cmd, .bat) to run at three different stages during the creation of a recovery point:

Before data capture After data capture After recovery point creation

You can also specify the amount of time (in seconds) that a command file should be allowed to run. You can specify the location of command files if you want them to be located in a place other than the default location. You can also specify a location on a per-job

52

Creating recovery points About scheduling incremental recovery points

basis, as well as specify a location that can be shared among several machines. If you specify a network location, you will be asked for network credentials. See About network credentials on page 44. The most common use for running command files is to stop and restart non-VSS-aware databases that you want to back up. See Backup of non-VSS-aware databases on page 53. To use a Visual Basic script file (.VBS) during a recovery point, you can create a batch file (.BAT) that will run the script. For example, you could create a batch file called STOP.BAT that contains the following syntax:
Cscript script_filename.vbs

Make sure that Cscript precedes the Visual Basic script filename. Warning: The command files you install and use cannot depend on any user interaction or have a visible user interface while they are running during a backup. You should test all command files you intend to use, outside of Symantec LiveState Recovery, before using them in a recovery point process. When the actual recovery point creation begins, the command file is run during the specified stage. If an error occurs while a command file is running, or the command file does not finish in the time you specified (regardless of the stage), the entire recovery point creation is ended, the command file is stopped (if necessary), and the error information is logged and displayed. Table 3-10 describes the three stages of recovery point creation.

Creating recovery points About scheduling incremental recovery points

53

Table 3-10 Stage

Recovery point creation stages Description

This stage occurs before the virtual volume image is created. Running a command during this stage lets you prepare for the recovery point creation process by stopping (or notifying) any open applications that are using the volume, for example.

Before data capture

Note: If you use this stage option, be sure the

command file has an error recovery mechanism built into it. If the computer has one or more services that must be stopped at this stage, and the command file does not contain any form of error recovery, one or more of the stopped services may not be restarted. An error in the command file will cause the entire recovery point creation process to end immediately; no other command files will run. See How Symantec LiveState Recovery works on page 11. After data capture This stage occurs after the virtual volume image is created. Running a command during this stage is typically a safe point for allowing you or services to resume normal activity on the volume during the recovery point creation. Because the virtual volume snapshot takes only a few seconds to create, the database is in the backup state momentarily, resulting in a minimal number of created log files. After recovery point creation This stage occurs after the actual recovery point is created. Running a command during this stage lets you act on the recovery point, itself, by copying it to an offline location, for example.

Backup of non-VSS-aware databases

With Symantec LiveState Recovery, you can create manual or automatic cold recovery points or hot recovery points of non-VSS-aware databases.

54

Creating recovery points About scheduling incremental recovery points

Creating a cold backup manually

A manual cold (or offline) backup ensures that all database transactions are committed to the hard disk. You can then use Symantec LiveState Recovery to create the recovery point, and then restart the database. To create a cold recovery point manually

Stop the database manually. Use Symantec LiveState Recovery to run a backup immediately using the Run Job Now feature. Symantec LiveState Recovery instantaneously snaps a virtual volume image of the database.

Manually restart the database anytime after the recovery point progress bar appears in the Progress and Performance dialog box of Symantec LiveState Recovery. While the database is restarted, the recovery point is already being created from the virtual volume image.

Creating a cold recovery point automatically

When you automate a cold recovery point of a non-VSS-aware database, you run a command file in the job, before data capture, to either stop or quiesce the database momentarily and commit all transaction logs to the hard disk. Symantec LiveState Recovery will then instantaneously snap a virtual volume image. A second command file is run in the job to automatically restart the database while the recovery point is created from the virtual volume image. Because the virtual volume snapshot takes only a few seconds to create, the database is in the backup state momentarily, resulting in a minimal number of created log files. To create a cold recovery point automatically

Create a job that includes command files that you have created for the following stages of the recovery point:
Before data capture After data capture A command file that stops the database. A command file that restarts the database.

Use Symantec LiveState Recovery to run the job that includes the command files.

Creating recovery points Scheduling a recovery point

55

Creating a hot backup

If a cold backup is not possible in your organization, the next best available option for backing up non-VSS-aware databases is a hot (or online) backup. Symantec LiveState Recovery takes a crash consistent backup. Such a backup is equivalent to the state of a system that was running when the power failed. A database that can recover from this type of failure can be recovered from a crash consistent backup. To create a hot backup

Use Symantec LiveState Recovery to create a recovery point without stopping or restarting the database. Symantec LiveState Recovery instantaneously snaps a virtual volume image from which the recovery point is created.

Scheduling a recovery point

You can automate the creation of recovery points using a weekly or monthly schedule. If you are creating a base with incrementals, you can also specify that certain events, such as logging on or off a computer, create an incremental recovery point. See Ways to work with base recovery points and incrementals on page 45. To schedule a recovery point

Do one of the following:

In the Advanced View of the Drives tab, click Tools > Configure Jobs, and then click Next. On the Drives tab, any unprotected drives (that is, drives that have not yet had the Create Recovery Point job run on them) are labeled blank in the Last Recovery Point column. In the Basic View, click Configure Jobs, and then click Next.

In the Type dialog box, click the recovery point type you want, and then click Next. See Ways to work with base recovery points and incrementals on page 45.

56

Creating recovery points Scheduling a recovery point

Select one or more drives to back up, and then click Next. Shift-click to select a group of contiguous drives, or Ctrl-click to select non-contiguous drives. A separate recovery point will be created for each drive you select. A drive with a red X next to it indicates that the drive is not available for backing up, usually because the drive has been deleted or the entire hard disk has been removed from the computer since you installed Symantec LiveState Recovery. When you create a base with incrementals, if you select a hidden drive (partition) and a non-hidden partition in the same recovery point job, the hidden partition will only be backed up when a base recovery point is specified; no incremental recovery points will be created.

Creating recovery points Scheduling a recovery point

57

In the Location dialog box, select from the following options:

Folder for recovery point storage If you receive a message stating that there may not be enough available space at the specified location, you should specify a new location rather than continuing with the Wizard and possibly not being able to save a complete recovery point. Because recovery point jobs are designed to run without user intervention (possibly when the computer is unattended), you cannot save incremental recovery points directly to removable media. See Storing recovery points on page 31. See Selecting a storage location for recovery points on page 32. Rename Click Rename, and then type a new file name if you want to rename the recovery point instead of using the default file name. By default, filenames for scheduled full recovery points or base recovery points will be appended with 001.v2i, 002.v2i, and so forth. Filenames for incremental recovery points based on the base recovery point will be appended with _i001.iv2i, _i002.iv2i, and so forth. For example, if your recovery point were called C_Drive001.v2i, the first incremental recovery point would be called C_Drive001_i001.iv2i.

5 6

Click Next. Specify the frequency and time of the recovery points. Your options are:

Weekly Monthly No schedule (save for later)

See Schedule options on page 48.

Click Next.

58

Creating recovery points Scheduling a recovery point

If you are creating a base with incrementals, select the events that will automatically create an incremental recovery point. Your options are

Any user logs on to the computer Any user logs off from the computer (Not at Shutdown or Restart) Any application is installed The data added to a drive exceeds: x number of megabytes See Event options on page 49.

Click Next.

10 In the Options dialog box, select from the following options:

Name: Enter a name that you will view in the Job list. For example, default: Backup of C:\. Select the compression level for the recovery point.

Compression drop-down list

None Standard Medium High

See Setting the compression level for recovery points on page 37. Results may vary, depending on the types of files saved in the drive you are backing up. Verify recovery point after creation Select this option to determine whether a recovery point or set of recovery points is valid or corrupt immediately following its creation. You can use Verify Recovery Point to determine whether a recovery point or set of recovery points is valid or corrupt.

Creating recovery points Scheduling a recovery point

59

Limit the number of recovery point sets To limit the number of full or base recovery saved for each drive point sets saved for each drive, select this option, and then type a number in the text field. When this limit is reached, each successive recovery point is first created and stored, and then the oldest, previously created recovery point is deleted (including all associated incrementals if it is a base recovery point) from the same storage location. Be sure you have enough hard disk space to accommodate the number of recovery points you specify, plus one additional recovery point. If you run out of hard disk space before the number of specified recovery points is reached, the recurring recovery point process will no longer complete successfully and a current recovery point will not be created. Consolidate incrementals drop-down list Select how often you want incremental recovery points consolidated.

Never Every 12 hours Every 4 hours

See Consolidating incremental recovery points on page 50. Description text box Type a description that you want associated with the recovery point.

60

Creating recovery points Scheduling a recovery point

Advanced

In the Advanced Options dialog box, select the options you want to use such as encrypting the recovery point, and then click OK. Your options are:

Use password Use Encryption

Divide into smaller files to simplify archiving Ignore bad sectors during copy

Disable SmartSector Copying

See Advanced options for creating recovery points on page 38.

11 Click Next. 12 If appropriate, specify a command file (.exe, .cmd, .bat) from each drop-down
list to run during a particular stage in the recovery point creation process, and then specify the amount of time (in seconds) you want the command to run before it is stopped. If you just added the command file to the CommandFiles folder, you may need to click Back, and then Next to see the files in each stage's drop-down list.

Before data capture After data capture After recovery point creation

See Run command files during recovery point creation on page 51.

13 Click Next, and then review the recovery point options you have selected. 14 Do one of the following:

Click Create recovery point now to immediately create a recovery point. Click Finish to create the recovery point according to the schedule.

If you choose Create recovery point now, when the backup begins, you can watch its progress in the Progress and Performance dialog box.

15 In the Progress and Performance dialog box, do one of the following:

Drag the slider left or right to adjust the operation speed of Symantec LiveState Recovery while the recovery point is being created. See Setting the default performance on page 70.

Creating recovery points Scheduling a recovery point

61

Click Cancel Operation to stop the creation of the recovery point. Click Hide during the creation of the recovery point to close the wizard and return to the console; the recovery point will continue. Click Close after the creation of the recovery point to close the wizard and return to the console.

Running a scheduled recovery point job immediately

You can use Run Job Now to create, on demand, a base only, a base recovery point with incrementals, or an incremental recovery point of the drives most recent changes. For example, you can take a base only recovery point of a drive even when that drive is currently being tracked using a base with incrementals job. To use the Run Job Now feature, you must have already created a recovery point job. See About scheduling incremental recovery points on page 44. To immediately run a scheduled recovery point

1 2 3

In the Advanced View, click the Jobs tab. In the list box, select a recovery point job name. On the Tools menu, click Run Job Now.

62

Creating recovery points Scheduling a recovery point

In the Type dialog box, select one of the following options:

A base only recovery point Creates a full recovery point using the options saved in the job. Available for full recovery point and base with incremental jobs. A base recovery point with incrementals Create a base recovery point of the selected drives. See Ways to work with base recovery points and incrementals on page 45. Available for base with incremental jobs only. An incremental recovery point of recent Creates an incremental recovery point using changes the options saved in the job. Available for base with incremental jobs only.

Click OK.

Editing a recovery point job schedule

You can edit any of the schedule properties for a recovery point job, except the selected drives. To edit a recovery point job schedule

1 2 3

In the Advanced View, click the Jobs tab. In the list box, select a recovery point job. On the Tools menu, click Configure Jobs to open the selected job in the Configure Jobs Wizard and change its properties.

Disabling a recovery point job schedule

You can disable or turn off a recovery point schedule, and then enable it later. To disable a recovery point job schedule

1 2 3 4

In the Advanced View, click the Jobs tab. In the list box, select a recovery point job. On the Tools menu, click Disable Job. To enable the job, click Enable Job.

Creating recovery points Stopping a task

63

Note: When configuring incremental jobs, you are prompted to turn off full-time drive monitoring.

Deleting a recovery point job schedule

You can delete a recovery point schedule when you no longer need it. To delete a recovery point job schedule

1 2 3

In the Advanced View, click the Jobs tab. In the list box, select a recovery point job. On the Tools menu, click Remove Job.

Stopping a task
You can stop a recovery point task or a restore task that has already started. To stop the current task

Do one of the following:

On the Tools menu, click Cancel the Current Operation. On the Tools menu, click Progress and Performance, and then click Cancel Operation. On the Windows system tray, right-click the Symantec LiveState Recovery tray icon, and then click Cancel the Current Operation.

Archiving a recovery point

You can archive an open recovery point in the Recovery Point Browser to accommodate various methods of archiving or to make a copy of a recovery point with different characteristics than the original. Archiving does not modify an existing recovery point; rather, it copies the recovery point and assigns the new characteristics to the copied file. See Starting the Recovery Point Browser on page 96. Archiving a recovery point lets you do the following:

Split the file into smaller sizes so it can be copied to other types of storage media. Consolidate a spanned set into one recovery point.

64

Creating recovery points Archiving a recovery point

Consolidate an incremental set (a base recovery point and all associated incremental recovery points) into one recovery point or a spanned set. Change the description or compression level of the recovery point. Add a password to the recovery point. Encrypt a recovery point.

To archive a recovery point

1 2 3 4

Start the Recovery Point Browser. Browse to the recovery point that you want to archive, and then click Open. On the File menu, click Archive Recovery Point. In the Archive Recovery Point dialog box, in the Filename text box, do one of the following:

If you want to store the recovery point on the local computer, type the drive, folder, and filename. For example, E:\Data_Recovery_Points\vol_1.v2i If you want to store the recovery point on the network, type the appropriate UNC (Universal Naming Convention) path, or click Browse to navigate to the network folder, and then type the filename.

See Selecting a storage location for recovery points on page 32. The new filename must have a .v2i extension. You cannot choose the same location and filename as the existing recovery point.

5 6

In the Description text box, type a description that you want associated with the recovery point. In the Compression Level group box, select one of the following compression levels for the archived recovery point.

None Standard Medium High

See Setting the compression level for recovery points on page 37. Results may vary, depending on the types of files saved in the recovery point that you are archiving. Even if the recovery point was previously compressed when it was initially created, you are archiving the file as a new recovery point, and therefore, the compression level can be reset to what you want.

Creating recovery points Deleting recovery points

65

7 8

In the Security Options group box, click Use Password, if you want to assign a password to the archived recovery point. Type the password in the Password and Confirm Password text boxes. A user must type this password before restoring a recovery point or opening it in the Recovery Point Browser. To remove a password from a recovery point, make sure Use password is not selected.

To encrypt the archived recovery point, select Encrypt recovery point. See Recovery point encryption on page 39.

10 Select one of the following encryption strengths.

Standard Medium High

Depending on the strength of encryption you have selected, you may need to re-type your password to meet the minimum required password length.

11 To break the recovery point into small segments, click Divide the recovery
point into smaller files for archiving, and then select the maximum size for each file from the drop-down list. For example, if you plan to copy a recovery point to CDs, select a file size of 700 MB or less. See Ways to divide a recovery point into smaller files on page 38.

12 Click OK.

Deleting recovery points

You can delete recovery points when they are no longer needed or when you need to make more space available in the recovery point location. The best way to do this is by going to the History tab in the Advanced View of Symantec LiveState Recovery, clicking the Tools menu, and then choosing the Clean History option. Warning: The History tab in the Advanced View of Symantec LiveState Recovery will not be updated to reflect the deletion. Also, if you delete any file that is part of a recovery point set (a base recovery point with incrementals), you will not be able to recover data from the remaining recovery points in that set.

66

Creating recovery points Rescanning a computers hard disk

To delete recovery points

1 2

In Windows Explorer, select the .v2i or .iv2i file that you no longer need. Press Delete.

Rescanning a computers hard disk

Use Rescan Disks to update the display of information in the main window of the console. This feature is useful when the hard disk configuration has changed (such as adding hard disk space or creating a partition) but the changes do not immediately appear in the console. When you rescan disks, it scans all attached hard disks for any changes to its configuration. It also updates information on removable media, CD-ROM or DVD-ROM drives, basic volumes, file systems, and hard drive letters. To rescan a computers hard disk

1 2

In the main window of the Advanced View, click the Drives tab. On the Tools menu, click Rescan Disks. The Status area in the task pane indicates whether scanning is taking place, whether a recovery point is currently underway, or whether the console is ready to accept a recovery point job or restoration.

