Security Explorer 9.9


	NOTE: The Backup Scheduler is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Security, Exchange Security, and Active Directory modules.

To schedule a backup

Create the backup job. See Backing up security.

Type a name for the job in the Job Name box, and click Schedule.

The Schedule a Backup dialog box opens. Depending on if the backup job is local or remote, the appropriate option is selected.

Table 3. Backup options

Option

Description

Local Backups

If the backup paths are local, the Create single scheduled task on local machine check box is selected. The Job Name, Wildcard, and Backup Name carry over from the previous screen.

In the Account box, browse to locate an account under which to run the backup. If you do not enter an account, the backup runs under the local system account.

Remote Backups

If the backup paths are on remote computers, select Create separate scheduled task(s) on remote machine(s). The Job Name, Wildcard, and Backup Name carry over from the previous screen.

To create a scheduled task on remote computers

Double-click a job, or select a job, and click Edit. The Edit dialog box opens displaying the Job Name, Wildcard, and Backup Name from the previous screen.

Make any needed changes to the backup job.

In the Account box, browse to locate an account under which to run the backup.

To copy the changes to all remote scheduled jobs, click Copy to All. A warning box appears.

Click Yes to continue.

To set an auto-pause time for the backup task, select the Auto-Pause Time check box and set a time. The task will automatically pause at the time you set, and will automatically resume when the task runs again.

Click Schedule. The task is assigned the default run time of Weekly, every Monday at midnight.


	NOTE: To change the run time, edit the backup using the Backup Scheduler. See Using the backup scheduler. NOTE: Errors that occur during the task are captured in the Windows Event Log.

Using the backup scheduler

The Backup Scheduler provides a convenient place in which to create, edit, and delete backup jobs.


	NOTE: The Backup Scheduler is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Security, Exchange Security, and Active Directory Security modules. TIP: You can use the Scheduled Backups basic task to manage scheduled backups.

To use the Backup Scheduler to schedule a backup

Select Security | Backup Scheduler.

-OR-

Click

on the Tool Bar; or right-click an object, and choose Backup Scheduler.

The Backup Scheduler Task List box lists the currently defined backup jobs in ascending alphabetical order by computer name.

To sort the columns, click the column heading for ascending order and again for descending order.

To create a new backup job, click New. See Using the Browse tab to back up security.

Click Schedule.

Click Close.

Restoring security

You can restore your permissions from a backup file created by using the Backup function. You can restore some or all of the backup file. You can restore to multiple paths. Prior to initiating the restore process, you can verify the permissions against the current permissions.


	NOTE: The Restore function is available only in the NTFS Security, Share Security, Registry Security, SharePoint Security, SQL Server Security, Exchange Security, and Active Directory Security modules. TIP: You can use the Restore basic task to select a backup file to restore. After you locate the backup file and click OK, the Restore Security dialog box opens with the Backup File box populated.

To restore a backup file

Open the module that is associated with the object[s] you want to restore.

Open the Browse tab.

Select Security | Restore Security.

-OR-

Click

on the Tool Bar; or right-click an object, and choose Restore Security.

In the Backup File box, type the full path and name for the backup file, or click Load to locate a backup file. The contents of the backup file display in the left pane.

Expand the backup file and examine the contents. You can choose specific objects to restore by selecting the box next to the object. Use De-select all children and Select all children to help you select objects to restore.


	NOTE: When restoring from the Share Security, Registry Security, SharePoint Security, SQL Server Security, and Active Directory modules, the check boxes and the Advanced button are unavailable. The Restore to different paths check box is available in the SharePoint Security module. The Restore permissions check box is selected by default.

Table 4. Restore options
Option	Description
Show differences (folders and files only)	Applies to NTFS Security module only. Select to show the folders and files that have different permissions than the ones in the backup file. If you select this check box, a message box displays. If you click Yes to proceed, the backup file reloads. If the permissions for a folder or file are different than those in the backup file, the name displays in red in the tree. Any differences between the current permissions and the backed up permissions are highlighted in yellow. NOTE: To compare permissions of two folders, see Comparing security.
Include files when previewing backup	Applies to NTFS Security module only. Select to include files in the display. By default, only folders display. If you select this check box, the backup file reloads to display all the files. NOTE: Only select this check box if you are restoring a small number of individual files. If you are restoring a large number of objects, selecting this check box can slow the loading of the backup file.
Restore owner Restore permissions	Applies to NTFS Security module only. By default, both the owner and permissions are restored. Clear the appropriate check box for the item you do not want to restore.
Restore missing folders	Applies to NTFS Security module only. Select to recreate folders that are present in the backup file, but are no longer present in the destination path.
Restore SACL	Select to restore System Access Control List (SACL). Available only if SACL was included in the backup. See Backing up security.
Restore to different paths	Applies to NTFS Security, SQL Security, and SharePoint Security modules only. Select to restore the permissions to different paths. Browse to locate a path. Repeat to add additional paths if desired. Each path you select appears in the drop-down list. NOTE: If you want to restore to a single path, select the path from the drop-down list. When you click Restore, you can choose to restore to the path displayed in the box, or to all paths listed in the drop-down list. IMPORTANT: Applies to NTFS and SQL Security modules only. The alternate restore location must have the same structure as the backup file. IMPORTANT: Applies to SharePoint Security module only. If the alternate restore location does not have the same structure as the backup file, only the permissions for identical site items are restored. All other permissions are ignored.

Available only in the NTFS Security module. Click Advanced to set more options for the restore process. See Setting advanced options for the restore process.

Click Restore. See Completing a process.


	NOTE: If you selected to restore to a different path, you are asked if you want to restore to the selected path that displays in the box, or to all paths in the drop-down list.

Setting advanced options for the restore process

Available only in the NTFS Security module. On the Advanced Restore Settings dialog, you can filter the back up file to help you find permissions to restore. You also can select how the permissions are restored.

To set advanced options for the restore process

On the Restore Security dialog (see Restoring security), click Advanced to set more options for the restore process.

To help you find and select parts of the backup file to restore, you can filter the path and the accounts.


	NOTE: The Path Filter wildcards are applied to the selection first, and the Permission Accounts wildcard is applied second.

Filtering the path

Filter the path if the backup file is exceptionally large, say over 1,000,000 paths. If you try to load the full tree, the process could be slow, so you might want to load only the portion of the backup file that you plan to restore.

In addition to the default option of filtering all the paths, you can choose to apply the filters to root paths only. This option is useful if you have a large number of root paths in your backup, i.e., a flat list of paths. Alternatively, you can apply the filters to all paths except the root paths. This option is useful if you have a large backup in a more complicated tree-like structure.

You can use multiple wildcards, separated by commas. Use the * wildcard to match any number of characters. Use the ? wildcard to match a single character.

Table 5. Path wildcard examples
Selected Paths	Wildcard = *docs	Wildcard = test	Wildcard = *test?
Folder1 = c:\work	skipped	skipped	skipped
Folder2 = c:\work\docs	restored	skipped	skipped
Folder3 = c:\work\test	skipped	restored	skipped
Folder4 = c:\work\test1	skipped	restored	restored
Folder5 = c:\work\test2	skipped	restored	restored