PCs Backup software that can isolate backup destination to protect from Ransomware virus.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Any of these solutions will work on physical installations or virtual ones. We just make the assumption that you are running a virtual environment.
He said it was for PCs in the original post. I figured he was talking physical desktops (or laptops). People don't tend to call servers PCs, even though they are too. I was assuming physical in every response.
Yes, only for physical desktop computers I am looking now.
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
I would like to ask you, with what would you suggest based on my requirements mentioned in my Post ?
I really think that Veeam Endpoint Backup is likely the way to go. As @JaredBusch pointed out, the risk of compromise through ransomware, while important to consider, does not exist today and planning around it is foolish. If you are backing up to NAS, just snapshot to protect against that. The product is commercial, enterprise and completely free and that's not going to change in any reasonable future.
Use PDQ Deploy and you can roll it out quickly and easily to your entire fleet without needing Active Directory.
I see, so two things coming to my mind 1. Urbackup or 2. Veeam Free with NAS (which should have snapshot facility. But still stuck at central mgmt, don't know if backup is working or failing
-
@openit Could be ok once Veeam launches Central Mgmt by next year, so this Central mgmt from going to have good control to manage or just to monitor ?
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
I would like to ask you, with what would you suggest based on my requirements mentioned in my Post ?
Use PDQ Deploy and you can roll it out quickly and easily to your entire fleet without needing Active Directory.
Is that PDQ Deploy Free is going to do trick for us while we are being in Workgroup ?
-
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
We do have file server on Windows server and users have been given access on and working with. But the issue is with CAD files they work, even do not suggest them to work directly on shared folder which take the performance down, so now they have working data (which is important).
Now, your question will be if you have Windows Server, why network is not in domain, and my answer is "so many computers are Home Edition", working on to make all Professional Edition.
-
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
While I agree with this, the OP asked for a specific solution. He didn't say... How do I make sure I don't loose any data from my end user PCs?
Additionally, we just learned that he doesn't have the PCs attached to a domain. This means there is a likelihood that he doesn't have a shared admin credential over all machines ( but it's possible he does), also he's missing out on things like GPOs.
I do have admin account on all workstations with same credentials. Yeah, missing out GPOs.
-
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
I would like to ask you, with what would you suggest based on my requirements mentioned in my Post ?
I really think that Veeam Endpoint Backup is likely the way to go. As @JaredBusch pointed out, the risk of compromise through ransomware, while important to consider, does not exist today and planning around it is foolish. If you are backing up to NAS, just snapshot to protect against that. The product is commercial, enterprise and completely free and that's not going to change in any reasonable future.
Use PDQ Deploy and you can roll it out quickly and easily to your entire fleet without needing Active Directory.
OK so he can deploy it easily, but can he configure it easily? Or will he still have to touch every machine to configure the backups and the destination?
That's painful
-
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
It is good to step back and ask.... is backup of endpoints really needed? Have you considered addressing the need to back up endpoints?
As I said in latest post, even though we have file server, users required to work on local pc due to CAD things, because of performance reasons, so if users have data on local pc, it's important.
-
@scottalanmiller @Dashrender
As mentioned above in my latest post, users got to keep data in local pcs for performance reasons. -
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
We do have file server on Windows server and users have been given access on and working with. But the issue is with CAD files they work, even do not suggest them to work directly on shared folder which take the performance down, so now they have working data (which is important).
Now, your question will be if you have Windows Server, why network is not in domain, and my answer is "so many computers are Home Edition", working on to make all Professional Edition.
If the business is running Home Edition licenses of Windows, you have bigger issues. You know you can't implement AD on Home, so you'd have to upgrade those to professional (or beyond).
I'm assuming the Windows licensing is adhered to the computers, which means you can't move it from device to device (legally). So you have a few choices, purchase a MAK license, and re-image and upgrade each user system to Windows Professional.
Or try your hand at a linux distro, and see if all of your software is functional on said linux distro.
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
While I agree with this, the OP asked for a specific solution. He didn't say... How do I make sure I don't loose any data from my end user PCs?
Additionally, we just learned that he doesn't have the PCs attached to a domain. This means there is a likelihood that he doesn't have a shared admin credential over all machines ( but it's possible he does), also he's missing out on things like GPOs.
I do have admin account on all workstations with same credentials. Yeah, missing out GPOs.
And a massive security hole in the organizations computer systems. . . .
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
I would like to ask you, with what would you suggest based on my requirements mentioned in my Post ?
Use PDQ Deploy and you can roll it out quickly and easily to your entire fleet without needing Active Directory.
Is that PDQ Deploy Free is going to do trick for us while we are being in Workgroup ?
It will work for a lot of things, as long as you have an Admin account on all the workstations (I see that you said above you do).
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Dear all,
Looking for backup software for Windows environment with following requirements:
-
Software that can isolate backup destination to protect from ransom-ware so that PC got infected will not effect backup target.
-
Software can take snapshot or system image.
-
Of course schedule backup and data retention option.
-
Centralized Management.
-
Good price, of course:)
The backup destination will be NAS box and we got around 100 PCs.
I prefer perpetual(one time payment) license.
Thanks all !
So above is your original post. Lets bullet out what you want and need.
-
Backup isolation. Every centrally managed backup solution can do this, with detatched storage from the host/server. UrBackUp does this and is free. (There is a paid support version as well)
-
Most solutions can do this, and offer a ISO to reinstall from the last image taken. UrBackUp also does this, and is offered for free.