Viewing events in Symantec LiveState Recovery

You can use the Events viewer to display information, errors, or warnings that occur within Symantec LiveState Recovery. To view events in Symantec LiveState Recovery

In the Advanced View of Symantec LiveState Recovery, click the Events tab.

Setting up notifications
You can direct notifications (errors, warnings, or information messages) to a log file, the system event log, an email address, or SNMP traps. By default, all notifications are automatically sent to the system event log and to a custom log file (located in the Agent folder of the installation).

Creating recovery points Setting up notifications

67

Note: To review any information, errors, or warnings within the software, click the Events tab in the Advanced View of the console or use the Windows Event viewer to monitor application events. If email notification are not being delivered, check the setup of your SMTP server to ensure it is functioning properly. To set notifications

1 2

In the Advanced View, click the Tools menu, and then click Options. On the Notifications tab, select one of the following:

LogFile EventLog SMTP E-mail SNMP trap

See About SNMP traps on page 68.

3 4 5

Click Properties. Specify the minimum priority level you want filtered, and then specify the types of notifications you want reported. If specifying default log file settings, specify the location and the maximum file size of the log file. When the maximum file size is reached, the log file is renamed (*.old) and a log file of the original name is created to which logging continues.

If specifying default email settings, specify the to and from addresses, and the SMTP server to use in sending notifications.

Select the Minimum priority level you want filtered. In the To address text box, type the email address (for example: [email protected]) where notification will be sent regarding any important failures or events. In the From address text box, type the email address of the sender. In the SMTP Server text box, type the name of the SMTP server to use in sending e-mail notifications (for example: smtpserver.domain.com).

Click OK twice. The notification settings are checked to verify whether notifications can be logged or sent.

68

Creating recovery points Viewing the recovery point history of a drive

About SNMP traps

You must install and configure the Windows SNMP service on your computer in order for SNMP traps to work from Symantec LiveState Recovery. By default, Symantec LiveState Recovery is not enabled to send traps to NMS managers. You can configure LiveState Recovery to send SNMP traps for different priority and notification types. To configure Symantec LiveState Recovery to send SNMP traps

1 2 3

From the Tools menu, click Options, and then click the Notifications tab. Under Notifications are sent to the following, click SNMP trap, and then click Properties. In the SNMP Trap Notification Properties dialog, you can select the priority and type of notifications that you want for generating the traps. You can also select the version of SNMP traps to be sent (V1 or V2). Make your selections, and then click OK. LiveState Recovery will now send SNMP traps to all of the destinations set in the Windows SNMP agent.

About the Symantec LiveState Recovery management information base

The Symantec LiveState Recovery management information base (MIB) is an enterprise MIB, and contains the LiveState Recovery SNMP trap definitions. All NMS applications have options to load a MIB, and the LiveState Recovery MIB can be loaded using any of those options. Even without loading the MIB, the NMS applications will still receive and display the traps, but they will not be displayed in informative text.

Viewing the recovery point history of a drive

You can view the recovery point history of a drive and general status information, such as the recovery point and compression type, and where the recovery point is stored. You can also view a chronological history of all the recovery points taken of selected drives (even if the recovery point has been deleted from the storage location), including the original location of each recovery point. The history file of recovery points is written to a subdirectory under the default installation directory (Program Files\Symantec\LiveState Recovery 6.0\Agent\History).

Creating recovery points Viewing the recovery point history of a drive

69

The picture icon next to each drive letter gives you a quick visual indication as to the type of recovery point that is being created (base only, base with incrementals, and so forth). Note: A drive with a red X next to it indicates that the drive is not available for backing up, usually because the drive has been deleted or the entire hard disk has been removed since you installed Symantec LiveState Recovery. The drive remains visible so you can view its recovery point history. If you prefer, you can right-click on the unavailable drive, and then click Delete to remove it from the list. However, you will lose all history and any recovery point jobs associated with that drive. See Viewing events in Symantec LiveState Recovery on page 66. See To consolidate incremental recovery points manually on page 51. You can view the recovery point history of a drive from the Advanced View of the Symantec LiveState Recovery console or from Windows Explorer. To view the recovery point details of a drive from the console

1 2 1 2

In the Advanced View, click the History tab. In the list box, select a recovery point to view specific details about it.

To view the recovery point details of a drive from Windows Explorer In Windows Explorer, right-click a drive, and then click Properties. In the Properties dialog box, on the LiveState Recovery tab, view the History list box.

Cleaning the recovery point history

Use Clean History to delete the log file entries and recovery points for product events prior to the last base recovery point you made (or the last base with incrementals). For example, if you back up a computer every Sunday morning, and clean the recovery point history on Sunday afternoon, the history prior to last Sundays recovery point would be erased. Warning: When you use Clean History, all recovery point history entries and associated recovery points prior to the last recovery point are deleted.

70

Creating recovery points Setting a default recovery point location

To clean the backup history

1 2 3

From the Advanced View, click the History tab. In the list box, select a recovery point. On the Tools menu, click Clean History.

Setting a default recovery point location

You can specify the default path where recovery points are stored. This default path is used if you do not specify a different path when you create a recovery point. To set a default recovery point location

1 2 3

On the Tools menu, click Options. On the Default Settings tab, select the default location for recovery points. Depending on the default location you selected, specify the folder or CD/DVD drive where the recovery point will reside. See Selecting a storage location for recovery points on page 32.

Setting the default performance

You can set the default performance (operation speed) of Symantec LiveState Recovery during volume copying or during backup and restore tasks. Setting the operation speed may improve the performance of other resource intensive applications that you run at the same time. Note: Setting the operation speed in Symantec LiveState Recovery does not control network bandwidth.

Creating recovery points Setting the default performance

71

To set the default performance

1 2 3

On the Tools menu, click Options. On the Performance Settings tab, move the slider left to decrease or right to increase the operation speed of Symantec LiveState Recovery. To set the throttling level, select the Enable network throttling check box, and then under Maximum network throughput, enter the maximum KB per second. You can optionally set the network throttling to reduce the bandwidth Symantec LiveState Recovery uses on your network, especially if you are trying to image multiple machines at one time across your network.

Adjusting the operation speed during a task

By overriding the default setting in Options, you can adjust the operation speed of Symantec LiveState Recovery at any time during a task such as the creation of recovery points or during a restore, or when you are copying a volume. The next time you start another task, the default operation speed will be used. To adjust the operation speed during a task

1 2 3

In the Windows system tray, right-click the Symantec LiveState Recovery tray icon, and then click Progress and Performance. Move the slider left to decrease or right to increase the operation speed of Symantec LiveState Recovery. You can optionally adjust your network throttling by selecting the Enable network.

72

Creating recovery points Setting the default performance

Chapter

Restoring recovery points

This chapter includes the following topics:

About restoring a computer Restoring a recovery point Starting a computer in the recovery environment About restoring drives using the recovery environment Restoring a single drive using the recovery environment Restoring drives using the recovery environment Restoring drives using a system index file in the recovery environment Restoring using the Restore Anyware Option Restoring using the LightsOut Restore Option

About restoring a computer

There are two different methods you can use to restore a computer to full functionality. Each restore method, described inTable 4-1, takes into account the functionality that is or is not available on the computer. In many instances, you do not need to restart the computer to complete a restoration.

74

Restoring recovery points About restoring a computer

Table 4-1 Problem

Methods for restoring a computer Restore method

Restore recovery point. See Restoring a recovery point on page 76. The computer does not require a restart before you can access files.

You can boot into the operating system on the computer, but you need to restore a drive (other than the operating system partition) from a recent recovery point.

The computer has one of the following Restore the entire drive using the System Restore problems: Wizard from the recovery environment (Symantec Recovery Disk). It has suffered a catastrophic failure See one of the following tasks based on your The software cannot lock a drive (drive lock) to perform a restoration problem scenario:

directly under Windows See About restoring drives using the recovery You cannot boot into the operating environment on page 79. system, and you have lost hardware, See Restoring drives using the recovery data, or program files on a drive environment on page 83. See Restoring drives using a system index file in the recovery environment on page 85.. The computer requires a restart before you can access files.

Storage locations for restoring recovery points

Depending on where your recovery points are stored, you can restore recovery points from either the connected computer or the network. Table 4-2 describes storage locations that you can select from when restoring a recovery point. Table 4-2 Restore from
Local file

Recovery point storage locations Description

Selecting a local file will restore a recovery point located on the local hard drive. Specify a drive and folder where the recovery point is stored. For example, E:\Data_Recovery_Points. To restore a recovery point that is located on disc media, insert the media in the drive, and then browse to the CD or DVD drive and folder where the recovery point is located.

Restoring recovery points About restoring a computer

75

Table 4-2 Restore from

Network file

Recovery point storage locations (continued) Description

Selecting a network file will restore a recovery point that is located on the network. Specify a UNC (Universal Naming Convention) path (for example, \\computer\share\file) on the network where the recovery point is stored, or click Browse to navigate to the network folder where the recovery point is stored.

Restore options
When you restore a computer from a recovery point, there are various options you can set. Table 4-3 describes the restore options for restoring a computer. Table 4-3 Option
Verify recovery point before restore

Restore options for a computer Description

Determines whether a recovery point or set of recovery points is valid or corrupt before restoring it. The wizard checks to see that all of the files in the recovery point or set are available, the internal data structures in the recovery point match the data that is available, and the recovery point can be uncompressed (if you selected a compression level at the time of creation). If the recovery point is invalid, the restoration will not continue. Checks the restored drive for errors after restoring the recovery point. Automatically expands the drive to occupy the destination drives remaining unallocated space.

Check for file system errors

Resize drive to fill unallocated space

76

Restoring recovery points Restoring a recovery point

Table 4-3 Option

Set drive active

Restore options for a computer (continued) Description

Makes the restored drive the active partition (the drive the computer boots from). Only one drive can be active at a time. To boot the computer, it must be on the first drive, and it must contain an operating system. When the computer boots, it reads the partition table of the first drive to find out which drive is active and boots from that location. If the drive is not bootable or you are not certain that it is, have a Windows boot disk ready. This option is valid for basic disks only (not dynamic disks).

Partition type

Lets you set the partition type to one of the following:

A primary partition A logical partition inside an extended partition

This option is not applicable for dynamic disks. Drive letter Assigns the selected drive letter to the partition. Available in the Restore Drive Wizard only.

Restoring a recovery point

If you are able to access the operating system on a troubled computer, you can use the Restore Drive Wizard to restore an entire recovery point of a data drivewith no restarting. This method of recovery, known as a hot restore, is useful if you have experienced the complete loss of a data drive. You can restore a full or base recovery point by selecting a .v2i file, or you can select an incremental recovery point (.iv2i file) that was taken at the point in time to which you want to restore the drive. If you select an incremental recovery point, the restore process will automatically detect any previous incrementals and the base recovery point associated with that incremental. Any drive that you restore can be automatically resized smaller to fit the selected destination (assuming the amount of data in the partition does not exceed the size of the destination drive). For example, if you have a recovery point of a 6 GB drive that contains 3 GB of data, and you want to restore the recovery point to a 4 GB drive, the 6 GB drive

Restoring recovery points Restoring a recovery point

77

image being restored is proportionally resized down to 4 GB to fit the destination drive size. To restore a recovery point

Do one of the following:

In the Basic View, click Recover a Drive. In the Advanced View on the Drives tab, select the drive you want to restore, and then click Tools > Recover Drive.

2 3 4 5 6

In the Recover Drive Wizard, click Next. Select the recovery point that you are restoring from by browsing to the file. See Storage locations for restoring recovery points on page 74. If the recovery point is password-protected, type the password in the Password text box, and then click OK. Click Next. In the Destination window, select the destination where you want to restore the recovery point. If there is not enough free space to restore a recovery point, you can press Shift to select multiple, contiguous destinations that exist on the same hard drive.

7 8

Click Next. Set how you want the restore to be performed. Your options are:

Verify recovery point before restoring Check for file system errors Resize drive to fill unallocated space Set drive active Set partition type Select drive letter Perform Restore Anyware Option - This is a separately licensed feature that you can optionally purchase. For details, see Restoring using the Restore Anyware Option

The actual options available are dependent on the restore destination you selected in the previous step. See Restore options on page 75.

78

Restoring recovery points Starting a computer in the recovery environment

Click Next to review the restore options you have selected.

10 Click Next to restore the recovery point.

If the wizard cannot lock the drive (drive lock) to perform the restoration under Windows, it will prompt you to insert the Symantec LiveState Recovery CD and manually boot into the recovery environment so you can complete the restoration. When the restore is finished, the computer is restarted automatically. You may want to dismount the recovery point after restoring it. See Dismounting a recovery point drive on page 101.

Starting a computer in the recovery environment

The Symantec LiveState Recovery product CD is used both to install the software and to start a computer in the recovery environment, known as Symantec Recovery Disk. Be sure to store the CD in a safe place. See How Symantec Recovery Disk works on page 118. If you need to restore a recovery point or files using Symantec Recovery Disk (due to the inability of being able to start the operating system and you have lost hardware, data, or program files on a drive), you can use the Symantec LiveState Recovery CD to start the computer in the recovery environment. Note: The recovery environment requires a minimum of 256 MB of RAM for most computers, 384 MB recommended, to run. To start a computer in the recovery environment

To use a USB device while you are running the recovery environment, attach the device, and then continue with the next step. See USB devices in the recovery environment on page 125.

2 3

Insert the Symantec LiveState Recovery CD into the media drive of the computer. Restart the computer. You may need to modify your system to make it bootable from the CD. See Starting a computer from the CD drive on page 123.

As soon as you see the prompt, Press any key to boot from CD, press a key to begin booting into the recovery environment.

Restoring recovery points About restoring drives using the recovery environment

79

If you need to install storage drivers for the computers hard disk subsystem, press F6 when prompted while booting into the recovery environment. See You cannot access (or see) the local drive where your recovery points are saved on page 123. You should always use the latest Windows XP or Windows 2003 Server version of the particular storage driver.

Read the license agreement, and then click Accept. If you decline, you cannot start the recovery environment and your computer will reboot.

Depending whether you need to access the network, click Yes or No to start networking services. If you want to see recovery point dates and times correctly, you may need to set the correct time zone while in the recovery environment. Click the time zone field at the bottom of the main window. In the Select Time Zone dialog box, select the time zone location you are in from the Time Zone drop-down list, and then click OK. See Troubleshooting the recovery environment on page 117. See Using the support utilities on page 119.

About restoring drives using the recovery environment

If you cannot restore a drive while the computer is online (due to not booting properly into the OS or lacking free hard drive space), you can use the System Restore Wizard from the Symantec Recovery Disk to return one or more drives on the computer to full functionality. You can also use Symantec Recovery Disk to perform a bare metal recovery of a computer if you have suffered a catastrophic hard drive failure.

Restore options
There are two groups of restore options: standard restore options and advanced restore options. Table 4-4 describes the standard restore options that are available for restoring a single drive.

80

Restoring recovery points About restoring drives using the recovery environment

Table 4-4 Option

Standard restore options for a single drive Description

Determines whether a recovery point or set of recovery points is valid or corrupt before restoring it. The wizard checks to see that all of the files in the recovery point or set of files are available, the internal data structures in the recovery point match the data that is available, and the recovery point can be uncompressed (if you selected a compression level at the time of creation). If the recovery point is invalid, the restoration will not continue. This option is selected by default.

Verify recovery point before restore

Check for file system errors after restore Resize drive to fill unallocated space

Checks the restored drive for errors after restoring the recovery point. Automatically expands the drive to occupy the destination drives remaining unallocated space.

Table 4-5 describes the advanced restore options that are available for restoring a single drive. Table 4-5 Option
Set drive active

Advanced restore options for a single drive Description

Makes the restored drive the active partition (the drive the computer boots from). Only one drive can be active at a time. To boot the computer, it must be on the first drive, and it must contain an operating system. When the computer boots, it reads the partition table of the first drive to find out which drive is active and boots from that location. If the drive is not bootable or you are not certain that it is, have a Windows boot disk ready. This option is valid for basic disks only (not dynamic disks).

Note: If you are restoring an operating system

partition from the recovery environment to a hard drive that has no other partitions, you must select this option or the operating system partition will not be active after the restore and will not boot.

Restoring recovery points Restoring a single drive using the recovery environment

81

Table 4-5 Option

Partition type

Advanced restore options for a single drive (continued) Description

Lets you set the partition type to one of the following:

Primary partition A logical partition inside an extended partition

This option is not applicable for dynamic disks. Restore original disk signature Restores the original physical disk signature of the hard drive. This option is recommended for advanced users and is available only when restoring a whole drive under the recovery environment. Restore MBR Restores the master boot record. The master boot record is contained in the first sector of the first physical hard drive. The MBR consists of a master boot program and a partition table that describes the disk partitions. The master boot program looks at the partition table to see which primary partition is active. It then starts the boot program from the boot sector of the active partition. This option is recommended for advanced users and is available only when restoring a whole drive under the recovery environment.

Restoring a single drive using the recovery environment

You can use the System Restore Wizard from the Symantec Recovery Disk to return a drive on the computer to full functionality. To restore a single drive using the recovery environment

Boot the computer into the Symantec Recovery Disk main window. See Starting a computer from the CD drive on page 123. Drive letters under the recovery environment may not match those in the Windows environment.

From the Home panel, click Recover My Computer. The System Restore Wizard launches.

82

Restoring recovery points Restoring a single drive using the recovery environment

3 4 5

Click Recover drives, and then click Next. Click Single drive, and then click Next. In the Recovery point to Restore window, do one of the following:

In the Recovery point folder and filename text box, type the location of the recovery point you want to restore. Click Browse and navigate to the recovery point you want to restore that resides on your computer. Click Browse, and in the File name text box, type the name of the computer and share that holds your recovery points on the network (syntax example: \\computer_name\share_name\), and then press Enter. Select a recovery point you want to restore, and then click Open to add it to the text field. In the System Restore Wizard, click Next. In the Connect As window, type a domain or computer name, user name, and password, and then click OK to return to the wizard.

If you are still unable to see your network after typing the computer name and share name, you may need to map a drive or use an IP address to see and browse the network. See Mapping a network drive in the recovery environment on page 127.

7 8 9

If the recovery point is password-protected, type the password in the Password text box, and then click OK. Click Next. In the Restore Destination window, select the destination where you want to restore the recovery point. Some of the drives listed may be invalid selections because there is not enough free space for the restored recovery point, or because you do not have rights to the drive.

10 If you want to free up disk space, select a drive, and then click Delete Drive.
This will free space if a single volume space on the hard drive is not adequate. When you click Delete Drive, the drive is only virtually deleted at that point. The actual deletion of the drive takes place after you click Finish in the wizard. If you change your mind before clicking Finish, go back to the Restore Destination window and click Undo Delete to restore the drive.

11 Click Next. 12 In the Restore Options window, select or deselect the restore options you
want.

Restoring recovery points Restoring drives using the recovery environment

83

The actual options that are available will depend on the restore location you selected earlier.

Verify recovery point before restore Check for file system errors after restore Resize drive to fill unallocated space Set drive active Set partition type Restore original disk signature Restore MBR Perform Restore Anyware Option - This is a separately licensed feature that you can optionally purchase. For details, see Restoring using the Restore Anyware Option

See Restore options on page 79.

13 Click Next. 14 In the Completing the System Restore Wizard window, review the system
restore options you have selected. If you need to change any options, click Back.

15 To restart the computer automatically after the recovery point is restored,

select Reboot after finish.

16 Click Finish. 17 Click Yes to begin restoring the recovery point.

Restoring drives using the recovery environment

You can use the System Restore Wizard from the recovery environment to restore an entire computer that has more than one drive. You can also use the recovery environment to perform a bare metal recovery of a computer that has suffered a catastrophic hard drive failure. To restore multiple drives

1 2

Boot the computer into the Symantec Recovery Disk main window. See Starting a computer from the CD drive on page 123. From the Home panel, click Recover My Computer. The System Restore Wizard launches.

84

Restoring recovery points Restoring drives using the recovery environment

Click Recover drives. Drive letters under Symantec Recovery Disk may not match those in the Windows environment.

4 5 6 7

Click Next. Click Multiple drives. Click Next. In the Recovery Points to Restore window, add, edit, or remove recovery points. See To add a recovery point on page 84. See To edit the list of recovery points on page 85. See To remove a filename from the list of recovery points on page 85.

8 9

To restart the computer automatically after the recovery points are restored, select Reboot after finish. Click Finish.

10 Click Yes to start restoring the recovery points.

To add a recovery point

1 2 3 4

In the Recovery points to restore window, click Add. Specify the location of the recovery point. Click Next. In the Restore Destination window, select the destination where you want to restore the recovery point. Some of the drives listed may be invalid selections because there is not enough free space for the restored recovery point, or because you do not have rights to the drive.

If you want to free up disk space, select a drive, and then click Delete Drive. This will free space if a single volume space on the hard drive is not adequate. When you click Delete Drive, the drive is only virtually deleted at that point. The actual deletion of the drive takes place after you click Finish in the wizard. If you change your mind before clicking Finish, go back to the Restore Destination window and click Undo Delete to restore the drive.

6 7

Click Next. In the Restore Options window, select or deselect the restore options you want.

Restoring recovery points Restoring drives using a system index file in the recovery environment

85

The actual options available will depend on the restore location you selected earlier.

Verify recovery point before restore Check for file system errors after restore Resize drive to fill unallocated space Set drive active Set partition type Restore original disk signature Restore MBR Perform Restore Anyware Option - This is a separately licensed feature that you can optionally purchase. For details, see Restoring using the Restore Anyware Option

See Restore options on page 79. To edit the list of recovery points

1 2 3

In the Recovery points to restore window, select a filename from the list of recovery points you are restoring. Click Change. Do one of the following:

Specify a new path to the recovery point Select a new recovery point filename Select a new restore destination Select new restore options

To remove a filename from the list of recovery points

1 2

In the Recovery points to restore window, select a recovery point filename. Click Remove.

Restoring drives using a system index file in the recovery environment

You can use the System Restore Wizard from the Symantec Recovery Disk to restore an entire computer that may have more than one drive. This type of restore uses a system index file (.sv2i) to reduce the amount of time needed to restore the drives. Each time a recovery point is created, a system index file is saved along

86

Restoring recovery points Restoring drives using a system index file in the recovery environment

with it. The system index file contains a list of the most recent recovery points, including the original drive location of each recovery point. If you have suffered a catastrophic hard drive failure, you can also use Symantec Recovery Disk to perform a bare metal recovery of a computer. To restore multiple drives using a system index file

Boot the computer into the Symantec Recovery Disk main window. See Starting a computer from the CD drive on page 123. Drive letters under the recovery environment may not match those in the Windows environment.

2 3 4 5 6 7

From the Home pane, click Recover My Computer. Click Recover drives. Click Next. Click Multiple drives using system index file (*.sv2i). Click Next. In the System Index File window, do one of the following:

Type the full path to the system index file (*.sv2i) Click Browse to navigate to the system index file.

The system index file is in the same location as the recovery point location.

8 9

Click Next. In the Recovery Points to Restore window, do one of the following:

Select the filename of the recovery point you want to restore from the list box. By default, all recovery points are selected. Add, edit, or remove recovery points. See To add a recovery point on page 84. See To edit the list of recovery points on page 85. See To remove a filename from the list of recovery points on page 85. To restart the computer automatically after the recovery points are restored, select Reboot after finish.

10 Click Finish. 11 Click Yes to restore the recovery points.

Restoring recovery points Restoring using the Restore Anyware Option

87

Restoring using the Restore Anyware Option

The Symantec LiveState Recovery Restore Anyware Option enables administrators to restore an image of a Windows 2000, 2003, or XP system volume to a machine with different hardware, and to make the necessary changes for the system to be able to boot. Depending on your configuration, additional changes might be required for the server to run exactly as it did previously. Note: This is a separately licensed option. In order to use this option, you must purchase and install it separately from Symantec LiveState Recovery.

Installing the Restore Anyware Option

Before you install the Restore Anyware Option, you must install the latest version of Symantec LiveState Recovery. To install the Restore Anyware Option

Insert the Symantec LiveState Recovery Restore Anyware Option CD into the media drive of the computer. If CD auto-run is enabled, the installation program launches automatically.

2 3 4 5 6 7

If CD auto-run is not enabled, click Start > Run, type <drive>: \setup.exe (where <drive> is the drive letter of your media drive), and then click OK. In the Welcome screen, click Next. Read the license agreement, and then click I accept the terms of the license agreement. Click Next. At the wizard completion screen, the Install Restore Anyware Option License file check box is selected by default. Click Finish to exit the wizard. The Install License screen appears. Do one of the following:

If you have the license file, browse to its location. If you have the serial number that came with the Restore Anyware Option, click Get License. If you do not have a license file, click Buy Now to purchase the product.

Depending on which license option you chose in the previous step, click Install, or click Later.

88

Restoring recovery points Restoring using the Restore Anyware Option

If you chose to install the license file, an activation succeeded screen will appear. Click OK.

10 You are returned to the Install License screen. Click Done.

Licensing the Restore Anyware Option after installation

If you did not choose to license the Restore Anyware Option during installation, you will be unable to use the feature until you license it. To license the Restore Anyware Option after installation

1 2 3

Launch the Symantec LiveState Recovery main console. From the Help drop-down menu, select Change License. The Install License screen appears. Do one of the following:

If you have the license file, browse to its location. If you have the serial number that came with the Restore Anyware Option, click Get License. If you do not have a license file, click Buy Now to purchase the product.

4 5 6

Click Install. Once the install completes, and activation succeeded screen appears. Click OK. You are returned to the Install License screen. Click Done.

Using the Restore Anyware Option

Once you have installed and licensed the Restore Anyware Option, every recovery point you create will be Restore Anyware-licensed. If you have an issue with a computer that is no longer functioning, (for example, the motherboard quit working) and you have a recovery point of the computer that is licensed for the Restore Anyware Option, you can restore it onto new hardware. Another common use for the Restore Anyware Option is to upgrade to new hardware from an older computer. This feature is used to recover drives only; it cannot be used to recover at a file and folder level. You must activate the Restore Anyware Option product license before creating a recovery point in order to use this feature to restore a computer with different hardware.

Restoring recovery points Restoring using the Restore Anyware Option

89

Warning: If you are using an OEM license from your hardware vendor or a single user license, you might be prompted to reactivate your Windows software using your Windows product license key. Be aware that OEM and single user licenses might have a limited number of activations. Verify that using the Restore Anyware Option does not violate your operating system and/or application license agreements. Before you perform a Restore Anyware Option restore, you need to save the recovery point you will be using for the restore in a location where you can access it (for example, on a location you can browse to). During the restore, you might also be prompted to supply disk drivers, service packs, hotfixes, and so forth. We also recommend that you have your Windows media CD available. For more details on getting Restore Anyware driver information, see the Symantec Knowledge Base at http://www.symantec.com/techsupp/lshir. To perform a Restore Anyware Option restore of a computer

1 2

Insert the Symantec LiveState Recovery CD into the media drive of the target computer (to which you want to complete a restore). Restart the computer. You may need to modify your system to make it bootable from the CD. See Starting a computer from the CD drive on page 123.

3 4

As soon as you see the prompt, "Press any key to boot from CD", press a key to begin booting into the recovery environment. Read the license agreement, and then click Accept. If you decline, you cannot start the recovery environment and your computer will reboot.

Depending whether you need to access the network, click Yes or No to start networking services. If you want to see recovery point dates and times correctly, you may need to set the correct time zone while in the recovery environment. Click the time zone field at the bottom of the main window. In the Select Time Zone dialog box, select the time zone location you are in from the Time Zone drop-down list, and then click OK. See Troubleshooting the recovery environment on page 117. See Using the support utilities on page 119.

From the main console, click Recover My Computer. The System Restore Wizard launches.

90

Restoring recovery points Restoring using the Restore Anyware Option

7 8 9

Click Recover drives, and then click Next. Select the type of recovery you need, and then click Next. Click Browse to navigate to the location of your recovery point. Open.

10 In the Open dialog, select the recovery point you want to use, and then click 11 Verify that the recovery point you have chosen is Restore Anyware-licensed.
If it is, click Next. If you need to select a different recovery point, browse to the it using the Open dialog.

12 Select the destination where you want to restore the recovery point, and then
click Next.

13 Verify that the Parition type is set as Primary. Select the Perform Restore
Anyware Option check box, and then click Next.

14 Review the options you have selected, and then click Finish.

Uninstalling the Restore Anyware Option

The Restore Anyware Option remains installed on your computer if you uninstall Symantec LiveState Recovery. You must uninstall the Restore Anyware Option separately. To uninstall the Restore Anyware Option

1 2

From Windows, click Start > Settings > Control Panel > Add or Remove Programs. Select Symantec LiveState Restore Anyware Option 6.0, and then click Remove > Yes.

Troubleshooting the Restore Anyware Option

If you still encounter driver failure, try restoring to a different machine. It may be an issue with the target computer's hardware. For more details on troubleshooting the Restore Anyware Option, see the Symantec Knowledge Base at http://www.symantec.com/techsupp/lshir. For further assistance, contact Symantec Technical Support at http://www.symantec.com/techsupp/enterprise/index.html. Before you contact technical support, from the Symantec recovery environment, go to the Utilities panel and run the LiveState Recovery Support Tool. Select the Gather Technical Support Information Option. This tool creates a log file that you will send to technical support for better assistance in troubleshooting your issue.

Restoring recovery points Restoring using the LightsOut Restore Option

91

Restoring using the LightsOut Restore Option

The Symantec LiveState Recovery LightsOut Restore Option enables administrators to restore a computer from a remote location, regardless of the state the computer is currently in, so long as its file system is intact. This option provides a way to boot the Symantec recovery environment from a folder on the operating system partition. Depending on your hardware configuration, you can use the LightsOut Restore Option to complete a system restoration on a remote server via a Web browser, using your server's remote connection capabilities, and the Symantec recovery environment. By using this option, you save the time it takes to physically visit the computer to perform the restore. Note: This is a separately licensed option. In order to use this option, you must purchase and install it separately from Symantec LiveState Recovery.

Installing the LightsOut Restore Option

Before you install the LightsOut Restore Option, you must install the latest version of Symantec LiveState Recovery. You should also ensure that the Microsoft .NET framework (installed with Symantec LiveState Recovery) is running. To install the LightsOut Restore Option

Insert the Symantec LiveState Recovery LightsOut Restore Option CD into the media drive of the computer. If CD auto-run is enabled, the installation program launches automatically.

2 3 4 5 6

If CD auto-run is not enabled, click Start > Run, type <drive>: \setup.exe (where <drive> is the drive letter of your media drive), and then click OK. In the Welcome screen, click Next. Read the license agreement, and then click I accept the terms of the license agreement. Click Next. Click Finish to exit the wizard. If you leave the Launch LightsOut Restore Option check box selected, the program will launch automatically.

Starting the LightsOut Restore Option Wizard

The first time you run the LightsOut Restore Option wizard, you will be prompted to install a license file.

92

Restoring recovery points Restoring using the LightsOut Restore Option

Starting the LightsOut Restore Option Wizard

1 2

From Windows, click Start > All Programs > Symantec LiveState Recovery > Configure LiveState Recovery LightsOut Restore Option. The Install License File dialog appears. Do one of the following:

If you have a license file, browse to its location. If you have the serial number that came with the LightsOut Restore Option, click Get License. If you do not have a license file, click Buy Now to purchase the product.

