Windows Server2003 Active Directory Fast Recovery with Volume Shadow Copy Service and Virtual Disk Service
Limitations to Tape Backups
Tape backups are time intensive and impact server performance, and therefore tend to be done
relatively infrequently (full backups are usually done only once a week). In addition to this
drawback, there are a number of other others, including:
A time intensive tape restore process.
A time intensive resynchronization process. The longer the tape restore process, the
greater the divergence between the shadow copies and the online Active Directory
server(s) that continue to write transactions to disk.
Decreased performance of the remaining Active Directory server(s) because it now
carries an increased workload.
Fast Recovery in Windows Server%2003
A highly effective alternative to traditional tape-based protection is to make point-in-time shadow
copies. Use of point-in-time shadow copies with Active Directory configurations allows rapid
recovery from a number of specific system problems, including:
Bad service pack installation.
A third party component, such as an application agent, filter driver, or device driver, that
has rendered the system unusable or unstable.
Corruption of the system registry.
A virus that has affected a system component.
Because this mirroring (or “cloning”) process is fast and non-disruptive to system performance,
shadow copies can be made more frequently than tape backups. Shadow copies kept locally on a
storage area network can be quickly accessed; with the appropriate hardware provider, they can
be transported to a backup server, backed up to tape, and sent to offsite storage for archiving.
With the Volume Shadow Copy Service and the Virtual Disk Service, Windows Server2003
contains new functionality to enable fast data restores, cutting restore time from the hours it can
take with tape backups to just minutes. Since the restore time is so much faster, correspondingly
fewer Active Directory changes can occur. This shortens resynchronization times considerably,
enabling the machine to return to production significantly faster.
Volume Shadow Copy Service
Volume Shadow Copy Service supports creation of high fidelity single point-in-time shadow
copies—also known as snapshots—of single or multiple volumes without impacting production
server performance. Used for managing data, from Direct Attached Storage (DAS) to Storage
Area Networks (SANs), Volume Shadow Copy Service coordinates with business applications,
backup applications, and storage hardware to enable application-aware data management.
Volume Shadow Copy Service also supports backups of open files.
Volume Shadow Copy Service coordinates the three software components necessary to create
full-mirror shadow copies for fast restores:
The utility that requests the creation of a shadow copy; also known as the “requestor.”
Application-specific software that acts to ensure that application data is ready for shadow
copy creation; also known as the “writer.” In this case, the writer is specific to Active
Directory and ships in-box with Windows Server2003.
The interface that provides the functionality to actually make the shadow copy; also
known as the “provider.” Volume Shadow Copy Service can create shadow copies by
using either the (in-box) software provider, or a third party vendor hardware provider.
In a shared storage SAN configuration where there is often the need to make the data of one
server accessible by another, a shadow copy of the original data can be transported “unmasked”
to another server for use. This solution requires a hardware provider with transport capabilities.
See details later in this paper.