-
Any backup solution worth paying for has scheduling and retention. UrBackUp has this.
-
UrBackUp runs from a server, and has a Web Console so while centrally managed, the jobs can be viewed from any system with access to the web server address.
-
UrBackUp has both free, and paid options.
Very nice response.
Especially about isolation point, which I don't have any idea about Backup Server.
I should have a look at UrBackUp and may go for paid one if requires (not sure if paid one is again perceptual or subscription).If the yearly price is nearly the same, who cares?
Look at O365. When you look at the surface numbers, it looks like it is very expensive, and E1 plan $8/month ($96/yr) per employee. But when you look at the cost of a server, a Windows license, Exchange license, Exchange CALs, management costs, UPS ,spam filtering, backup solution, etc - when you really start looking at all of the costs break down, O365 starts looking very palatable. -
-
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
We do have file server on Windows server and users have been given access on and working with. But the issue is with CAD files they work, even do not suggest them to work directly on shared folder which take the performance down, so now they have working data (which is important).
Now, your question will be if you have Windows Server, why network is not in domain, and my answer is "so many computers are Home Edition", working on to make all Professional Edition.
Sigh - I fired a client year ago because they didn't want to buy Windows Pro licenses. Over the life of the machine, the extra $100 added $2/month to the cost. Considering the benefits they get, that cost is very worthwhile.
I hope you're able to get the company to upgrade. 100 PCs - you should definitely have some sort of central administration component - well.... unless you're a BOYD shop, then you just provide a portal type access (i.e. Citrix NFuse, or whatever the current name is). -
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@scottalanmiller said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
It is good to step back and ask.... is backup of endpoints really needed? Have you considered addressing the need to back up endpoints?
As I said in latest post, even though we have file server, users required to work on local pc due to CAD things, because of performance reasons, so if users have data on local pc, it's important.
Is this a real thing though? I've worked with CAD shops in the past and they stored everything on the server. I don't recall if the CAD program downloaded the entire file to a local scratch area, allowed work, then when saved, pushed it back to the server OR if the user had to download the file manually first, update it, then re upload it. In any case, I would think that either of these situations would be a better solution instead of backing up each end point separately.
I'm guessing management hasn't seen an issue where John is working on a set of plans, is off for a day and someone else needs to pull those plans up? Or is that problem just hidden from them because they call you when they need to access someone else's computer and files?
-
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
We do have file server on Windows server and users have been given access on and working with. But the issue is with CAD files they work, even do not suggest them to work directly on shared folder which take the performance down, so now they have working data (which is important).
Now, your question will be if you have Windows Server, why network is not in domain, and my answer is "so many computers are Home Edition", working on to make all Professional Edition.
If the business is running Home Edition licenses of Windows, you have bigger issues. You know you can't implement AD on Home, so you'd have to upgrade those to professional (or beyond).
I'm assuming the Windows licensing is adhered to the computers, which means you can't move it from device to device (legally). So you have a few choices, purchase a MAK license, and re-image and upgrade each user system to Windows Professional.
Starting with Windows Vista, one could purchase a key that would "upgrade" a version from Home to Pro - no reinstall required.
Or try your hand at a linux distro, and see if all of your software is functional on said linux distro.
He's a CAD shop - are there many Linux friendly CAD solutions?
-
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
While I agree with this, the OP asked for a specific solution. He didn't say... How do I make sure I don't loose any data from my end user PCs?
Additionally, we just learned that he doesn't have the PCs attached to a domain. This means there is a likelihood that he doesn't have a shared admin credential over all machines ( but it's possible he does), also he's missing out on things like GPOs.
I do have admin account on all workstations with same credentials. Yeah, missing out GPOs.
And a massive security hole in the organizations computer systems. . . .
Why is that? What makes this a larger hole than a domain admin account?
-
@Dashrender This is a real issue, mostly because of the configuration settings within the software.
Most of the CAD (AutoCAD etc) have a setting to download the files locally, and then update the source directory at save time. Along with keeping a local copy for recovery reasons.
Mostly though people fail to configure the software to use this.
-
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@Dashrender This is a real issue, mostly because of the configuration settings within the software.
Most of the CAD (AutoCAD etc) have a setting to download the files locally, and then update the source directory at save time. Along with keeping a local copy for recovery reasons.
Mostly though people fail to configure the software to use this.
While I've never seen a setting like that - in this type of situation that TOTALLY makes sense and solves the problem of performance.
-
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@DustinB3403 said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@openit said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@Dashrender said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
@BRRABill said in PCs Backup software that can isolate backup destination to protect from Ransomware virus.:
Hey why hasn't anyone tried talking the OP out of doing this? You know, the whole "no data on the PC" thing?
I feel hurt. LOL.
While I agree with this, the OP asked for a specific solution. He didn't say... How do I make sure I don't loose any data from my end user PCs?
Additionally, we just learned that he doesn't have the PCs attached to a domain. This means there is a likelihood that he doesn't have a shared admin credential over all machines ( but it's possible he does), also he's missing out on things like GPOs.
I do have admin account on all workstations with same credentials. Yeah, missing out GPOs.
And a massive security hole in the organizations computer systems. . . .
Why is that? What makes this a larger hole than a domain admin account?
A domain admin account can have its password reset globally from 1 location, a local user admin account has to be touched on every system. And thus every system is susceptible to having local system files tampered / stolen etc etc with compromised local admin credentials.