3 4

Depending on which option you clicked in the previous step, click Install, or click Later. You might be asked to specify the source location of a Symantec Recovery Disk. You can use your Symantec Recovery Disk CD or the Symantec LiveState Recovery LightsOut Restore Option CD. Specify the location, and then click Next. At the Options dialog, you can specify the time the boot menu is displayed. The default is 10 seconds. If you leave the Enable Symantec pcAnywhere check box selected, networking will automatically start, and pcAnywhere will be loaded. If you clear this check box, pcAnywhere will not be automatically started.

6 7

Select the type of IP address you want to use, and then click Next. You might be shown a list of network and storage drivers that are not supported in the Symantec recovery environment. Select the box next to the network driver that you would like to copy from your current Windows installation to the Symantec recovery environment, review the list of missing storage drivers, and then click Next. Browse to the locations of your missing storage and network driver files. Note: The location for missing network and storage drivers should point to a path that contains the fully extracted installation package for the desired driver. If you have more than one missing storage driver, you must rerun the LightsOut Restore Option wizard for each missing driver. Also, the drivers you select should be compatible with Windows 2003.

Click Next.

Restoring recovery points Restoring using the LightsOut Restore Option

93

10 The summary screen with the options you selected is displayed. Click Back
if you need to change the options, or if you are satisfied with your selections, click Finish. The files are copied from the Symantec Recovery Disk. When the copying has completed, a dialog displays, indicating that the LightsOut Restore Option successfully installed.

11 Click OK.

Reconfiguring Using the LightsOut Restore Option Wizard

You can run the LightsOut Restore Option wizard again if you need to reconfigure your options. Reconfiguring Using the LightsOut Restore Option Wizard

1 2 3

From Windows, click Start > All Programs > Symantec LiveState Recovery > Configure LiveState LightsOut Restore Option. Make your desired changes in the wizard screens, and then click Finish. Click Yes if you want to recopy all of the files, or click No to only make the changes necessary for updating your system.

Using the LightsOut Restore Option

If you are working remotely and a server on your network goes down, you can use your server's remote connection capabilities to access the downed computer. For example, you are on vacation in the Bahamas and a computer on your network in Los Angeles goes down. You can connect to the machine from your remote location by using your server's remote connection capabilities. Once you are connected, you can instruct the server to reboot, and then from the boot menu, you can access the Symantec Recovery Disk. You can then use the recovery environment to restore files or an entire system partition. You should be aware that the LightsOut Restore Option will not work on a multi-boot system (booting multiple operating systems from the same partition). It will only work on the primary operating system. Also, if the file system becomes corrupt and you are not able to access the boot menu, the LightsOut Restore Option will not work (you will need to boot from the CD).

Uninstalling the LightsOut Restore Option

The LightsOut Restore Option remains installed on your computer if you uninstall Symantec LiveState Recovery. You must uninstall the LightsOut Restore Option separately.

94

Restoring recovery points Restoring using the LightsOut Restore Option

To uninstall the LightsOut Restore Option

1 2

From Windows, click Start > Settings > Control Panel > Add or Remove Programs. Select Symantec LightsOut Restore Option 6.0, and then click Remove > Yes.

Troubleshooting the LightsOut Restore Option

The following are troubleshooting tips for the LightsOut Restore Option:

If you cannot see the storage drivers, but haven't encountered a blue screen error, you can still try to resolve this issue by pressing the F6 key as the recovery environment is starting, and then following the prompts for the storage driver. If you receive an error indicating that Windows could not boot from a RAMDISK image, you may not have enough memory available for the LightsOut Restore Option. The LightsOut Restore Option requires 1 GB of memory to run.

For more details on troubleshooting the Restore Anyware Option, see the Symantec Knowledge Base at: http://www.symantec.com/techsupp/lslightsout

Chapter

Restoring files and folders

This chapter includes the following topics:

About restoring files and folders Starting the Recovery Point Browser Restoring files from a recovery point Mounting a drive within a recovery point Restoring files using the recovery environment Viewing the properties of a recovery point Viewing the drive properties of a recovery point Viewing a file within a recovery point

About restoring files and folders

There are two different methods you can use to restore files and folders on a computer. Each restore method takes into account the functionality that is or is not available on the computer. In many instances, you do not need to take the computer down to complete a restoration. Table 5-1 describes the two methods for restoring files and folders within recovery points.

96

Restoring files and folders Starting the Recovery Point Browser

Table 5-1 Problem

Methods for restoring files and folders Restore method

You can boot into the operating system Restore selected files and folders from a recovery on the computer but you have lost data, point using the Recovery Point Browser within programs, or hardware files on a drive Windows. (excluding operating system files). See Restoring files from a recovery point on page 98. See Starting the Recovery Point Browser on page 96. The computer does not require a restart before you can access files. You cannot boot into the operating system, and you have lost hardware, data, or program files on a drive. Restore selected files and folders from inside a recovery point using the Recovery Point Browser from the recovery environment (Symantec Recovery Disk). See Restoring files using the recovery environment on page 102. See Starting the Recovery Point Browser on page 96. See Troubleshooting the recovery environment on page 117. See Using the support utilities on page 119. The computer requires a restart before you can access files.

Starting the Recovery Point Browser

You can start the Recovery Point Browser from the Windows Start menu. The Recovery Point Browser, included with Symantec LiveState Recovery, simplifies the management and maintenance of your recovery points. Working within a single screen, the Recovery Point Browser gives you control of the recovery points you can access. For example, you can view recovery point contents, restore individual program and data files from the recovery point, or you can mount a selected drive and share it across a network.

Restoring files and folders Starting the Recovery Point Browser

97

The Recovery Point Browser also displays recovery point descriptions, so you can identify individual recovery points. You cannot modify folders and files from within a recovery point and save them again as part of the recovery point. All the features of the Recovery Point Browser are accessed from the main program screen, or by right-clicking anywhere in the tree pane or content pane. To start the Recovery Point Browser

Do one of the following:

On the classic Windows Start menu, click Programs > Symantec LiveState Recovery > Recovery Point Browser. On the Windows XP Start menu, click All Programs > Symantec LiveState Recovery > Recovery Point Browser.

By default, the Open dialog is displayed each time you start the Recovery Point Browser. You can select a recovery point to open, or you can click Cancel, and then select a previously opened recovery point from the File menu.

Verifying a recovery point

You can use Verify Recovery Point to determine whether a recovery point or set of recovery points is valid or corrupt. If you verify a recovery point at the time you create a recovery point, the recovery point or set of recovery points will be checked to see that all of files are available, the internal data structures in the recovery point match the data that is available, and the recovery point can be uncompressed to create the expected amount of data (if you selected a compression level at the time of creation). Note: Verifying a recovery point doubles the time (approximately) required to create the recovery point. If you decide not to verify the recovery point at the time of creation, you can still check the integrity of a recovery point any time after it is created by opening the file in the Recovery Point Browser. To verify an existing recovery point using the Recovery Point Browser

1 2

On the Windows Start menu, click Programs > Symantec LiveState Recovery > Recovery Point Browser. From the tree pane of the Recovery Point Browser, select the recovery point (.v2i, .iv2i, .pqi) you want to check.

98

Restoring files and folders Restoring files from a recovery point

3 4

Click File > Verify Recovery Point. When the check is complete, click OK. If you prefer, you can use the System Restore Wizard or the Configure Jobs Wizard to have recovery points automatically verified for integrity at the time they are created.

Opening or closing a recovery point in the Recovery Point Browser

By default, the Open dialog box is displayed each time you start the Recovery Point Browser. You can open recovery points either from the Recovery Point Browser or from Windows Explorer. To open a recovery point in the Recovery Point Browser

Do one of the following:

In the Open dialog box, select a recovery point to open. On the File menu, select a previously opened recovery point. Note that the File menu maintains a list of the most recently opened recovery points.

To open a recovery point in the Recovery Point Browser from Windows Explorer

Do one of the following:

In Windows Explorer, double-click a recovery point. In Windows Explorer, right-click on a drive letter that has been backed up, and then click Properties. On the LiveState Recovery tab, in the History list box, select a recovery point, and then click Restore Files.

To close a recovery point in the Recovery Point Browser

1 2

In the tree pane of the Recovery Point Browser, select the recovery point name. On the File menu, click Close.

Restoring files from a recovery point

If you are able to run the operating system on a troubled computer, you can use the Recovery Point Browser to restore individual files or folders from a recovery pointall with zero downtime to the computer. This method of recovery, known as a hot restore, is useful if you have traced the cause of a computer failure to a

Restoring files and folders Restoring files from a recovery point

99

certain file or folder of files, or you have simply lost important data files and do not want to restore an entire recovery point using the Restore Drive Wizard. Warning: You can open files from within a recovery point. However, you must restore a file from within a recovery point before making any modifications to it, or your changes will be lost. If your recovery point is on removable media, copy the segments of the recovery point to a fixed drive and restore files from the fixed drive. To restore files from a recovery point

Open a recovery point in the Recovery Point Browser. See Opening or closing a recovery point in the Recovery Point Browser on page 98.

2 3 4

In the tree pane of the Recovery Point Browser, you may need to double-click the recovery point (.v2i, .iv2i, or .pqi) to see the drives that are inside of it. Double-click the desired drive that contains the folders or files that you want to restore. Select the files or folders that you want to restore.

Press Ctrl+A to select all items. To select a group of files that are next to each other, select the top file, press Shift, and then select the last file in the list. To select a group of files that are not next to each other, press Ctrl while selecting the files you want.

On the File menu, click Recover. Where possible, the Recover Items dialog will automatically fill in the Recover to this folder text field with the original path where the recovery point was created. If the original location does not include a drive letter (because the drive was hidden when you created the recovery point), you must enter a drive letter for the drive before you can restore any files or folders.

6 7

If the original path is unknown, or you want to restore the selected files to a different location, click Browse to locate the destination. Click Recover to begin restoring the files. When file restoration is complete, you are returned to the main window of the Recovery Point Browser.

100

Restoring files and folders Mounting a drive within a recovery point

Mounting a drive within a recovery point

You can mount a drive within a recovery point (.v2i, .iv2i, or .pqi) by assigning a drive letter that is visible from the Recovery Point Browser and Windows Explorer. You can perform a variety of tasks on the drive, such as run ScanDisk (or CHKDSK), perform a virus check, copy folders or files to an alternate location, or simply view disk information about the drive, such as used space and free space. You may also be able to run executable programs that exist within the mounted recovery point drive. When a drive is mounted, you can set it up as a shared drive. Users on a network can connect to the shared drive and restore files and folders from within the recovery point drive. You can mount one or more recovery point drives at a time. The drives will remain mounted until you dismount them or restart the computer. Mounted drives do not take up extra hard disk space. You can select a recovery point (.v2i, .iv2i, .pqi) in the Recovery Point Browser, and then mount the drive and set it up as a share that can be accessed remotely from another computer. See Mounting a drive within a recovery point on page 100. You can then restore selected files and folders to the remote computer. See Restoring files from a recovery point on page 98. The security remains intact on an NTFS volume when you mount the volume using the Recovery Point Browser. (Security is maintained for all volumes when mounting.) If, however, you are simply viewing folders and files inside the recovery point using the Recovery Point Browser tool (that is, the .v2i, .iv2i, or .pqi file is not mounted), there is no security on the volume, folders, or files. It is not necessary to mount a drive to restore files or folders from within a recovery point. Warning: Any data written to a mounted recovery point driveincluding creating, modifying, or deleting fileswill be lost when the volume is dismounted. To mount a drive within a recovery point using the Recovery Point Browser

1 2

In the tree pane of the Recovery Point Browser, select the recovery point that contains the drive you want to mount. On the File menu, click Mount Recovery Point Drive.

Restoring files and folders Mounting a drive within a recovery point

101

3 4 5 1 2 3 4 5 1 2 3 4 5

In the Mount Recovery Point Drive dialog box, select the drive label you want mounted. In the Drive letter drop-down list, choose a letter you want associated with the drive. Click OK.

To mount a drive within a recovery point using Windows Explorer In Windows Explorer, navigate to a recovery point drive. Right-click the recovery point drive, and then click Mount. In the Mount Recovery Point Drive dialog box, select the drive label you want mounted. In the Drive letter drop-down list, choose a letter you want associated with the drive. Click OK.

To mount a drive within a recovery point using a drive letter in Windows Explorer In Windows Explorer, right-click a drive that has been backed up, and then click Properties. In the Properties dialog box, on the LiveState Recovery tab, in the History list box, select a recovery point drive, and then click Mount. In the Mount Recovery Point Drive dialog box, select the drive label you want mounted. In the Drive letter drop-down list, choose a letter you want associated with the drive. Click OK. The mounted recovery point drive appears in the tree pane of the Recovery Point Browser, and Windows Explorer is automatically opened to the drive letter of the mounted drive.

Dismounting a recovery point drive

You can dismount all recovery point drives by restarting the computer. You can also dismount recovery point drives one at a time by using the Recovery Point Browser or Windows Explorer. To dismount a recovery point drive using the Recovery Point Browser

1 2

In the tree pane of the Recovery Point Browser, select a mounted recovery point file. On the File menu, click Dismount Recovery Point Drive.

102

Restoring files and folders Restoring files using the recovery environment

To dismount all recovery point drives using the Recovery Point Browser

1 2 1 2

In the tree pane of the Recovery Point Browser, click Mounted Recovery Point Drives. On the File menu, click Dismount All Recovery Point Drives.

To dismount a recovery point drive using Windows Explorer In Windows Explorer, navigate to the mounted recovery point. Right-click the drive, and then click Dismount Recovery Point Drive.

Restoring files using the recovery environment

You can use the Symantec Recovery Disk to boot into the recovery environment and restore files from within a recovery point. When you are running the recovery environment, there are several support utilities available that you can run to troubleshoot networking or hardware issues you may encounter. For example, you can ping a computer, renew IP addresses, or get information about a hard disk partition table. See Troubleshooting the recovery environment on page 117. See Using the support utilities on page 119. To restore files using the recovery environment

1 2 3

Boot the computer into the recovery environment main window. See Starting a computer in the recovery environment on page 78. Click Recover My Files. In the Open dialog, open the recovery point that contains the recovery point files or folders you want to restore. Drive letters under Symantec Recovery Disk may not match those in the Windows environment.

Restoring files and folders Viewing the properties of a recovery point

103

In the tree view pane of the Recovery Point Browser, double-click the desired drive. You can also click File > Open to locate the recovery point you want. If you are unable to see or browse the network from the Open dialog, type the name of the computer and share that holds your recovery points, in the File name text box (syntax example: \\computer_name\share_name), and then press Enter. Select a recovery point, and then click Open to add it to the tree view pane of the Recovery Point Browser. Double-click the recovery point filename to display the available drives. If you are still unable to see your network after typing the computer name and share name, you may need to map a drive to see and browse the network. See Mapping a network drive in the recovery environment on page 127.

In the content pane of the Recovery Point Browser, select the files or folders you want to restore.

Press Ctrl+A to select all items. To select a group of files that are next to each other, select the top file, then press Shift, and select the last file in the list. To select a group of files that are not next to each other, press Ctrl while selecting the files.

On the File menu, click Recover. Where possible, the Recover Items dialog box will automatically fill in the Recover to this folder text box with the original path where the recovery point was created. If the original location does not include a drive letter (because the drive was hidden when you created the recovery point), you must enter a drive letter for the drive before you can restore any files or folders.

7 8

If the original path is unknown, or you want to restore the selected files to a different location, click Browse to locate the destination. Click Recover to restore the files.

Viewing the properties of a recovery point

You can view various properties of a recovery point using the Recovery Point Browser. Table 5-2 describes the recovery point properties available.

