File Server Backup and Shadow Copy: Restoring Files Quickly and Easily

The most common restore request in a company is not restoring an entire server. A user overwrote an Excel file, deleted a folder by mistake, or needs yesterday’s version of a contract. If every one of these requests means opening the backup software, the IT team loses time and the user has to wait. Windows Server has a feature that resolves many of these requests, often without IT getting involved at all.

What is Shadow Copy?

Shadow Copies of Shared Folders is a Windows Server feature, built on the VSS service, that takes point-in-time snapshots of a drive at scheduled times. Users can right-click a file or folder in a shared folder and, on the Previous Versions tab, open or restore the version from a few hours or days ago.

These snapshots store only changes, so they take relatively little space. The number of snapshots per drive is limited, and when the allocated space fills up, the oldest snapshots are deleted.

Step-by-step setup

1. On the file server, in File Explorer, right-click the drive that holds the shared folders and choose Configure Shadow Copies.
2. Select the drive and open Settings.
3. If possible, store the snapshots on a different drive to reduce write load on the main drive.
4. Set the space limit; more space means access to older versions.
5. Review the schedule. The default schedule is twice a day, Monday through Friday only, which may not match your company’s work week. Adjust the days, and consider times such as morning, midday and the end of the business day.
6. Click Enable, then check from a client that the Previous Versions tab shows the snapshots.

A very aggressive schedule, such as every few minutes, affects server performance and deletes older snapshots sooner. A few times a day is enough for most companies.

Why Shadow Copy is not a backup

• It lives on the same server, and usually the same disk; if the disk or server fails, it is gone.
• Ransomware typically deletes VSS snapshots before encrypting.
• The number and age of snapshots are limited, so it is no use for going back several months.

Shadow Copy is your “fast everyday restore” layer, and alongside it you need a real, separate backup.

Real file server backup

• Full server or VM backup: With software such as Veeam or Proxmox Backup Server, or Windows Server Backup for simple environments. This allows both full server restores and single-file restores.
• Preserve permissions: When restoring, the folders’ NTFS permissions must come back too; choose a method that keeps this information.
• Several times a day: If files change a lot, consider incremental backups several times a day.
• A copy off the server and offsite: Keep the backup on separate storage, and keep one copy outside the office.

Common mistakes

• Using a simple copy or robocopy /MIR as a backup. This also carries deletions and encrypted files over to the destination.
• Relying on Shadow Copy instead of a backup.
• Enabling Shadow Copy on a drive other than the one that actually holds the shared folders.
• Not teaching users about Previous Versions; they can resolve many requests themselves.

Checklist

• Shadow Copy is enabled and scheduled on the drive with the shared folders.
• The schedule’s days match the company’s work week.
• Enough space is allocated for several days of snapshots.
• Users know how to use Previous Versions.
• A real backup, separate from the file server and preserving permissions, is taken.
• Restoring a folder from backup is tested periodically.

Combining Shadow Copy for everyday requests with a real backup for crisis days makes your file server both convenient and safe. ITPlus724 engineers can implement and review both layers on your company’s file server.