8 Server 2016 Shadow Copy Best Practices

Shadow Copy is a feature of Windows Server 2016 that allows users to create point-in-time copies of files and folders. This feature is useful for backing up data, restoring deleted files, and recovering from system crashes.

However, Shadow Copy can also be a source of security vulnerabilities if not properly configured. In this article, we will discuss 8 best practices for using Shadow Copy on Windows Server 2016. We will cover topics such as setting up Shadow Copy, configuring security settings, and monitoring Shadow Copy performance.

1. Use the Shadow Copy Storage Area on a Separate Volume

When you use the Shadow Copy Storage Area on a separate volume, it helps to ensure that your data is safe and secure. This is because if something happens to the original volume, such as a disk failure or corruption, then the shadow copy will still be available for recovery. Additionally, using a separate volume also allows you to configure different settings for the shadow copy storage area, such as setting up quotas or limiting the amount of space used by the shadow copies. Finally, having the shadow copy stored on a separate volume can help improve performance since the system won’t have to access both volumes at the same time.

2. Do Not Store the Shadow Copy Storage Area on the System Drive

The Shadow Copy Storage Area is where the shadow copies of files are stored. If this area is on the same drive as the system, then it can be affected by any changes to the system or other applications running on the server. This could lead to corruption of the shadow copy data and cause problems with restoring files from a previous version.

By storing the Shadow Copy Storage Area on a separate drive, you ensure that it will not be affected by any changes to the system or other applications running on the server. This helps protect your data and ensures that you can restore files from a previous version if needed.

3. Enable Shadow Copies for Shared Folders Only When Necessary

Shadow Copies can take up a lot of disk space, and if you enable it for all Shared Folders on your server, then the amount of disk space used could quickly become unmanageable.

Therefore, it’s important to only enable Shadow Copies for those Shared Folders that need them. For example, if you have a folder with sensitive data that needs to be backed up regularly, then enabling Shadow Copies would be beneficial. However, if you have a folder with non-sensitive data that doesn’t need to be backed up, then there is no need to enable Shadow Copies.

4. Use Multiple Shadow Copies of Shared Folders to Preserve More Data

When you create a single shadow copy of a shared folder, it will only capture the data that was present at the time the shadow copy was created. If any changes are made to the files in the shared folder after the shadow copy is taken, those changes won’t be captured by the shadow copy.

By creating multiple shadow copies of the same shared folder, you can ensure that more of your data is preserved and protected. This way, if something happens to the original files, you’ll have multiple versions of the data stored in different shadow copies, giving you access to older versions of the data.

5. Set the Schedule for Creating Shadow Copies of Shared Folders

Shadow copies are a great way to protect your data from accidental deletion or corruption, but they can also take up valuable disk space.

By setting the schedule for creating shadow copies of shared folders, you can ensure that the system is only taking snapshots at times when it won’t interfere with other operations. This will help keep your server running smoothly and efficiently while still providing the protection you need. Additionally, you should make sure to regularly review the settings to ensure that the schedule is still appropriate for your environment.

6. Limit the Size of the Shadow Copy Storage Area

Shadow Copies are stored in the Volume Shadow Copy Service (VSS) storage area, which is a limited resource. If too much data is stored in this area, it can cause performance issues and even prevent backups from completing successfully.

To limit the size of the VSS storage area, you should set up a schedule to delete old shadow copies on a regular basis. This will ensure that only the most recent versions of files are being backed up, while freeing up space for new ones. Additionally, you should also consider setting up quotas to limit how much disk space each user or group can use for their shadow copies. By doing so, you can make sure that no single user or group consumes an excessive amount of resources.

7. Create and Restore Shadow Copies of Shared Folders Using PowerShell

Using PowerShell to create and restore shadow copies of shared folders allows you to automate the process, making it easier to manage. It also ensures that all changes are tracked and logged, so you can easily identify any issues or discrepancies. Additionally, using PowerShell for this task helps ensure that your backups are secure and reliable. Finally, it’s a great way to save time and resources since you don’t have to manually create and restore shadow copies.

8. Delete Unnecessary Shadow Copies of Shared Folders

Shadow copies are a great way to back up data, but they can take up a lot of disk space. If you don’t delete the unnecessary shadow copies, your server will eventually run out of storage space and become unstable.

To avoid this problem, make sure to regularly check for any unnecessary shadow copies of shared folders on your server. You can do this by using the Shadow Copy GUI in Server 2016 or by running the command line tool vssadmin list shadows. Once you’ve identified any unnecessary shadow copies, you can delete them with the command line tool vssadmin delete shadows.