Educause Security Discussion mailing list archives
Re: Desktop & Cloud Backups
From: "Spiars, Vince" <0000019c7c272559-dmarc-request () LISTSERV EDUCAUSE EDU>
Date: Mon, 15 Feb 2021 20:49:22 +0000
One of our bright admins was able to script some specifics as to wha gets backed-up/synchronized via OneDrive if you do it via a GPO. We looked at OneDrive as our first lines of backup when we had none. The issues were as follows--recovery after 90 days was going to be "difficult" at best. A mass-recovery was going to be brutal, at a minimum. The lack of logging was a concern for some. The known file copy up on large data sets was a huge concern, across the board. However being it was our only potential solution in a very fiscally lean year it was moved forward without fanfare but with the knowledge of critical personnel like Desktop support and upper-management. If it is your only solution then embrace it but do so knowing the significant limitations. But as was repeated in our mantra--"it's better than what we currently have (nothing)." With so many still working from one, be cognizant of home data caps and overage costs. Just keep it in mind. Best, Vince ________________________________________ From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Menne, Michael S <000002306ce3cd04-dmarc-request () LISTSERV EDUCAUSE EDU> Sent: Monday, February 15, 2021 3:19 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] Desktop & Cloud Backups Caution: This email originated from outside the Quinnipiac Network. I recently did a fresh install of Windows 10 20H2 and discovered that Documents, Desktop, etc. have been moved to the OneDrive Sync folder by default if Sync is setup. I don’t know when they made this change. I made the change manually on another computer following this by moving the folder locations. It would be nice for Microsoft to go one step further and just sync the entire profile folder to OneDrive. I investigated other solutions in the past, but since we pay for OneDrive with our M365 licensing, the need/benefit did not outweigh the cost of these other services. OneDrive has individual file history so we haven’t investigated the need to backup OneDrive. If the entire OneDrive folder is corrupted by Ransomware, I’ve heard that it is possible for Microsoft to recover the whole thing (though it wasn’t easy or pretty from an individual user perspective). OneDrive is constantly evolving, so they may have now provided tools to do this from an end user or tenant admin perspective. Our Service Desk is responsible for all end-user assistance for things such as this. Michael Menne, CISSP Chief Information Security Officer IT Solutions Information Security Minnesota State University, Mankato Phone: (507) 389-5705 Cell: (507) 405-0717 https://mankato.mnsu.edu/cyberaware<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmankato.mnsu.edu%2Fcyberaware&data=04%7C01%7Cvince.spiars%40QUINNIPIAC.EDU%7Cdf601805e4b0425337bb08d8d1ef0da1%7C0940985869fb4de9987990db22b52eaf%7C0%7C1%7C637490171958968387%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=u1Av1YMmNKWeeYj1tRy1Xj%2B1qHmF3rjPW%2Fft%2FnkwwSo%3D&reserved=0> [signature_494656716] Confidentiality Notice: This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Shannon Ortiz <ortiz () FORDHAM EDU> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> Date: Monday, February 15, 2021 at 12:41 PM To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Desktop & Cloud Backups We are looking at what it would take to implement desktop (and laptop) backups for our end users. With the threat of ransomware continuously looming and a mindset on an optimal BC/DR stance, it seems only prudent to consider this seriously. For those that may not provide desktop backups and use Google Drive or Microsoft OneDrive we would like to know how you have that configured too. We would like to know the following: · Are you providing desktop backup services? · On-premises or 3rd party SaaS solution? · Who is footing the bill? IT, individual department(s), end-users? · What vendor/product are you using and why? · Do you have personnel assigned to assist with installs, usage, and/or file recovery, or are your end-users on their own? · Are you mandating or enforcing desktop backup enrollment? · How long did the adoption take and at what % of your end-users took advantage of this service? · For Google Drive or Microsoft OneDrive, do you have any backup services for them, such as Backupify? · Are there any gotchas such as data retention/compliance considerations, or anything else that we should know? Thank you again, Shannon __________________________________ Shannon L. Ortiz, CISSP, CISM, C|CISO Fordham IT Director of IT Security ortiz () fordham edu<mailto:ortiz () fordham edu> (718) 817-3799 __________________________________ ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cvince.spiars%40QUINNIPIAC.EDU%7Cdf601805e4b0425337bb08d8d1ef0da1%7C0940985869fb4de9987990db22b52eaf%7C0%7C1%7C637490171958968387%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=AYkqLQOc%2Bx8pCl2jO7lEBdu2ZkUcLwt%2FQPOMd%2B7ILak%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cvince.spiars%40QUINNIPIAC.EDU%7Cdf601805e4b0425337bb08d8d1ef0da1%7C0940985869fb4de9987990db22b52eaf%7C0%7C1%7C637490171958978380%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=pcXCbBB27MWVIBSvtqa191oQR%2FvbsNUYxsrKcFTqypo%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Desktop & Cloud Backups Shannon Ortiz (Feb 15)
- Re: Desktop & Cloud Backups Menne, Michael S (Feb 15)
- Re: Desktop & Cloud Backups Spiars, Vince (Feb 15)
- Re: Desktop & Cloud Backups Menne, Michael S (Feb 15)