104

Restoring files and folders Viewing the drive properties of a recovery point

Table 5-2 Image property

Description Size Created Compression Spanned

Recovery point properties Description

A user-assigned comment associated with the recovery point The total size (in megabytes) of the recovery point The date and time that the recovery point file was created The compression level used in the recovery point Whether the entire recovery point file is spanned over several files The password protection status of the selected drive The encryption strength used with the recovery point The version number of the recovery point The name of the computer on which the recovery point was created Displays whether this option is licensed for use by the Restore Anyware Option The name of the program that created the recovery point

Password protected Encryption Version Computer name

Restore Anyware Option

Created by

To view the properties of a recovery point

1 2

In the tree pane of the Recovery Point Browser, select the desired recovery point. Do one of the following:

On the File menu, click Properties. Right-click the recovery point, and then click Properties.

Viewing the drive properties of a recovery point

You can view various drive properties of a recovery point by using the Recovery Point Browser. Table 5-3 describes the recovery point drive properties available.

Restoring files and folders Viewing a file within a recovery point

105

Table 5-3 Drive property

Description

Recovery point drive properties Description

A user-assigned comment associated with the drive The original drive letter that was assigned to the drive The cluster size (in bytes) used in a FAT, FAT32, or NTFS drive The file system type (for example, FAT, FAT32, and NTFS) used in the drive The selected drives drive status as either Primary (primary partition) or Logical (logical partition) The total size (in megabytes) of the drive, including both used and free space The amount of used space (in megabytes) in the drive The amount of free or unused space (in megabytes) in the drive Indicates whether the recovery point will allow a system to be restored to different hardware than the hardware the recovery point was created on.

Original drive letter Cluster size

File system

Primary/Logical

Size

Used space Unused space

Restore Anyware-Enabled

To view the drive properties of a recovery point

1 2 3

In the tree pane of the Recovery Point Browser, double-click the recovery point file that contains the desired drive (or volume). Select a drive. Do one of the following:

On the File menu, click Properties. Right-click the drive, and then click Properties.

Viewing a file within a recovery point

After opening a recovery point in the Recovery Point Browser, you can view any file within the recovery point using the program associated with that file type. (If a particular file type is not associated with a program, you can select the program you want to use from the Microsoft Open With dialog box.)

106

Restoring files and folders Viewing a file within a recovery point

You cannot view encrypted files system (EFS) NTFS volumes using the Recovery Point Browser. To view a file within a recovery point

1 2 3 4 5

In the tree pane of the Recovery Point Browser, double-click the recovery point file to reveal the list of drives. In the tree pane, select a drive. In the content pane, double-click a folder that contains the file you want to view. Select the file. On the File menu, click View. The View option is unavailable when you select a program file that has a .exe, .dll, or .com file extension.

Chapter

Copying a drive
This chapter includes the following topics:

About copying a drive Preparing to copy drives Copying one hard drive to another hard drive

About copying a drive

You can copy the contents of one hard drive to another. You can copy your operating system, applications, and data to a new hard drive. If the hard drive you are copying contains more than one partition, you must copy the partitions one at a time to the new hard drive. You can use the Copy Drives feature when you upgrade to a larger hard drive or when you add a second hard drive and keep the original. You should not use the Copy Drives feature to set up a hard drive that will be used in another computer. This feature may not be available in your version of the product. To upgrade to a version that supports this feature, go to http://sea.symantec.com

Preparing to copy drives

Before you can copy drives, you must have the hardware configured correctly. To prepare to copy drives

Do all of the following:

Prepare the computer. Get the manufacturer's directions for installing the drive.

108

Copying a drive Copying one hard drive to another hard drive

Shut down the computer, and then disconnect the power cord. Discharge electricity by touching a grounded metal object. Remove the computer cover.

Change the hard drive jumper settings to make the new hard drive the slave drive, or connect it as the slave drive if you are using cable select instead of jumper settings to determine the master and slave drives. Attach the new hard drive by doing the following:

Connect the cable so the colored stripe on the edge lines up with the I/O pins on the motherboard. The motherboard is marked Pin1 or 1 where the colored stripe should go. Connect the other end of the cable to the back of the hard drive, again matching the striped edge with the I/O pin position on the drive itself. The I/O pin is usually on the side closest to the power supply.

Attach the power connector to the new hard drive. There is only one way to connect the power cabledon't force it. Make sure that the angled edge of the plastic connector lines up with the angled edge of the pin socket.

5 6

Anchor the drive in the bay area according to the manufacturer's instructions for the computer or the computer bay requirements. Change the BIOS settings to recognize the new hard drive:

Watch the bottom of the screen while your computer is booting up, and press [Del], [F1], [F2], or [F10] according to the legend that appears. Select Auto Detect for both the master and slave drives. Save the BIOS changes, and then exit. Your computer will reboot automatically.

Copying one hard drive to another hard drive

Once your new hard drive is installed, you are ready to copy your old hard drive to the new one. The new hard drive does not need to be formatted. If the hard drive you are copying contains more than one partition (for example, a C:\ drive, a D:\ drive, an E:\ drive, and so forth), you must copy each partition, one at a time, to the new hard drive. If the power or other hardware fails while you are copying data, no data is lost from the source drive, but you will need to restart the copying process.

Copying a drive Copying one hard drive to another hard drive

109

Note: This feature may not be available in your version of the product. To upgrade to a version that supports this feature, visit sea.symantec.com. To copy one hard drive to another hard drive

Do one of the following:

From the Advanced View, click Tools > Copy Drive. From the Basic View, click Copy One Drive to Another.

Complete the wizard to copy the drive. The wizard will guide you through selecting the right drive to copy, the destination drive, and the options for copying the data from one drive to another.

Drive-to-drive copying options

When you copy a drive from one hard drive to another, you can use the drive-to-drive copying options. Table 6-1 describes the options for copying from one hard drive to another. Table 6-1 Option
Check source for file errors

Drive-to-drive copying options Description

Check the source (original) drive for errors before copying it. Check the destination (new) drive for errors after copying the drive. Automatically expand the drive to occupy the destination drive's remaining unallocated space. Make the destination drive the active partition (the drive the computer boots from). Only one drive can be active at a time. To boot the computer, it must be on the first drive, and it must contain an operating system. When the computer boots, it reads the partition table of the first drive to find out which drive is active and boots from that location. If the drive is not bootable, or you are not certain that it is, have a boot disk ready. The Set drive active option is valid for basic disks only (not dynamic disks).

Check destination for file system errors Resize drive to fill unallocated space. Set drive active (for booting O/S)

110

Copying a drive Copying one hard drive to another hard drive

Table 6-1 Option

Drive-to-drive copying options (continued) Description

Disable SmartSector copying Symantec's SmartSector technology speeds up the copying process by only copying clusters and sectors that contain data. However, in some cases, such as high-security environments, it may be desirable to copy all clusters and sectors in their original layout, whether they contain data. To copy both used and unused sectors, click this option. Disabling SmartSector copying increases copying time. Ignore bad sectors during copy Destination partition type Copy the drive even if there are errors on the disk.

Click Primary partition to make the destination (new) drive a primary partition. Click Logical partition to make the destination (new) drive a logical partition inside an extended partition.

Drive letter

Select the drive letter you want assigned to the partition from the Drive letter drop-down list Copy the master boot record from the source drive to the destination drive. Select this option if you are copying the C:\ drive to a new, empty hard drive. You should not select this option if you are copying a drive to another space on the same hard drive as a recovery point, or if you are copying the drive to a hard drive with existing partitions that you will not be replacing. Additionally, if you are copying multiple drives to a new, empty hard drive, you only need to select this option once.

Copy MBR

Appendix

Troubleshooting Symantec LiveState Recovery

This appendix includes the following topics:

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

Troubleshooting Symantec LiveState Recovery

For additional troubleshooting information, see the Readme.txt file on Symantec LiveState Recovery CD or refer to the Symantec Web site.

Troubleshooting the installation

For help with resolving problems that you might encounter during installation, see Getting system information from Windows

Getting system information from Windows

You can get a list of information about your system directly from Windows. You can use this information to specify an IP address, drivers, and so forth when installing the Symantec product or setting up Symantec Recovery Disk. To get system information from Windows

1 2

On the Windows taskbar, click Start > Programs > Accessories > System Tools > System Information. Use the tree pane area to select the information group you want to view or print.

112

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

Drive letter changes

If the drive letter of the CD drive has changed since you installed Symantec LiveState Recovery, when you run the Repair or Modify installation option from the Symantec LiveState Recovery CD you will get an error message indicating that the MSI file cannot be found. This error typically occurs if you are adding or removing external devices to a desktop PC or internal devices to a laptop. To avoid this issue, make sure that Windows sees the CD drive as the same drive letter as when Symantec LiveState Recovery was first installed.

Troubleshooting recovery points

For help with resolving problems that you encounter while creating recovery points, you can check the following information.

See Recovery point on CD on page 112. See Support for CD/DVD burners on page 112. See Support for DVD-ROM drives on page 113.

Recovery point on CD
Difficulties with creating recovery points to CD may be resolved by downloading the latest CD or DVD drivers and firmware updates from the manufacturer of your CD or DVD writer. When you have completed the update, shut down the computer. To ensure the computer recognizes the drive:

If your CD/DVD burner is internal, turn off the power to the computer, and then turn the power back on. If your CD/DVD burner is external, unplug the power source to the burner, and then plug it back in. If you create a recovery point of two drives and the first recovery point fills one and a half CDs, you will be prompted to insert new media before the second drive is backed up. It helps to think of the two drives as two separate backup sets. This process makes it easier to restore recovery points from removable media later.

Support for CD/DVD burners

Supported burners allow variable packet writing, a necessary feature if you are writing a recovery point to CD or DVD. Most burners manufactured since 1998 support variable packet writing.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

113

To see if Symantec LiveState Recovery supports your CD or DVD writer, visit http://www.symantec.com/techsupp/lsrdriver. Specify your OS and the manufacturer of your CD or DVD writer to see if your device is supported. If your burner is not listed, you should check your burners documentation to see if variable packet writing is supported before you attempt to write recovery points to it.

Support for DVD-ROM drives

Some DVD-ROM drives cannot play DVD+R media. If you plan to create a recovery point on DVD+R media and later restore from a DVD-ROM drive, you should check the drive compatibility list at: http://www.symantec.com/techsupp/lsrdriver

Troubleshooting scheduled recovery points

For help with resolving problems that you encounter while scheduling jobs, you can check the following information.

See You configured a job and set a number of base recovery points. After a while, recovery points stopped being created on page 113. See Checking the status of the Symantec LiveState Recovery Agent on page 114. See You deleted a drive and now you get job errors on page 114.

You configured a job and set a number of base recovery points. After a while, recovery points stopped being created
When you configure a job, you can specify the number of recovery points you want to save on the hard disk before they are rotated out and deleted. When you use this option you must also make sure that you have enough hard disk space to accommodate the number of recovery points you specify, plus one additional recovery point. If you run out of hard disk space before the number of specified recovery points is reached, the recurring recovery point process will no longer function and a current recovery point will not be created. The solution is to either reduce the number of recurring recovery points you are creating, increase the amount of space necessary to maintain the number of recovery points you specify, or simply delete the job, and then recreate a new one. See Viewing events in Symantec LiveState Recovery on page 66.

114

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

Checking the status of the Symantec LiveState Recovery Agent

You can check the status of the Symantec LiveState Recovery Agent to ensure it is started and ready. If recovery points are not being created, it may be because the Symantec LiveState Recovery Agent has stopped. To check the status of the Symantec LiveState Recovery Agent

In the Services window, under the Name column, click Symantec LiveState Recovery. See Opening Services on page 142. The Status column for Symantec LiveState Recovery should have Started listed.

2 3

To stop the service, right-click Symantec LiveState Recovery, and then click Stop. To start the service, right-click Symantec LiveState Recovery, and then click Start. See Managing the agent using Windows Services on page 140.

You deleted a drive and now you get job errors

If you delete a drive, you should also delete any jobs associated with that drive. Otherwise, the jobs will attempt to run on the deleted drive, resulting in errors every time.

Troubleshooting restoring recovery points from Windows

For help with resolving problems that you encounter while restoring recovery points from Windows, you can check the following information.

See Restoration of a recovery point that is spanned on page 114. See Restoration of a system drive on page 115. See You cancelled a restore. The volume disappeared from the console. You restored the volume, but it did not show up in the console on page 115.

Restoration of a recovery point that is spanned

When you restore a system drive under Windows from the console and the recovery point is on spanned CDs, the console will not prompt correctly for the next media. To avoid this problem, restore the recovery point manually using the Recover My Computer option in the recovery environment.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

115

When you are restoring from CD, you are prompted to insert the first CD, followed by the last CD, the first CD, the last CD, and then the first CD again. Then the restore begins and prompts you for the media in sequence. After restoring a recovery point, you will be prompted again to insert the first CD one more time. For example, if you had a recovery point that spanned across five CDs, the order you would insert the CDs would be as follows: 1-5-1-5-1-2-3-4-5-1. See Ways to divide a recovery point into smaller files on page 38.

Restoration of a system drive

If you began restoring a recovery point of a system drive under Windows and encountered an error, you will need to boot into the recovery environment and start the Recover My Computer option to manually restore the recovery point. When you restore a system drive that requires booting into the recovery environment, the restore may not complete automatically if the recovery environment assigns different letters to drives other than what was assigned under Windows. This discrepancy is sometimes caused by USB and FireWire devices or CD devices, or if you have manually changed drive letter assignments. (Under Windows, fixed drives are assigned first; under the recovery environment, removable drives are assigned first.) The work-around is to manually restore the recovery point from the recovery environment using the Recover My Computer option. See Restoring drives using the recovery environment on page 83.

You cancelled a restore. The volume disappeared from the console. You restored the volume, but it did not show up in the console
When you cancel in the middle of a restore, in most cases, the destination partition is already created (or deleted if it was pre-existing), but a drive letter has not been assigned to the partition. Because a drive letter has not yet been assigned, the volume will not be displayed in either the console or Windows Explorer. Symantec LiveState Recovery is designed to keep drive letter assignments of volumes intact when you restore a recovery point over it. This also includes not assigning a drive letter if the destination volume did not have a drive letter to begin with, when you restore a recovery point. At the time you cancelled the restoration, the volume did not yet have the drive letter assigned to it. As a result, when you successfully restored the entire recovery point to the same destination a second time, Symantec LiveState Recovery noticed that the volume did not have a drive letter assignment, and therefore kept that assignment intact. A volume with no drive letter will not show up in the console

116

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

or Windows Explorer; your recovery point contents, however, will be completely restored. You can easily fix this display issue by manually assigning a drive letter to the volume using a tool such as Microsofts Disk Management console.

Troubleshooting the console

For help with resolving problems that you encounter while using the console, you can check the following information.

See How to create recovery points directly to tape on page 116. See How to break up an existing recovery point file into a spanned file set on page 116. See How to test the scheduling feature without actually creating a schedule on page 116. See Sending email notifications anonymously on page 117.

How to create recovery points directly to tape

Symantec LiveState Recovery does not write recovery points directly to tape. However, you can create a recovery point and save it to the network. You can then transfer the recovery point file to a tape drive or burn it to CD or DVD. To restore the recovery point from tape, you must copy the files back to a local or network drive before restoring.

How to break up an existing recovery point file into a spanned file set
You can use the Export Recovery Point feature in the Recovery Point Browser. See Archiving a recovery point on page 63. When you export a recovery point, you can select the option Divide into smaller files for archiving. For example, if you plan to copy a recovery point to CD, specify a file size of 700 or less.

How to test the scheduling feature without actually creating a schedule

To test the scheduling of recovery points, stop the Symantec LiveState Recovery Agent in the Microsoft Services console. Then change the date forward on the computer to a time when you would like the scheduled recovery point to occur, and then restart the Symantec LiveState Recovery Agent. If the date on the

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

117

computer is changed while the Symantec LiveState Recovery Agent is running, the change will not be noticed by the agent. Note: If you add a new partition to the hard drive, it may take several seconds before the new partition appears in the Symantec LiveState Recovery console.

Sending email notifications anonymously

If you have set up e-mail notification in Options (Tools > Options) of the Symantec LiveState Recovery console and you do not want to use NTLM (NT LanMan) to authenticate with the SMTP server, you will need to set the Anonymous property in the Notification systems configuration file. See Setting up notifications on page 66. To send email notifications anonymously

From the Symantec LiveState Recovery install folder (the default path is \Program Files\Symantec\Symantec LiveState Recovery\Agent), open LiveState Recovery.Notify.xml in a text-editing application such as Notepad. Locate the following property in the file:
<Anonymous vt="11">0</Anonymous>

Set the value to 1 to use anonymous connections to the SMTP server. Any e-mail notification is sent to the SMTP server without attempting authentication. Or, set the value to 0 (default) to use NTLM with the credentials of the Symantec LiveState Recovery service. Any e-mail notification is sent to the SMTP server using NTLM authentication.

4 5

Save LiveState Recovery.Notify.xml. Restart the LiveState Recovery Agent. See Starting or stopping the agent service on page 142.

Troubleshooting the recovery environment

For help with resolving problems that you encounter while using the Symantec Recovery Disk (the recovery environment) or to solve issues you may experience while restoring a recovery point from Symantec Recovery Disk, you can check the following information.

See How Symantec Recovery Disk works on page 118. See Starting a computer from the CD drive on page 123.

118

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

See You cannot access (or see) the local drive where your recovery points are saved on page 123. See You cannot access the network drive where your recovery points are saved on page 124. See A warning message indicates that Windows might not run correctly because of insufficient memory on page 124. See Supported storage devices and NIC drivers on page 124. See Your recovery point is on CD, but you cannot use the drive because the Symantec LiveState Recovery CD is running the recovery environment on page 125. See Finding your network from the recovery environment on page 125. See USB devices in the recovery environment on page 125. See Using pcAnywhere Thin Host for a remote recovery on page 125. See Mapping a network drive in the recovery environment on page 127. See Getting a static IP address on page 128. See Server clusters and restoring on page 130. See Workgroups and restoring on page 130. See Use of a delayed apply with no DHCP on page 131. See Restoration of a recovery point in a workgroup environment on page 131. See Restoration of a DHCP server on page 131.

How Symantec Recovery Disk works

The Symantec LiveState Recovery product CD is used both to install Symantec LiveState Recovery and to boot a computer into the recovery environment, known as Symantec Recovery Disk. Be sure you store the CD in a safe place. Symantec Recovery Disk makes restoring recovery points possible under almost any computer disaster. Occasionally, a computer failure can leave the operating system intact but prevent you from restoring a recovery point after restarting. Or, a computer failure can leave the operating system inoperative, making a restoration seem impossible. For these types of situations, you can restore a recovery point using Symantec Recovery Disk. In the recovery environment, you can run, among other tools, the System Restore Wizard (to restore a recovery point) or the Recovery Point Browser (to perform a file-level restore).

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

119

After restoring a recovery point, you can restart the computer into its previous, usable state. See Starting a computer in the recovery environment on page 78.

Using the support utilities

When you are running under the recovery environment, there are several support utilities available (under the Utilities and Network panels) that you can run to troubleshoot networking or hardware issues you may encounter. For example, you can ping a computer, renew IP addresses, or get information about a hard drive partition table. Symantec Technical Support may require information generated by these utilities, if you call Symantec for help resolving problems. Table A-1 describes the support utilities available in the recovery environment. Table A-1 Panel
Network

Support utilities Support utility

Start Networking Services

Description
Use to load the necessary network drivers on your computer so you can access network-stored backup image files. Use to start pcAnywhere Thin Host to establish a remote control session for use by a remote computer using Symantec pcAnywhere. When selected, starts Networking services, if necessary. See Using pcAnywhere Thin Host for a remote recovery on page 125.

Network

Start pcAnywhere Thin Host

Network

Map Network Drive

Use to map a network drive. See Mapping a network drive in the recovery environment on page 127.

Network

Configure IP Address

Use to configure network addresses for a network card. See Getting a static IP address on page 128.

120

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

Table A-1 Panel

Network

Support utilities (continued) Support utility

Run IPConfig Utility

Description
Use the IPConfig utility to view, among other things, network adapter information. You can also release or renew IP addresses from this utility. You can save the information to a text file (ipconfig.txt) which can then be sent to technical support, if necessary.

Network

Ping Remote Computer

Use to see if the remote computer (where the recovery point is located) is available and network connections to that computer are intact and functioning. Type the IP address of the computer you want to check, and then click OK.

Network

Set Network Card Speed

Use to automatically set the Network Interface Card (NIC) on the computer to the highest speed possible. If you want to restore a recovery point that is stored on a network, you can run this utility (while network services are running) prior to restoring the image. This will ensure maximum throughput of the image across the network.

Utilities

Edit boot.ini

Use to edit the boot.ini directly from the recovery environment. See Editing the boot.ini file on page 128.

Recover

Restore Legacy Ghost Image

Use to restore a .gho image file created with Symantec Ghost 8.0.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

121

Table A-1 Panel

Utilities

Support utilities (continued) Support utility

Display SME Disk Information

Description
Use to view, among other things, information about the hard drive on the computer. You can save the information to a text file (smedump.txt) which can then be sent to technical support, if necessary.

Utilities

View Partition Information

Use to create a report of the contents of your hard drive partition table. This report can help you diagnose and fix various disk partition problems. You can save the information to a text file, which can then be sent to technical support, if necessary.

122

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

Table A-1 Panel

Utilities

Support utilities (continued) Support utility

Edit Partition Table

Description
Use to read and allow manipulation of the partition table information found in the Master Boot Record and EPBR Boot record. This utility is useful for fixing partition table errors or boot sector problems. You can make changes to partition tables by using decimal values rather than hex values. You can also change the file system flag, set the active partition, hide and unhide partitions, and change CHS values, boot sector information, and the number of sectors in a partition. When you change the number of sectors, the final result must match the CHS values. This utility looks at partition table information in a relative fashion. Basically, it finds the start sector of a primary partition by calculating the absolute value of the sector from the start of the drive to the boot sector of the partition.

Note: This utility should only be

used under the guidance of Symantec Technical Support. Utilities Change Active Partition Use to easily and quickly switch between bootable primary partitions. This utility is for users who only occasionally need to change the active partition. Type the ID number of the partition (shown in the first column) you want to make the bootable primary partition, and then press Enter. This utility makes the partition active and restarts the computer.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

123

Table A-1 Panel

Utilities

Support utilities (continued) Support utility

Restore Master Boot Record

Description
Use to save or restore critical MBR (Master Boot Record) information in the first sector of a hard drive. The contents of the first sector or entire first head of the hard drive are saved or restored to a file.

To use the support utilities

1 2

In the recovery environment main window, click Utilities or Network. Select the support utility that you want to run. See Starting a computer in the recovery environment on page 78.

Starting a computer from the CD drive

To run Symantec Recovery Disk, you must be able to start your computer from the Symantec LiveState Recovery CD in the CD drive. To start a computer from the CD drive

1 2

Turn on your computer. While the computer is starting, watch the bottom of the screen for a prompt that tells you how to access the BIOS. Generally, you will need to press Del, F1, F2, or F10.

3 4

In the BIOS panel, on the Boot menu, change the CD or DVD drive to be the first boot device in the list. Save the changes and exit the BIOS setup. When you boot your computer with CD in the drive, you will see a prompt telling you to press any key to boot from CD. If you do not press a key, your computer will attempt to boot from the next boot devices listed in the BIOS. There is only a short delay when the prompt to press a key is displayed, so you need to watch carefully as the computer boots.

Press a key, and the recovery environment (Symantec Recovery Disk) starts.

You cannot access (or see) the local drive where your recovery points are saved
You may need to load drivers for the storage device where your recovery points are saved as part of booting to the recovery environment.

124

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

To load drivers for storage devices

1 2

Insert the Symantec LiveState Recovery CD, and restart your computer. To add storage drivers for most SCSI devices, when you see the prompt Press any key to boot from CD, press F6. If you press a different key, you will not have an opportunity to load special drivers. See www.microsoft.com/windows/catalog .

Press S when prompted to specify additional SCSI adapters, CD drives, or special controllers for use with Windows, including those for which you have a device support disk from a mass storage device manufacturer. If you do not have the drivers available from the device manufacturer and they are not included as part of Symantec Recovery Disk, you will not be able to use that drive.

You cannot access the network drive where your recovery points are saved
The system where you are running the recovery environment may use a NIC driver that is not included as part of the recovery environment. If you NIC is not detected by the recovery environment, contact Symantec Technical Support.

A warning message indicates that Windows might not run correctly because of insufficient memory
The recovery environment requires a minimum of 256 MB of RAM to run. If your computers video card is configured to share your computers RAM, you might need more than 256 MB of RAM to use the recovery environment. If you continue to have difficulties using the recovery environment, you might need to upgrade your computers memory.

Supported storage devices and NIC drivers

Driver Validation checks for network and storage devices on the computer to see if there are drivers for using the devices when using Symantec Recovery Disk. If your storage device is not listed, you can press F6 when booting a computer into the recovery environment and manually load the necessary drivers. If your NIC card is not listed and the recovery environment does not detect the driver, contact Symantec Technical Support.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

125

Your recovery point is on CD, but you cannot use the drive because the Symantec LiveState Recovery CD is running the recovery environment
When you restore a recovery point from a CD or DVD from within the recovery environment and you only have one CD or DVD drive, you must leave the Symantec LiveState Recovery CD in that drive until after you have clicked Browse to locate the recovery point. After the Open dialog box has displayed, you can remove the Symantec LiveState Recovery CD and insert the media that contains the recovery point. If you remove the Symantec LiveState Recovery CD before clicking Browse, the recovery environment will exit back to the recovery environment main window.

Finding your network from the recovery environment

If you click Browse and cannot see or browse the network from the Open dialog, try the following procedure. To find your network

In the File name box, type the name of the computer and share that holds your recovery points. For example: \\computer_name\share_name

2 3

Press Enter. Select a recovery point, and then click Open to add it to the Image file text box. If you are still unable to see your network after typing the computer name and share name, you may need to map a drive and log on as a different user to see and browse the network. See Mapping a network drive in the recovery environment on page 127.

USB devices in the recovery environment

To enable a USB device while you are running the recovery environment, you must first attach the device, and then restart the computer in the recovery environment.

Using pcAnywhere Thin Host for a remote recovery

Using the Symantec Recovery Disk, you can host a remote control session by starting pcAnywhere Thin Host. Once started, the thin host waits for a connection that can be used to remotely manage a recovery or perform other tasks in the recovery environment.

126

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

To connect to the thin host, you must use Symantec pcAnywhere on a remote computer. The pcAnywhere Thin Host contains the minimum settings needed to support a single-use remote control session. The thin host requires an IP address for hosting a remote control session. Note: A thin host cannot be deployed to the recovery environment. The thin host can only be started from Symantec Recovery Disk to host a remote control session. The thin host in Symantec Recovery Disk does not support file transfers and cannot be used to add drivers for network or storage devices. To start pcAnywhere Thin Host

In the recovery environment main window, click the Home pane, and then click Start the pcAnywhere Thin Host. If they haven't been previously started, the Networking services are started. The thin host establishes a connection.

Connecting remotely to the pcAnywhere Thin Host

Symantec pcAnywhere can be used on a computer to remotely connect to a computer that has already started the recovery environment and the pcAnywhere Thin Host. After you are connected, the client computer can remotely manage a recovery or perform other tasks supported in the recovery environment. Note: The client computer cannot transfer files or add additional drivers for network or storage devices on the computer running the thin host. To connect remotely to the pcAnywhere Thin Host

Ensure that the computer to be remotely managed (the host) has been booted into Symantec Recovery Disk and that pcAnywhere Thin Host has been started and is waiting. Obtain the IP address of the thin host computer. On the client computer, in Symantec pcAnywhere, use the Remote Setup Wizard to configure the remote control session.

2 3

Specify a TCP/IP connection type. Specify the IP address of the host computer. Choose to automatically login to the host on connection.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

127

Type the following login name: symantec Type the following password: recover

The thin host shuts down when there is an attempt to connect using any incorrect configuration settings. The thin host does not support encryption. To prevent unauthorized users from tampering with your settings or launching a session without your permission, set a password for your remote connection item using the Protect Item properties page in Symantec pcAnywhere.

Start the remote control session. If the connection attempt is unsuccessful, you have three tries before the thin host must be restarted on the host computer before making another attempt to connect.

Remotely perform necessary tasks on the host computer. The remote control session ends when the thin host is closed, the thin host computer is restarted, or when the remote control session is ended. After the host computer has started the Windows operating system, the client computer can deploy and connect a thin host on the computer to verify the success of tasks that were performed while using the recovery environment.

Mapping a network drive in the recovery environment

The following information applies only if you started networking services when you start the recovery environment. If you attempt to boot directly into the recovery environment when there is no DHCP server (or the DHCP server is down), you will be prompted to enter a static IP address and a subnet mask address for the computer on which you are running Symantec Recovery Disk. After the static IP address and subnet mask address are correctly entered, you will be able to enter the recovery environment. However, because there is no way to resolve computer names, when you run the System Restore Wizard or the Recovery Point Browser, you will only be able to browse the network using IP addresses to locate a recovery point. To resolve this issue, you can map a network drive.

128

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

To map a network drive in the recovery environment

1 2

In the recovery environment main window, click the Network pane, and then click Map a network drive. Map a network drive using a UNC path of the computer where the recovery point is located. For example: \\computer_name\share_name or \\IP_address\share_name You will now be able to browse to that drive mapping and select a recovery point that you want to restore.

Editing the boot.ini file

If necessary, you can edit the boot.ini directly from the recovery environment. The boot.ini is a Microsoft initialization file that is found at the root directory of your primary boot partition (usually the C:\ partition). The file is used by Microsoft Windows to display a menu of operating systems that are currently installed on a computer. You can then select which operating system to boot. The boot.ini is also used to point to the locations of each operating system on the computer. For more information about editing the boot.ini file under a particular Windows operating system, refer to the following Microsoft Knowledge Base article IDs on microsoft.com:

289022 (for Windows XP) 311578 (for Windows 2000)

To edit the boot.ini file

1 2 3

In the recovery environment main window, click Utilities. Click Edit Boot.ini File to open the file in a plain text editor. Make the changes you want and save the file.

Getting a static IP address

If you are trying to restore a recovery point that is located on a network drive/share, but you are unable to map a drive or browse to the drive/share on the network (usually caused by the lack of an available DHCP service), you can assign a unique static IP address to the computer that is running the recovery environment. You can then map to the network drive/share. The Network Configuration dialog is automatically displayed if there is no DHCP service available when you start the recovery environment. However, if it does not display, you can open it from the recovery environment.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

129

To display the Network Configuration window

In the recovery environment main window, click the Network pane, and then click Configure Network Connection Settings. If you are prompted to start networking services, click Yes.

To get a static IP address

1 2

In the list box of the Network Configuration window, click IP Address 1. In the Network Adapter Configuration dialog, specify a unique IP address and subnet mask for the computer you are restoring. Be sure that the subnet mask matches the subnet mask of the network segment.

3 4 5

Click OK, and then click Close to return to the recovery environment main menu. From the Network panel, click Ping a Remote Computer. Specify the address of a computer you want to ping on the network segment using one of the following address methods. (Usually it will be the computer that holds the backup image you are wanting to restore.)
Computer name Specify a computer name if you use the domain or workgroup to resolve computer names. For example, computersb Computer name or domain Specify a computer name or domain if you are using an Active Directory domain to resolve computer names. For example, computersb.domain.com IP address Specify an IP address if there is no computer name resolution available on the segment. For example, 12.345.67.890

Click OK. If you specified a computer name or computer name and domain as the address method, make note of the IP address that is returned from the computer you are pinging. See Getting a static IP address on page 128. If communication to the storage computer is operating as expected, you can use the Map a Network Drive utility to map a drive to the recovery point location.

130

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

To get an IP address if the ping is unsuccessful

1 2 3

On the computer that holds the recovery point you are wanting to restore, at a DOS prompt, type ipconfig /all and press Enter. Write down the IP address that is displayed. Return to the computer that is running the recovery environment and run the utility Ping Remote Computer using the IP address you wrote down.

To map a network drive

1 2 3

In the recovery environment main window, click the Network pane, and then click Map a network drive. In the Drive drop-down list, select a drive letter. In the Folder text box, type the IP address of the storage computer and the share where the recovery point is located. For example: \\IP_address\share_name\

4 5 6 7

Click Connect using a different user name. In the User name box, type the IP address and username. For example: IP_address\user_name In the Password text box, type the username password. Click OK. You should now have a drive mapped to the recovery point location on the storage computer.

Server clusters and restoring

When you are working with a server cluster, none of the servers shared hard drives can be online during a restore from the recovery environment. Therefore, when you need to restore a volume to a computer that is part of the cluster, make sure that all other servers in the cluster have exclusive rights to the shared storage; take all shared hard drives in the cluster offline, and then perform the restore using the System Restore Wizard.

Workgroups and restoring

To mount computers located in other workgroups or domains while running under Symantec Recovery Disk, you must already have WORKGROUP present on the network and it must already be authenticated to the domain by mapping the drive so the WORKGROUP server is able to share across the network.

Troubleshooting Symantec LiveState Recovery Troubleshooting Symantec LiveState Recovery

131

Use of a delayed apply with no DHCP

If there is no DHCP service available and you have stored your backup images to a network drive, a delayed apply will not work because the computer name cannot be resolved to the IP address. To work around this issue, you can boot directly into the recovery environment and restore the backup image from there using a static IP address.

Restoration of a recovery point in a workgroup environment

When you use Symantec LiveState Recovery in a workgroup environment (such as a small office/home office) that is not part of a network domain, you will typically not have a DHCP, DNS, or WINS service to manage the assignment of dynamic IP addresses. Instead, you would most likely have a static IP address assigned to each computer. Not having a dynamic IP address is not a problem when you want to restore a recovery point while running under the recovery environment. For example, suppose you have a small office workgroup environment with two computers. You would make sure that both computers have the same login username and password. When you want to restore computer 1 using a backup image that is stored on computer 2, you boot into Symantec Recovery Disk on computer 1, map a network drive to computer 2, browse to the recovery point (or a file within the recovery point if you are using the Recovery Point Browser), and then restore as usual. If you are using a delayed apply, you will be prompted for the username, password, and domain name. This is because computer 1 is trying to authenticate to computer 2 where the recovery point is stored. You will need to enter the workgroup name for the domain name or IP address for computer 2.

Restoration of a DHCP server

You cannot restore a DHCP server from a recovery point that is stored on the network. This is because the recovery environment must get an IP address from the DHCP server. If the computer you are restoring is the DHCP server from which the recovery environment is trying to get a dynamic IP address, the task will be unsuccessful. Specify a static IP address manually.

Getting help for volumes on Windows

For more information about basic and dynamic volumes, see the Microsoft Disk Management Help file (DISKMGMT.CHM). The default location for this Microsoft

132

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

help file is \WINNT\HELP (under Windows 2000 Advanced, 2000, or NT 4), or \WINDOWS\HELP (under Windows 2000 Professional or Windows XP Professional).

Troubleshooting error messages

If the information you need is not included here, visit sea.symantec.com for further details.

See Recovery Point Browser error messages on page 132. See General error messages on page 133.

Recovery Point Browser error messages

Table A-2 describes errors that you may encounter while using the Recovery Point Browser, and how to resolve those errors. Table A-2 Error
Cannot initialize COM library

Recovery Point Browser error messages Description

Symantec LiveState Recovery was unable to initialize the COM subsystem. This can be caused by insufficient resources or corrupt DLLs. Restart the system, and try to free system resources.

Cannot allocate Symantec LiveState Symantec LiveState Recovery was unable to allocate Recovery mount manager instance resources for the Symantec mount manager. This error is usually reported when Symantec LiveState Recovery is partially installed or some of Symantec LiveState Recoverys COM objects are missing or incorrectly registered. To correct this condition, reinstall Symantec LiveState Recovery. Cannot retrieve drive information The Symantec mount manager did not recognize the drive as a mounted recovery point. This error is most commonly reported when another process is attempting to dismount the drive. The error may also occur if the drive is corrupt. Close all disk management programs, and retry the dismount operation. If the problem persists, restart the computer to allow Windows to re-enumerate all mounted drives.

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

133

Table A-2 Error

Recovery Point Browser error messages (continued) Description

Cannot dismount drive. Please verify The Symantec mount manager was unable to the drive is not locked by another dismount the drive. process To resolve the error, make sure there are no open files on the drive and that the drive is not locked by another application.

General error messages

Table A-3 describes general error messages you may encounter while using Symantec LiveState Recovery and possible solutions. If you do not see an error message listed here, visit sea.symantec.com and search on the generated error code. Table A-3 Error
E0710007

General error messages Description

Cannot create a virtual volume image. If the error continues, run the recovery environment support utilities Display SME Disk Information and View Partition Information, obtain system information, and then contact technical support. Additional log files, such as .txt files from the Agent folder, may also be needed. See Using the support utilities on page 119.

E0B000C

This error may also display one of the following: Object BasicDisk SME~Computer~BgM896453 was in the saved state but is not in the current state Object MediaCommon:Sme~computer ~Pd1~M896453 was in the saved state but is not in the state

These two error messages could be caused by changes to the serial number. It could also be caused by the drive information reporting differently. If the restore was initially set up in Windows, but the computer was restarted in the recovery environment, try going through the System Restore Wizard in the recovery environment rather than going through the restore from the console in Windows. There could be a change in the drive information in Windows 2000 compared to the recovery environment. If the error continues to occur during the use of the System Restore Wizard from the recovery environment, you should contact Symantec Technical Support.

134

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

Table A-3 Error

E0BB001B

General error messages (continued) Description

Cannot lock volume \\volume_name because it contains the operating system or it has an active paging file. Symantec LiveState Recovery can back up operating system partitions and other partitions containing page files. This error is usually caused by a driver conflict with another application that may have control of the partition. Check for other applications that may have a lock on the drive and temporarily disable any suspected conflicting drivers, and then run Symantec LiveState Recovery again to create the recovery point.

E0BB0097

If the error occurs when attempting to restore an image to a partition, delete the partition first. If the error occurs when attempting to create an image of a partition, contact Symantec Technical Support. The saved initial state for applying changes does not match the current system state. You should try restoring using Symantec Recovery Disk. This error can also be caused by fiber channel devices. Disconnect the devices to confirm whether or not they are causing the problem. This error may also be caused by Emulex controllers. Occasionally there are phantom volumes or partition table errors that can cause this error.

E0BC000A

Contact Symantec Technical Support. E7D1001F This error can occur if you do not have the correct rights. However, it could also be caused by slow band width, dropped packets, or other network-related issues. Contact Symantec Technical Support. E926001F Run the Windows chkdsk utility on the source drive before you copy the image or you create a recovery point. If this is not possible, and you have confirmed that the recovery point is valid, you can bypass the error by deselecting the restore option Check file system after restore. Once you have finished restoring the image, run chkdsk on the drive to eliminate any file system errors.

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

135

Table A-3 Error

EA390019

General error messages (continued) Description

Insufficient permissions. Scenario: System A is the Symantec LiveState Recovery console; system B is the Symantec LiveState Recovery Agent service, and system C is the share where the recovery points are stored. The user who logs onto system A must have at least local administrator rights on system B if they are creating a recovery point. They also need rights to the share location where the recovery point is being stored, and will need domain user rights to save to the network. In a domain, it is suggested that you create one user with Domain Admins and Administrator rights. Use this account to login onto system A. On system B, the Symantec LiveState Recovery Agent service should be logging in using the same account. Determining when this error occurs may help identify where permissions are not set correctly. In a workgroup, it is suggested that you create duplicate accounts (using the same user name and password) on each computer. Make sure that each account has local administrator rights. Log on with this account when managing other agents in the workgroup.

136

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

Table A-3 Error

EA39070A

General error messages (continued) Description

If you are using Veritas DLA you may encounter this error indicating that the internal structure of the v2i file is invalid or unsupported. Despite this error, the recovery point on the disk is still valid. To correct this issue, you can use a regular CD or DVD drive to read the recovery point, or you can remove Veritas DLA from the computer so the CD can be properly read. This error can also occur for one of the following reasons:

If the recovery point is damaged or corrupted.

Damage can occur when you create a recovery point over a network and there is significant packet loss during the creation of the recovery point. Symantec recommends that you verify recovery points after they are created to ensure their integrity. Create a new recovery point to a different location, or create a new image with a different file name to the same location. The recovery point is fine, but there may be a conflict with spyware detection software (such as Pest Control or Spybot) causing the recovery point to become corrupt or appear to be corrupted. While using Symantec LiveState Recovery or the Recovery Point Browser, disable all spyware detection software. If you copy a recovery point from one FireWire drive to another FireWire drive while connected to a FireWire expansion card that uses a Via chipset (such as the Kouwell card). To work around this issue, replace your Via-based FireWire expansion card with a card that uses a non-Via chipset (such as the Adaptec 4300 Fireconnect, which uses a TI chipset). EA390712 This error is usually caused by insufficient rights to the Symantec LiveState Recovery Agent service. A user must have administrator and domain administrator rights on the sub-share folder. Check that the Symantec LiveState Recovery Agent services Log On information is correct.

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

137

Table A-3 Error

EBAB001A

General error messages (continued) Description

Cannot read data from drive. An unknown exception has occurred. This error is reported when you are attempting to save a recovery point to a SAN drive or removable media, or when you are attempting to restore a recovery point from the recovery environment. If you are saving a recovery point to a SAN drive, check Disk Management for missing or old volumes. If you are saving a recovery point to removable media, insert disks into the drive. If that does not work, disconnect the removable media drive and remove any attached USB devices. If you are using Samba shares be sure you have the basic rights on the Samba. If you are saving the recovery point to NAS, check the operating system that is installed; there may be an issue with Linux or with proprietary operating system NAS devices.

EC8A0001

This error is caused by updated firmware on QLogic drives conflicting with the QLogic driver on the Symantec LiveState Recovery CD. In other cases it could also be caused by any SCSI conflict with particular drivers on the Symantec LiveState Recovery CD. Try loading the driver manually. See You cannot access (or see) the local drive where your recovery points are saved on page 123. If the error continues, run the recovery environment support utilities Display SME Disk Information and View Partition Information, obtain system information, and then contact technical support. Additional log files may also be needed. See Using the support utilities on page 119.

EC8F0007

The error is usually caused by a driver conflict with another application that may have control of the partition. Check for other applications that may have a lock on the drive. Temporarily disable any suspected conflicting drivers and run Symantec LiveState Recovery again. Check that the driver is present, and the Symantec LiveState Recovery Agent service is started. This error occurs when the driver for the storage controller does not load in Symantec Recovery Disk. Restart the computer using Symantec Recovery Disk and press F6 to load the necessary drivers. This may be caused by a conflict with another program. Contact Symantec Technical Support.

EC8F000C

EC950001

Catastrophic error

138

Troubleshooting Symantec LiveState Recovery Troubleshooting error messages

Table A-3 Error

WinBOM error when booting from recovery environment

General error messages (continued) Description

This is an issue with the NIC (Network Interface Card) driver not loading. If the backup image you want to restore is located on the network, you should first try a different NIC card. If that is unsuccessful, you will need to send the drivers and a system information file to Symantec Technical Support.

The month and year are switched on This is an issue with some international servers. some international computers Send the .pqh files to Symantec Technical Support.

Appendix

Managing the Symantec LiveState Recovery Agent

This appendix includes the following topics:

Using the Symantec LiveState Recovery Agent Managing the agent using Windows Services Best practices for using services Controlling access to the Symantec LiveState Recovery Agent

Using the Symantec LiveState Recovery Agent

The Symantec LiveState Recovery Agent is the unseen engine that does the actual creating and restoring of recovery points on a computer using information provided by the console. Because the Symantec LiveState Recovery Agent functions as a service, it does not have a graphical interface. Managing the agent using Windows Services See Controlling access to the Symantec LiveState Recovery Agent on page 145. The Symantec LiveState Recovery Agent does, however, have a tray icon available from the Windows system tray to provide feedback of current conditions and to perform common tasks. For example, you can view backup jobs created for the computer, reconnect the Symantec LiveState Recovery Agent, or cancel a task that is currently running. To use the Symantec LiveState Recovery Agent

On the Windows system tray, do one of the following:

Hover over the Symantec LiveState Recovery tray icon to view the current condition of the Symantec LiveState Recovery Agent. If the service

140

Managing the Symantec LiveState Recovery Agent Managing the agent using Windows Services

indicates that it is not running, you will be unable to create recovery points. See Viewing events in Symantec LiveState Recovery on page 66.

Double-click the Symantec LiveState Recovery tray icon to open the console. Right-click the Symantec LiveState Recovery tray icon to display a quick menu of common Symantec LiveState Recovery Agent tasks.

Managing the agent using Windows Services

As a Windows service, the Symantec LiveState Recovery Agent runs in the background, providing such capability as locally running scheduled backup jobseven when no one (or an unprivileged user) is logged on to the computeror allowing administrators to remotely back up computers throughout an enterprise from Symantec LiveState Recovery Manager. See Using the Symantec LiveState Recovery Agent on page 139. To use the features of Symantec LiveState Recovery, the Symantec LiveState Recovery Agent must be started and properly configured. You can use the Windows Services tool to manage and troubleshoot the agent. Note: To manage the Symantec LiveState Recovery Agent, you must be logged on as a local administrator. Using the Services tool, you can manage the Symantec LiveState Recovery Agent in the following ways:

Start, stop, or disable the Symantec LiveState Recovery Agent on local and remote computers. See Starting or stopping the agent service on page 142. Configure the username and password used by the Symantec LiveState Recovery Agent. See Controlling access to the Symantec LiveState Recovery Agent on page 145. Set up recovery actions to take place if the Symantec LiveState Recovery Agent fails to start. For example, you can restart the Symantec LiveState Recovery Agent automatically or restart the computer. See Setting up recovery when the agent does not start on page 143.

Managing the Symantec LiveState Recovery Agent Best practices for using services

141

Best practices for using services

Table B-1 describes best practices for using services. Table B-1 Best practice Best practices for using services Description

Check the Events tab first before using The Events tab in the advanced view of the Services console should be the first place you check when tracking down the source of a problem, particularly when it is associated with the Symantec LiveState Recovery Agent. Selecting the most recent log entries in the Events tab will often give you information and clues as to what is causing the problem. Verify that the Symantec LiveState When the Symantec LiveState Recovery Agent is Recovery Agent is starting without user installed on a computer it is configured to start intervention automatically when the console starts. You may want to test this by opening the console to verify that the Symantec LiveState Recovery Agent is started without user intervention (the Status area in the Task pane of the console or when hovering the mouse pointer over the Tray icon will say Ready when the agent has successfully started). You can also test that the Symantec LiveState Recovery Agent is starting automatically by looking in Services and checking the status and restarting the service if necessary. If the Startup type is set to automatic, you should try starting the agent again. See Starting or stopping the agent service on page 142. Use caution when changing default settings for the Symantec LiveState Recovery Agent Changing the default Symantec LiveState Recovery Agent properties may prevent the console from running correctly. In particular, you should use caution when changing the default Startup type and Log On settings of the LiveState Recovery Agent because it is configured to start and (typically) log on automatically when you open the console.

142

Managing the Symantec LiveState Recovery Agent Best practices for using services

Opening Services
There are several methods you can use to open Services to manage the Symantec LiveState Recovery Agent. To open Services

Do one of the following:

On the Windows taskbar, click Start > Settings > Control Panel > Administrative Tools > Services . On the Windows XP taskbar, click Start > Control Panel > Performance and Maintenance > Administrative Tools, and then double-click Services. On the Windows taskbar, click Start > Run. In the Open text field, type services.msc, and then click OK.

Scroll the list of services until you see Symantec LiveState Recovery (the name of the agent) under the Name column. Its status should be Started. See Starting or stopping the agent service on page 142.

Starting or stopping the agent service

To start, stop, or restart the Symantec LiveState Recovery Agent service, you must be logged on as an administrator. (If your computer is connected to a network, network policy settings may prevent you from completing these tasks.) Some instances of when you may need to start, stop, or restart the Symantec LiveState Recovery Agent service include the following:

Start or Restart: If the console is unable to connect to the Symantec LiveState Recovery Agent on a computer or you cannot reconnect from the console by clicking Reconnect in the Task pane or Tray icon. Restart: You have just changed the username or password (or both) you use to log on to the Symantec LiveState Recovery Agent service, or you used the Security Configuration Tool to give additional users the ability to back up computers. See Controlling access to the Symantec LiveState Recovery Agent on page 145. Stop: If you believe the Symantec LiveState Recovery Agent may be causing a problem on the computer or you want to temporarily free memory resources. If you have created a job, note that stopping the Symantec LiveState Recovery Agent will prevent recovery points from being created at the scheduled times you specified.

Managing the Symantec LiveState Recovery Agent Best practices for using services

143

Warning: Stopping the Symantec LiveState Recovery Agent service will prevent you from creating or restoring recovery points from the console. If you stop the Symantec LiveState Recovery Agent service, and then start the console, the agent will restart automatically and the Status in the Task pane of the console or the Tray icon will indicate that it is Ready to perform a task. If you stop the Symantec LiveState Recovery Agent service while the console is open, you will receive an error message and the console will be disconnected from the agent. In most cases, you can click Reconnect from the Task pane of the console or from the Tray icon to restart the Symantec LiveState Recovery Agent. To start, stop, or restart the Symantec LiveState Recovery Agent service

In the Services window, in the Name column, click Symantec LiveState Recovery. See Opening Services on page 142.

Select one of the following:

Action > Start Action > Stop Action > Restart

Setting up recovery when the agent does not start

You can specify the computers response if the Symantec LiveState Recovery Agent fails to start. To set up recovery actions when the Symantec LiveState Recovery Agent fails to start

In the Services window, in the Name column, click Symantec LiveState Recovery. See Opening Services on page 142.

Click Action > Properties, and then click the Recovery tab.

144

Managing the Symantec LiveState Recovery Agent Best practices for using services

Select the action you want from the First failure, Second failure, and Subsequent failures drop-down lists.
Restart the Service Specify the number of minutes to pass before an attempt to restart the service is made. Specify a program to run. You should not specify any programs or scripts that require user input. Specify how long to wait before restarting the computer by clicking Restart Computer Options. You can also create a message that you want to display to remote users before the computer restarts.

Run a Program

Restart the Computer

In the Reset fail count after box, specify the number of days that the Symantec LiveState Recovery Agent must run successfully before the fail count is reset to zero. When the fail count is reset to zero, the next failure triggers the action set for the first recovery attempt. If you want the Symantec LiveState Recovery Agent to run correctly for several weeks between failures, you should specify a large number.

Click OK.

Viewing Symantec LiveState Recovery Agent dependencies

The Symantec LiveState Recovery Agent depends on other required services to run properly. If a system component is stopped or is not running properly, dependent services can be affected. If the Symantec LiveState Recovery Agent fails to start, check the dependencies to ensure that they are installed, and that their Startup type (as identified in the General tab) is not set to Disabled. The top list box on the Dependencies tab displays services that are required by the Symantec LiveState Recovery Agent to run properly. The bottom list box does not have any services that need the Symantec LiveState Recovery Agent to run properly. Table B-2 lists the three services that are required by the Symantec LiveState Recovery Agent to run properly, along with their default Startup type setting (as listed in the General tab).

Managing the Symantec LiveState Recovery Agent Controlling access to the Symantec LiveState Recovery Agent

145

Table B-2 Service

Event Log

Required services Startup type

Automatic Automatic Automatic

Logical Disk Manager Remote Procedure Call (RPC)

To view Symantec LiveState Recovery Agent dependencies

From the Services window, under the Name column, select Symantec LiveState Recovery. See Opening Services on page 142.

Click Action > Properties, and then click the Dependencies tab.

Controlling access to the Symantec LiveState Recovery Agent

You can use the Security Configuration Tool to allow or deny users and groups the necessary rights and permissions to use the Symantec LiveState Recovery Agent (or console) from the console or Tray icon. Table B-3 describes the permissions that can be allowed or denied for user and groups in using the Symantec LiveState Recovery Agent. Table B-3 Help option
Full Control

Permission options Description

Users or groups can control (start, stop, restart) the Symantec LiveState Recovery Agent from the console or Tray icon. (Controlling the agent determines whether users or groups can manage backup jobs.) By default, the Administrators group has full control permissions. Users or groups can get status information of the Symantec LiveState Recovery Agent. By default, the Users group has status only permissions.

Status Only

A deny setting takes precedence over an inherited allow setting. For example, a user that is a member of two groups is denied permissions when specified settings

146

Managing the Symantec LiveState Recovery Agent Controlling access to the Symantec LiveState Recovery Agent

for one group denies permissions even though another group allows permissions. User denied permissions override group allow permissions. Note: After changing security configurations, the Symantec LiveState Recovery Agent must be restarted. See Starting or stopping the agent service on page 142. See Managing the agent using Windows Services on page 140. To add additional users and groups

1 2 3 4 5 6 7 1 2

On the Windows taskbar, click Start > Programs > Symantec LiveState Recovery > Security Configuration Tool. Click Add. In the Select Users or Groups dialog box, click Advanced. If necessary, click Object Types to select the types of objects you want. If necessary, click Locations to select the location you want to search. Click Find Now, select users and groups you want, and then click OK. Click OK when you are finished selecting users and groups.

To change permissions for a user or a group On the Windows Start menu, click Programs > Symantec LiveState Recovery > Security Configuration Tool. In the Permissions for Symantec LiveState Recovery dialog box, select the user or group whose permissions you want to change, and then set the permissions:

To set Full Control permissions, click Allow or Deny for the selected user or group. To set Status Only permissions, click Allow or Deny for the selected user or group.

3 1 2 3

Click OK when you are finished.

To remove a user or group On the Windows Start menu, click Programs > Symantec LiveState Recovery > Security Configuration Tool. Select a user or group you want to remove, and then click Remove. Click OK when you are finished.

Managing the Symantec LiveState Recovery Agent Controlling access to the Symantec LiveState Recovery Agent

147

Running the console using different user rights

If the permissions for a user are insufficient for running the console, you can use the Run As feature in Windows to run the console using an account that has sufficient rights, even if you are not currently logged in with the account. To perform Run As from Windows XP

1 2 3 4 5 1 2 3 4 5

On the Windows taskbar, click Start > Program Files > Symantec LiveState Recovery. Right-click LiveState Recovery Advanced Server (or LiveState Recovery Standard Server), and then click Run As. Click The following user to log onto the console using another account. Type the account name and password that you want to use in the User Name and Password text fields. Click OK.

To perform Run As from Windows 2000 Professional On the Windows taskbar, click Start > Program Files > Symantec LiveState Recovery. Press Shift and right-click LiveState Recovery Advanced Server (or LiveState Recovery Standard Server). Click Run As. Click Run the program as the following user to log on to the console using another account. Do one of the following:

Type the account name, password, and the domain that you want to use in the User name, Password, and Domain text fields. If you want to use the Administrator account on the computer, type the name of the computer in the Domain text field. If you want to run as a domain administrator, type the name of the domain in the Domain text field.

Click OK.

148

Managing the Symantec LiveState Recovery Agent Controlling access to the Symantec LiveState Recovery Agent

Appendix

About Active Directory

This appendix includes the following topics:

The role of Active Directory

The role of Active Directory

When protecting a domain controller with Symantec LiveState Recovery, be aware of the following:

If your domain controller is Windows 2003 Server, it supports VSS. LiveState Recovery will automatically call VSS to prepare the Active Directory database for backup. In cases where the domain controller is running on a Windows 2000 server without VSS support, the Active Directory database must be backed up using NTbackup prior to using LiveState Recovery to protect the full system. This process can be automated using an external command that is called by LiveState Recovery. When configuring a job, you have the option to enter external commands. This provides a simple process for protecting domain controllers that do not support VSS. Every domain controller must negotiate a trust token with other domain controllers to participate on the domain. This token is refreshed every 30 days by default. This time frame can be changed, and is referred to as a secure channel trust. If a recovery point is offline at the time that a new trust token is established, that recovery point will not be restored, and consequently, will not participate on the domain. In the latest version of Symantec LiveState Recovery, this trust token can be reestablished without having to rejoin the domain. In most cases, domain controllers should be restored non-authoritatively. This will prevent outdated objects in the Active Directory from being restored. Outdated objects are referred to as tombstones. Active Directory will not restore data older than the limits it sets. Restoring a valid image of a domain controller

150

About Active Directory The role of Active Directory

is the equivalent of a non-authoritative restore. To determine which type of restore you want to perform, please refer to the Microsoft documentation. A non-authoritative restore will prevent tombstone conflicts. For additional details about protecting non-VSS aware domain controllers, see the white paper titled "Protecting Active Directory," located on the Web. http://sea.symantec.com/protectingdc You can also refer to the Symantec Knowledge Base http://www.symantec.com/techsupp/lsidc

Glossary

Active Directory

The directory service that stores information about objects on a network and makes this information available to users and network administrators. Active Directory gives network users access to permitted resources anywhere on the network using a single logon process. It provides network administrators with an intuitive, hierarchical view of the network and a single point of administration for all network objects. See recovery point. The complete recovery of a computer after a catastrophic hard disk failure. It includes the restoration of the operating system, file system, partitions, volumes, and data, from a complete recovery point. A hard disk that can be accessed by DOS and Windows. Basic disks can have up to four primary partitions, or three primary partitions and one extended partition. Within an extended partition you can create unlimited additional subdivisions called logical partitions. The smallest allocation unit in the FAT, FAT32, and NTFS file systems. One cluster consists of a fixed number of disk sectors. Restoring an operating system partition by starting the restore in the console (using the Restore Drive Wizard), and then finishing the restoration after booting into the recovery environment. An alternate method is to boot into the recovery environment and use the System Restore Wizard to perform the restoration. A request by the software for exclusive use of a selected drive before making any modifications to the file system of the hard drive. By locking down a drive, you prevent other software programs from changing the file system while the product is trying to change it. This ensures that any data on the drive is current and accurate at the time of restoration. A hard disk that contains volumes (or drives) that span multiple hard disks. Dynamic disks, which are managed by Windows Disk Management tool, do not contain partitions or logical drives and cannot be accessed by DOS. A special kind of primary partition that was developed to overcome the fourpartition limit. The extended partition is a container inside of which you can create logical partitions. The extended partition itself does not hold any data, nor is it assigned a drive letter. But logical partitions inside the extended partition can hold applications and data and are assigned drive letters.

backup image bare metal recovery

basic disk

cluster

delayed apply

drive lock

dynamic disks

extended partition

152

Glossary

hot backup

A recovery point aken in real-time without interrupting system operation on the computer. The restoration of a recovery point while the computer remains up and running. You can perform hot restores of data or applications with Symantec LiveState Recovery. Performing a hot restore of an operating system partition is not available. (See delayed apply.) Recovery point set consisting of a base recovery point (.v2i) and incremental recovery points (.iv2i). Incremental recovery points contain a snapshot of the sectors that have changed on a drive since the base recovery point or the last incremental was taken. Incremental recovery points are faster to create and require less drive space than full recovery points, so they are useful if you want to back up your drive more often without using a lot of time or drive space. Incremental recovery points can also be consolidated. When you restore a drive (or files and folders) to a point in time, the base recovery point and the incrementals up to that point in time are used for the restore. For example, if you took a base recovery point on Friday night and an incremental recovery point on Wednesday morning, later you could restore files, folders, or an entire drive from the base and incrementals. To restore the recovery point, the base recovery point and all the incrementals in the recovery point set must be in the same directory and should not be deleted. An index file that is saved as part of a recovery point set to ensure that the base recovery point and the incrementals are correctly associated with one another. The .sv2i file must be in the same directory as the .v2i and .iv2i files to ensure that recovery points can be restored. See incremental recovery points. a) A contiguous area inside an extended partition that can be used by the operating system to store and retrieve files. The operating system typically assigns a letter (for example, D:, E:) to the logical drive. b) Any partition, CD, or other storage device that contains a file system and is assigned a drive letter.

hot restore

incremental recovery point

index file

iv2i logical partition

mount a volume

The ability to see and use a volume within a recovery point that is physically located somewhere else on the network. The volume has a drive letter assigned to it, so it looks like it is a part of the local computer system. Though a mounted volume is read-only, you can open files and folders, scan for viruses, and even run some executables from within a mounted volume. A partition referenced in the master boot record (MBR) partition table. Only four primary partitions can exist on a hard disk. One of these may be an extended partition. Only one primary partition on a drive may be active at a time. When one primary partition is active, the other primary partitions are typically not

primary partition

Glossary

153

accessible. Data and programs are often placed on a logical partition inside an extended partition. This enables the data to be accessed by all primary partitions.
protect drive

Protecting a drive means the drive is placed under the full-time protection of the agent. When you protect a drive, you are specifying a schedule for creating consistent recovery points, the recovery point storage location, and any backup storage options you want. See Symantec Recovery Disk. An exact copy of a drive (either containing data or the operating system) that is usually compressed and stored as a file. Both full recovery points (used stand-alone) and baseline recovery points (used with incremental backups) have a .v2i (Virtual Volume Image) file extension. The recovery point includes all the data (operating system, applications, data, and settings) needed to restore the drive to the state it was in when the backup was performed. Recovery points are what you use to restore files and folders or an entire drive. In legacy editions, a recovery point was also known as an image, backup, or backup set. You can view the contents of a recovery point using the Recovery Point Browser. If you use a base recovery point and incrementals to back up a drive, the combination of the base recovery point and incrementals is called an recovery point set. When you restore to a given point in time, the base recovery point and all the incrementals taken up to that point in time are used for the restore. It is important that all the files in a recovery point set (the base recovery point and all the incrementals) are in the same directory. If any piece is missing, the backup is invalid and you will not be able to restore the data. A computer that is physically located somewhere else on a network but is accessible from a local computer. A program, routine, or process that performs a specific system function to support other programs, particularly at a low (close to the hardware) level. The Symantec LiveState Recovery agent is an example of a service. See index file. the minimal functionality needed to access recovery points on your network and restore them. This environment is typically used when a drive cannot be restored from within Windows or when the computer has suffered a catastrophic failure and you need to restore the entire hard drive. The Symantec LiveState Recovery CD is used both to install the software and to boot a computer into the recovery environment, known as Symantec Recovery Disk. Be sure you store the CD in a safe place.

recovery environment recovery point

recovery point set

remote computer

service

sv2i

Symantec Recovery Disk A graphical, secondary boot environment (or operating system) that gives you

154

Glossary

UNC (Universal Naming A method used to identify folders, files, and programs on a network computer. A Convention)

UNC path begins with two backslashes \\ and is followed by the computer name, the share name, and usually the directory and/or the filename. For example, \\computer_name\share_name\recovery_point_name.v2i

.v2i

See recovery point.