Tape backup permiss...
 
Notifications
Clear all

Tape backup permissions

3 Posts
3 Users
0 Likes
306 Views
Beetle
(@beetle)
Posts: 318
Reputable Member
Topic starter
 

Does anyone have any suggestion(s) for dealing with the following situation?

- we have six backup tapes from what appears to be a Windows server

- we can "see" the files after cataloging the tapes in NTBackup, but cannot restore the files because of "Media has been secured. You do not have the proper privileges." failure.

- we can see the file data in hex but if we just dump the tape with dd we aren't in a position to auto-carve as we don't know what software created most of the files which appear to be from Macintosh systems. We are considering pulling out the data by extracting between the file marks if we have to, but that will be a killer effort (3x72gb tapes and 3x40 gb tapes).

- it looks like the security on the tapes was set by an administator on a domain controller so joining the Backup group won't work.

I tried the demo of MM/PC which seemed (it doesn't extract the actual data just writes out 'MMPC demo' in the 'recovered' file) to be able to pull the files out but it costs $40,000 per year for a "universal" solution.

I know Sanderson Forensics had software for tapes at one time but it doesn't appear on their site anymore.

Any suggestions would be welcome.

 
Posted : 22/10/2009 12:53 am
(@roncufley)
Posts: 157
Estimable Member
 

I have sent you a pm

 
Posted : 22/10/2009 1:47 am
(@mscotgrove)
Posts: 938
Prominent Member
 

The MM/PC should have a log file that will show the files that could be recovered. It should also have a signature flag in the log for common file types.

eMag will also offer a bureau service.

The non native restoration approach does often overcome the security issues built into backup packages.

 
Posted : 22/10/2009 2:45 am
Share: