BackupPC on Windows

Backing up Windows computers currently needs an experienced administrator to set up the backup system on the client machine. Log in with an local administrator to do the following steps.

Prerequisites

  • Connected via LAN Cable to the Internet
  • Your Computer has to be registered

Create a user account

  • Right click on the Windows logo, located on the bottom left of the screen, and select "Computer Management"

  • On the left side, expand "Local Users and Groups" and select "Users".
  • Right click and select "New User...".

  • Fill in: "User name", "Full name" and "Description". Set a strong password and configure the checkboxes according this screenshot. Press the "Create" and then the "Close" Button. Remember the username and password, you will have to tell us both when you later register your computer for BackupPC service.

  • Doubleclick on the new created user "backupPC".

  • Choose the tab "Member Of" and press the "Add..." button.

  • Enter "Administrators" and press the button "Check Names". Then it should be displayed: "Your computername\Administrators" and press "OK".

  • Verify: the user should now be member of the "Administrators" group and press "OK".

Create a share

  • On the left side, expand "Shared Folders" and select "Shares".
  • Right click and select "New Share...".

  • Select "Next".

  • Write as Folder path: C:\data (or the folder you want to be backed up) and select "Next".

  • Write as Share name: backupPC$ and select "Next".

  • Select "Customize permissions" and press the "Custom..." button.

  • Select the "Everyone" group and press the "Remove" button.

  • Press the "Add..." button.

  • Enter "backupPC" and press the button "Check Names".

  • Then it should be displayed: "Your computername\backupPC", press "OK".

  • Confirm the permissions for the user "backupPC". Only "Read" should be enabled and press "OK".

  • Press the "Finish" button.
  • And then press the "Finish" button again.

  • The new created share is now listed here. You can now close the "Computer Management" window.

Edit firewall rule

  • Right click on the Windows logo, located on the bottom left of the screen, and select "Control Panel".

  • Select "Network and Internet"

  • Select "Network and Sharing Center"

  • Select "Change advanced sharing settings"

  • Verify that "Password protected sharing" is On (enabled).

  • Go back to Control Panel and choose "System and Security".

  • Choose "Administrative Tools".

  • Choose "Windows Firewall with Advanced Security".

  • Verify which Firewall Profile is Active (Domain, Private or Public). In this example it's the "Public" Profile. Remember this and click on "Inbound Rules" on top left.

  • Double click on "File and Printer Sharing (Echo Request - ICMPv4-IN)" for Profile you remembered in the step before. In this case it's the "Private" profile. All further steps are referring to the "Private" profile. If you are using the "Domain" Profile do the following steps for the "Domain" profile.

  • Choose the tab "Scope" and select "Any IP address" in the option "Remote IP address".

  • Choose the tab "General", select the checkbox "Enabled" and confirm with the "OK" button.

  • The Firewall rule should now be enabled. Confirm this by the green circle. Double click on the rule "File and Printer Sharing (Echo Request - ICMPv6-IN)". Be careful to select the correct profile (Private or Domain).

  • Choose the tab "Scope" and select "Any IP address" in the option "Remote IP address".

  • Choose the tab "General", select the checkbox "Enabled" and confirm with the "OK" button.

  • The Firewall rule should now be enabled. Confirm this by the green circle. Double click on the rule "File and Printer Sharing (NB-Datagram-In)". Be careful to select the correct profile (Private or Domain).

  • Choose the tab "Scope" and press the "Add..." button in the option "Remote IP address".

  • Specify the server IP subnet 129.132.80.0/26 and confirm with "OK".

  • If you don't need "File and Printer Sharing" for connections from other computer you should delete the "Local subnet" entry from the list, by selecting it and press the "Remove" button.

  • Choose the tab "General", select the checkbox "Enabled" and confirm with the "OK" button.

  • The Firewall rule should now be enabled. Confirm this by the green circle. Now repeat the procedure for the following marked 5 rules, by double click on each rule and configure the same settings shown in the last 4 pictures. Be careful to select the correct profile (Private or Domain).

  • The Firewall rules should now be enabled. Confirm this, there should now be 8 green circles.
  • You can now close "Windows Firewall with Advanced Security".

Change remote UAC in registry

  • Go to the Screen with the tiles and type regedit, then right click the item that shows up and select "Run as administrator"

  • Navigate to the following folder: "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
  • Add a new "DWORD (32-bit) Value" called "LocalAccountTokenFilterPolicy" (without the quotes).

  • Change the value from "0" to "1".

Installation is now finished, please reboot your computer

Troubleshooting

  • If you are trying to connect to a Windows 7 box and smbclient fails with "protocol negotiation failed: ERRnomem", see here for a (Windows-side) solution. Details about why and how this works are on http://support.microsoft.com/kb/285089

Finally register the computer with us

After you've done all the steps above, you need to send us all the relevant information.