locked
clone made with acronis reverting back... RRS feed

  • Question

  • i am having a very hard time wrapping my head around this.  what i've done was this:  i have a lab with 15 desktops and 15 laptops.  every year, the autocad expires and has to be uninstalled and the new stuff installed.  they are all running xp and it is on a domain with server 2008 r2.  i got one box up like i wanted, completely updated and cleaned off.  we use deepfreeze, so there wasn't much wrong anyway.  i then used that as the master and used acronis, can't remember which version, i think it was 2011 or something.  i cloned each desktop and installed the software on the laptops individually; the laptops only took about 20 minutes to install, well worth the time savings of not removing the hard drives.  i did not sysprep any of the machines, i had never heard of that before browsing the forums here. 

    everything was fine for about three weeks, then one of the desktops booted back the way it was with the old software installed.  if i had not been looking at it, i would have laughed and said it's impossible.  am i missing something here about the way acronis clones or is someone messing with me?  i thought that the data was copied from one to another and there was no way for it to revert back.  i forgot to mention that after the systems were set up and cloned, i got hacked.  at least that's what i think happened or maybe a virus that erased all the files that weren't in use at the time and hosed my active directory so bad that i had to put the new server in. 

    the wierd thing about that is that my h, p, and t drives(all that were there) are now missing and there is a 160 gb .esq file there.  that's about the size of the data i'm missing and that is a file created by a pfaff embroidery machine, there are none of those in the county.  logging was disabled for remote entry, and since i'm the new admin for this system and the documentation sucks here, so there was no way for me to know if it was disabled by the previous admin or turned off after the logs were wiped by the attacker.

    anyway, any help figuring this out would be comforting.  with all of the problems i'm having in this one room, it would sure be nice to be able to know someone is messing with the machines so i can stop it instead of wasting time.  thanx.

    Wednesday, November 7, 2012 2:43 AM

Answers

  • didn't know there was a forum there, thanx a bunch. 
    • Edited by sfzombie13 Thursday, November 22, 2012 1:24 AM i'm an idiot
    • Marked as answer by sfzombie13 Thursday, November 22, 2012 1:36 AM
    Thursday, November 22, 2012 1:17 AM

All replies

  • ok, can anyone at least point me in the right direction to find out exactly how acronis clones hard drives?  i have been searching off and on for over two weeks now with little luck.  if i knew what the process of cloning involved, i could draw my own conclusions and not depend on the opinions and possible misinformation of others. 
    Saturday, November 17, 2012 6:34 PM
  • Your best bet will probably be http://www.acronis.com/support/.

     

    Kevin Remde US DPE - IT Evangelism - Microsoft Corporation http://blogs.technet.com/kevinremde http://twitter.com/kevinremde

    Sunday, November 18, 2012 1:56 PM
  • didn't know there was a forum there, thanx a bunch. 
    • Edited by sfzombie13 Thursday, November 22, 2012 1:24 AM i'm an idiot
    • Marked as answer by sfzombie13 Thursday, November 22, 2012 1:36 AM
    Thursday, November 22, 2012 1:17 AM