Skip to main content

 

Druva Documentation

Restricting backups and restores to user accessed folders

Overview

This process explains how to restrict backups and restores to only those folders to which the users have access to.

About secure backup and restore

In certain organizations, the same computer may be shared by two or more users. Each user will use their own credentials to log on to a computer. To prevent the users from accessing each other's data, folder restrictions are in place. Each user will have exclusive access to certain folders and common access to others.

As an administrator, you can ensure the security of user's data by applying the same folder restrictions when backing up or restoring data for a user. This is known as secure backups and restores. You can configure inSync to:

  • Backup data from only those folders that the logged in user has access to. Backup from other folders will fail.
  • Restore data to only those folders that the logged in user has access to. Restores to other folders will fail.
Note:
A. For new installations, by default, inSync does not allow backups and restores to folders the logged in user does not have access to. However, if you have upgraded to version 5.3 from a previous installation, by default, backup and restore to all folders is allowed. You can modify the configuration as required. 
B. This feature does not apply to System, App Settings, where settings of only the logged in user is backed up and restored irrespective of secure backup and restore settings. 

Configuring secure backup

Enabling secure backups

To restrict backups only from those folders that the logged in user has access to

  1. Stop the inSync services on the inSync server. For the list of inSync services, see inSync services.
  2. Access the inSyncServer4 folder on the computer where inSync server is installed. 
  3. Open the inSyncServer.cfg file using any text editor.
  4. Modify the value of BACKUP_ALL_USERS_DATA parameter to False.
  5. Start the inSync services.
Note: If the user has any folder to which he does not have access to, but is configured for backup, a misconfigured folder alert is generated.

Disabling secure backups

To allow backups from even those folders that the logged in user does not have access to

  1. Stop the inSync services on the inSync server. For the list of inSync services, see inSync services.
  2. Access the inSyncServer4 folder on the computer where inSync server is installed. 
  3. Open the inSyncServer.cfg file using any text editor.
  4. Modify the value of BACKUP_ALL_USERS_DATA parameter to True.
  5. Start the inSync service.

Configuring secure restores

Enabling secure restores

To restrict restores to only those folders that the logged in user has access to

  1. Stop the inSync services on the inSync server. For the list of inSync services, see inSync services.
  2. Access the inSyncServer4 folder on the computer where inSync server is installed. 
  3. Open the inSyncServer.cfg file using any text editor.
  4. Modify the value of RESTORE_ALL_USERS_DATA parameter to False.
  5. Start the inSync services.

Disabling secure restores

To allow restores to even those folders that the logged in user does not have access to

  1. Stop the inSync services on the inSync server. For the list of inSync services, see inSync services.
  2. Access the inSyncServer4 folder on the computer where inSync server is installed. 
  3. Open the inSyncServer.cfg file using any text editor.
  4. Modify the value of RESTORE_ALL_USERS_DATA parameter to True.
  5. Start the inSync services.
  • Was this article helpful?