jump to navigation

Restoring File Shares from Tape Backup April 17, 2013

Posted by General Zod in Backup, Microsoft, Tech.

So last night I got a call from one of our SAN guys.  He had needed to upgrade the Volume Manager app on SERVER6, and proceeded to do what he needed to around 7pm.  After his upgrade, he noted that all of the File Shares had disappeared from SERVER6… so he called me looking for assistance.

Fantastic.  SERVER6 had about 30 different shares in various paths for various purposes… I had very little recall as to what those shares were and absolutely no documentation on it whatsoever.  (That’s a failure on my part.)  However, I needed to get it fixed by 8am.

I found the answer on Symantec’s website.  If you are using an alternate backup solution, you might be able to tweak this solution for your environment.  I consider myself extremely lucky because I’m leveraging NetBackup jobs which include backing up our servers’ System State.

OK, here’s what I did… by the numbers.

  1. Login to SERVER6.
  2. Create a folder to work out of.  I created one called C:\RESTORE.
  3. Open NetBackup, select the last Full Backup from my NetBackup History.
  4. In the “All Folders” pane, select “System State” to be restored.
  5. Click Action –> Restore.
  6. image On the “Restore Marked Files” window,…
    Select the “Restore individual folders and files to different locations” bullet.  Beneath this bullet is a field with a line of text which lists the “Source” as “System State” and no “Destination”.  Double-click this line, and change the Destination to the C:\RESTORE\ folder.  Also, under the Restore Options, select the “Overwrite existing files” bullet.  (I’ve no idea why, but it won’t work right unless you select that options.  Finally, click [Start Restore].

    After a few minutes, you’ll find that a file @… C:\RESTORE\Registry\SYSTEM.DAT

    Now here’s the part where you might start to get a little nervous, but fear not… it looks scarier than it actually is.  However, just in case…

    Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.

  7. Open REGEDIT.
  8. Highlight the “HKEY_LOCAL_MACHINE” key.
  9. image Click File –> Load Hive.  Then, point it at the C:\RESTORE\Registry\SYSTEM.DAT file.  You’ll be prompted for a Key Name.  I just used “Restore Reg”.
  10. OK… now drill down to the HKLM\Restore Reg\ControlSet001\Services\lanmanserver\Shares\ key.
  11. Highlight the “Shares” key and export it to a SHARES.REG file.
  12. Then, highlight the “Restore Reg” key that you’d imported; and click File –> Unload Hive.
  13. Now edit SHARES.REG in your favorite text editor.
  14. Perform a Find-and-Replace (Ctrl+H) to change any text that says “Restore Reg\ControlSet001” with “SYSTEM\CurrentControlSet”.  Then, re-save your SHARES.REG.


  15. Double-click your SHARES.REG file, and click [Yes] to all the import.
  16. Reboot SERVER6.


Once the server comes back online, you should discover that your file shares have been restored.



No comments yet — be the first.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: