An EAZ Way to Restore Crippled and Inoperable Systems

For moments like this, I'd like to recommend a terrific system-protection and system-recovery product that I've discovered and used on clients' systems. Called EAZ-FIX Professional, this tool can help users survive all kinds of potential Windows system problems, including unwanted and incompatible updates, lost files, mangled registries, and more. In fact, users with this software can typically restore their protected systems to a pristine state, with no loss of new files, in less than one minute. EAZ-FIX Professional uses a unique disk-imaging technology that can quickly build a backup image of even a large drive. It can also restore from any such image in a matter of seconds. (Important note: I have no commercial interest in EAZ-FIX; I just like it!)

EAZ-FIX can help clients undo system changes, updates, uninstalls, and more. In fact, I've found it well-suited for five likely scenarios:

• Undo changes or updates: Use EAZ-FIX to take a snapshot before you apply system changes, security updates, service packs, or hot fixes. Then, if there is a problem, returning to the stable prior state is easy.
• Return to system baseline: When creating a loaner machine or managing a test machine, take a snapshot of the clean install after all applications and configurations are set the way you want them. Then, when the machine is returned, you can completely wipe out any changes. This is helpful for test or teaching labs, where clean installs may be required daily. It's also handy for vendors that loan preconfigured PCs for hardware or software reviews.
• Simple Registry restore mechanism: When manual editing of the Registry is required, take a snapshot before you begin the job. Then, if you need to return to the same state later, it's quick and easy. This also makes the process of backing out of changes both quick and trivial.
• Quick recovery from virus/worm infections: Returning to a snapshot automatically cures any and all side effects and wipes out all traces of infection.
• Recover lost, damaged, or accidentally deleted files--or roll back to previous file versions: EAZ-FIX includes an Explorer like interface that permits file-by-file inspection and selection from individual file-system snapshots. This makes it easy to either recover otherwise inaccessible files, or return to previous versions of files when a rollback is required.

In fact, as long as hardware problems aren't involved, EAZ-FIX can replace numerous built-in Windows mechanisms that include Windows XP's System Restore, Windows Backup, various registry backup/restore techniques, and more. But the product doesn't completely eliminate all needs for some kind of additional backup or file copy repository. (For more on this point, see my sidebar, "Understanding EAZ-FIX's Limitations," below.)

Regardless of how you choose to use EAZ-FIX--or train your clients to use it themselves--you must first perform the following tasks:

• Take an inventory of your client's Windows PCs and their current backup capabilities.
• Work with your customer to decide which machines will benefit from EAZ-FIX's capabilities. The tool is especially helpful on notebooks and laptops that travel. But the software can also improve desktop productivity with quick problem-recovery and repairs.
• Install the software on all designated machines. Then establish a regimen for recapturing baselines as a preamble to any general updates, upgrades, or new software installs. Also, take a baseline snapshot as the concluding step of any system installation or set-up process. Then update all baselines whenever updates or changes occur.

In the sections that follow, I'll show you how to actually use EAZ-FIX, starting with the required tools and ingredients, and continuing with step-by-step instructions for the various tasks and activities we just outlined.

EAZ-FIX Ingredients

Before using EAZ-FIX, you must install the software on the target machines, document the proper procedures, and train all users as required. Here are the components you'll need for these tasks:

• EAZ-FIX Professional: This tool is available from EAZ Solution Inc. at pricing that starts at about $60 a seat. (For volume discounts or special licensing packages, contact EAZsolution.) I recommend using the Professional version because it supports up to 60,000 snapshots. The standard version costs about $40 a seat (volume discounts also available), but supports only one snapshot. Also, the standard version does not support file history reversions; and it cannot be used to recover corrupt or deleted files. For these reasons, the Professional version is vastly preferable; it's the version I used for this Recipe.
• A clean install snapshot: The best initial snapshot--called a baseline--is a clean install. This provides the ultimate recovery point and undoes all subsequent changes. It's best applied after a standard system configuration has been set up; that way, all post-install settings and elements are preserved along with the basic OS and software installations.
• Snapshot procedure document: EAZ-FIX offers optional password protection, so you can limit access to those with administrator privileges. It's important to train users when to make snapshots--basically, any time just before new software, updates, hot fixes, or service packs are to be applied--and how to name snapshots so they can be easily identified and applied. It's also a good idea to train administrators to use the package.
• Snapshot scheduling: EAZ-FIX can be scheduled either manually or automatically using the program's schedule settings. It can also run as a DOS TSR (terminate and stay resident utility) outside of Windows, either before Windows boots or after it shuts down. Be sure to create a schedule for taking snapshots that manually or automatically precede system changes. EAZ-FIX supports the following scheduling settings:
  • Snapshot or restore system on restart.
  • One-time system snapshot or restore.
  • Hourly system snapshot or restore.
  • Daily system snapshot or restore.
  • Weekly system snapshot or restore.
  • Monthly system snapshot or restore.
  • System snapshot or restore on log off.
• Address general recovery needs, tools, and strategies: EAZ-FIX is a recovery tool, not a complete backup solution. That means it cannot duplicate files on other storage media. So you'll need to plan for both duplicating files and safely storing sensitive and valuable files. You'll also need to develop techniques for rebuilding systems when drives or other hardware need replacing.

Undo Changes or Updates, Step-By-Step

Here are the five steps involved in using EAZ-FIX to undo changes and updates:

• Create and label a snapshot immediately prior to applying an update or other change to the system. Use a naming convention to uniquely identify the snapshot. A good system is yymmdd-hhmm-description, where yy is the two-digit year, mm is the two-digit month, dd is the two-digit day, and hhmm is the two-digit hour and minute using 24-hour clock time. In the description field, provide some indication of why the snapshot was taken. For example, let's assume we're taking a snapshot before applying Microsoft security update MS05-009 at 1:32 p.m. on March 22, 2005. This might be named 050322-1332-MS05-009, and given the description "Pre MS05-009 installation" for easy identification and use.
• Use the Take snapshot entry in the Easy Updates menu in the EAX-FIX console to create this snapshot. The EAZ-FIX Console makes it easy to name, describe, and take snapshots, as shown below.
• Apply all updates or changes using the usual methods.
• To reverse those updates or changes, you must first launch the EAZ-FIX console. To do this, go to Start, All Programs, EAZ-FIX, and then Application Console.
• If a password has been defined for EAZ-FIX, enter that password to access the EAZ-FIX console.
• From the Quick Fixes menu, click Restore System. Then select the snapshot (in our example, 050322-1332-MS05-009). Then click Next to apply it, as shown below:

Because EAZ-FIX is so fast, this short sequence probably takes longer to read than it does to execute on a target PC!

Return to System Baseline

A slight variation on the preceding sequence permits an immediate return to the system baseline. If EAZ-FIX isn't installed immediately after system set-up and configuration, the software automatically treats its first snapshot as the baseline. Here are the steps:

• Launch the EAZ-FIX console. Again: Start, All Programs, EAZ-FIX, then Application Console.
• Enter the password, if needed, to access the EAZ-FIX console.
• Select Reset Baseline from the Quick Fixes left-hand menu. Then click the Restart button at the lower right, as shown below:

Simple Registry Restore, Step-By-Step

This method is essentially the same at the undo changes or updates method, but with minor variations:

• Create and label a snapshot immediately prior to editing or otherwise altering the Windows registry.
• Make all desired registry changes, either in a Registry editor or using some other software tool.
• To reverse all changes, first launch the EAZ-FIX console: Start, All Programs, EAZ-FIX, then Application Console.
• Enter the password, if needed, to access the EAZ-FIX console. Then select Restore System in the Quick Fixes left hand menu. Pick the pre-Registry change snapshot from the right-hand pick list. Then click Next to proceed.
• Select the pre-change checkpoint and apply it.

Quick Virus and Worm Recovery, Step-By-Step

To automatically return to the most current, presumably virus-free checkpoint, do the following:

• Reboot the system and hold down the Home key as the EAZ-FIX Subsystem Console screen appears. This shows prior to the Windows start-up screens, to let the user interrupt the boot process and institute recovery procedures instead. In fact, that's what's covered here.
• Enter the password, if needed.
• In the Quick Fixes menu, click on Restore System. By default, the most recent snapshot is always selected. But you may need to revert to earlier snapshots if later ones are also infected.

File Recovery

Recovering files from a previous snapshot also permits returning to older file versions. Here's how:

• Launch the EAZ-FIX console: Start, All Programs, EAZ-FIX, Application Console.
• Enter the password, if needed.
• In the Quick Fixes menu, click on Recover Files. By default, the most recent snapshot is always selected, though you may need to revert to earlier snapshots to access older file versions. Select the snapshot of the file you want to recover. Then click Next.
• You'll be presented with a menu of choices. Here you can search for a specific file, file type, or directory name. In the shot below, Outlook.pst is given as an example:
• The search engine will find all instances of the file or directory specified. You need only highlight the file you wish to restore, then click Next to recover that file in its original location and overwrite the later version. A simple radio button makes it possible to restore the file to a different location, should you so choose.

That's all there is to it! Though the tool may seem to fall under the heading of "too good to be true," my experiments on Windows 2000 and XP machines have convinced me that it's the real deal. If you need additional convincing, try the 30-day evaluation download. You (and your users) should be convinced pretty darn quickly! EAZ-FIX can be a tremendous value-add that will create strong and ongoing opportunities for repeat contact and business with your clients and customers.

Sidebar: EAZ-FIX's Limitations

No software is perfect. Here are the key limitations of EAZ-FIX Professional:

• Because EAZ-FIX uses snapshot images, the drive on which the snapshots reside must be working. In other words, EAZ-FIX cannot help systems recover from media, drive, or controller failures. If the storage hardware where EAZ-FIX resides is inoperable, then so is the EAZ-FIX software.
• You must disable disk-defragmentation software before using EAZ-FIX. That's because the tool's snapshots record low-level sector data. Alternatively, you can uninstall EAZ-FIX, defrag the disk, then reinstall EAZ-FIX. But if you do this, older snapshots and baselines will no longer be usable, since they depend on a disk structure that defragmentation will make obsolete.
• EAZ-FIX cannot snapshoot or restore files that were compressed using NTFS file compression. So you cannot use this tool to recover compressed files and folders.
• Even if you use EAZ-FIX religiously, you should still create and store backups of important or sensitive data files elsewhere--on tape, another drive, CD or DVD discs, etc. If you don't, and the drives that EAZ-FIX protects are damaged or stolen, the files will be lost forever.

ED TITTEL is a technology writer who has contributed to more than 100 computer books; a trainer; and a consultant who specializes in IT certification and information security, with a special emphasis on Windows desktops. He has no commercial ties to any of the products mentioned in this Recipe.