This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
computing:backup:ahsay_group_policy [2014/07/16 10:25] gcooper |
computing:backup:ahsay_group_policy [2014/07/16 12:30] (current) gcooper |
||
---|---|---|---|
Line 18: | Line 18: | ||
http:// | http:// | ||
+ | ====== Notes ====== | ||
+ | http:// | ||
+ | |||
+ | http:// | ||
+ | |||
+ | http:// | ||
+ | |||
+ | http:// | ||
+ | |||
+ | < | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | \hiberfil.sys | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | \System Volume Information\MountPointManagerRemoteDatabase | ||
+ | \Pagefile.sys | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | \System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} | ||
+ | \System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817fd1bca}DB | ||
+ | \System Volume Information\*.{7cc467ef-6865-4831-853f-2a4817fd1bca}ALT | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | C: | ||
+ | </ | ||
+ | | ||
+ | | ||
+ | |||
+ | We created the following filters to apply to only Windows Backupsets. | ||
+ | |||
+ | Top level directory (left blank) | ||
+ | Apply to Files / Folders | ||
+ | |||
+ | < | ||
+ | (? | ||
+ | (? | ||
+ | </ | ||
+ | |||
+ | |||
+ | < | ||
+ | >>>> | ||
+ | |||
+ | • Name: Exclude [Memory Page File & Power Management] Files | ||
+ | o Top Directory: C:\ | ||
+ | o Apply To: File | ||
+ | o Type: Expression | ||
+ | o Pattern: hiberfil\.sys | ||
+ | pagefile\.sys | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [Recycler, Temp & System Volume Information] Files | ||
+ | o Top Directory: <Root of all Local Disk's | ||
+ | o Apply To: Directory | ||
+ | o Type: Expression | ||
+ | o Pattern: RECYCLER | ||
+ | Temp | ||
+ | Temporary Internet Files | ||
+ | System Volume Information | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | • Name: Exclude [WSUS] Files | ||
+ | o Top Directory: <Root of Local Disk> | ||
+ | o Apply To: Directory | ||
+ | o Type: Expression | ||
+ | o Pattern: WSUS | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | |||
+ | >>> | ||
+ | |||
+ | • Name: Exclude [Uninstall & SUS Client] Files | ||
+ | o Top Directory: C:\WINDOWS | ||
+ | o Apply To: Directory | ||
+ | o Type: Text - start with | ||
+ | o Pattern: $ExchUninstall* | ||
+ | $MSI31Uninstall* | ||
+ | $NtServicePackUninstall* | ||
+ | $NtUninstall* | ||
+ | SoftwareDistribution | ||
+ | o Filter Mode: Exclude Matched | ||
+ | |||
+ | • Name: Exclude [SYSVOL] Files | ||
+ | o Top Directory: C:\WINDOWS | ||
+ | o Apply To: Directory | ||
+ | o Type: Expression | ||
+ | o Pattern: SYSVOL | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | • Name: Exclude [Client Side Cache] Files | ||
+ | o Top Directory: C:\WINDOWS | ||
+ | o Apply To: Directory | ||
+ | o Type: Expression | ||
+ | o Pattern: csc | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [Netlogon] Files | ||
+ | o Top Directory: C:\WINDOWS | ||
+ | o Apply To: File | ||
+ | o Type: Expression | ||
+ | o Pattern: NETLOGON.CHG | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [ASR] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Expression | ||
+ | o Pattern: asr.err | ||
+ | asr.log | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | • Name: Exclude [Microsoft Writer (Bootable State)] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - ends with | ||
+ | o Pattern: crmlog | ||
+ | .clb | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | • Name: Exclude [NTDS] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | • Name: Exclude [NtFrs jet] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [Winlogon debug] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | |||
+ | >>> | ||
+ | |||
+ | |||
+ | • Name: Exclude [Catalog Database] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: Directory | ||
+ | o Type: Text - contains | ||
+ | o Pattern: CatRoot2 | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [DNS Server] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: dns.log | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | • Name: Exclude [MS Distributed Transaction Coordination] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Expression | ||
+ | o Pattern: MSDTC.LOG | ||
+ | dtctrace.log | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | • Name: Exclude [Certificate Authority] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | |||
+ | >>> | ||
+ | |||
+ | |||
+ | • Name: Exclude [BITS_metadata] Files | ||
+ | o Top Directory: C: | ||
+ | Data\Microsoft\Network\Downloader | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | |||
+ | • Name: Exclude [DRM] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Text - contains | ||
+ | o Pattern: *.* | ||
+ | o Filter Mode: Exclude Matched, Include all others | ||
+ | |||
+ | |||
+ | • Name: Exclude [Internet Explorer] Files | ||
+ | o Top Directory: C: | ||
+ | o Apply To: File | ||
+ | o Type: Expression | ||
+ | o Pattern: index\.dat | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | |||
+ | UNKNOWN - DO NOT USE | ||
+ | |||
+ | • Name: Exclude [SPAM] Files | ||
+ | o Top Directory: <Root of local disk> | ||
+ | o Apply To: File | ||
+ | o Type: Text – ends with | ||
+ | o Pattern: .EML | ||
+ | o Filter Mode: Exclude Matched only | ||
+ | |||
+ | OTHER--Anti-Virus Folders | ||
+ | BitDefender | ||
+ | Symantec | ||
+ | AVG | ||
+ | |||
+ | </ |