O&O DiskImage 2 - O&O Software GmbH
Contents
1. O amp O DiskImage 2 Professional Edition O amp O Disklmage 2 Rev 2007 08 10 2005 2007 O amp O Software GmbH Am Borsigturm 48 13507 Berlin e Germany Text illustrations and examples have been produced with great care The editor is neither legally nor in any other way liable for incorrect information given and its possible conse quences This document is protected by copyright All rights reserved Without written approval no part of this document may be reproduced through photocopying microfilming or any other procedure nor may it be translated into a language used by machines especially data processing plants Rights are likewise reserved for quotation in lectures on radio and tele vision Microsoft Windows Windows NT Windows 2000 Windows XP Windows Vista and Win dows 2003 are registered trademarks of Microsoft Corporation Redmond USA O amp O and the O amp O logo are registered trademarks of the O amp O Software GmbH Berlin About O amp O Disklmage Welcome to O amp O Disklmage Important features at a glance Installation and System Requirements System Requirements Installation Registration Entering the License Number Note about Licensing Completing Registration Updates for O amp O Disklmage Uninstallation Using the Win PE Version Starting O amp O Disklmage under Win PE Getting Started Introduction General Terms and Definitions Image Image File Incremental Image Base Image Create an Image2. The following chapters will explain how you can get the optimum usage from O amp O Disk Image and how to get started We hope you enjoy our product and that it saves you valuable time both at work and at home Your O amp O Software GmbH www oo software com Important features at a glance Native support of Windows x64 versions Utilizes the speed advantages of multi core and multiprocessors High compression levels with minimum CPU demand Burn images to CD DVD Supports all common removable data storage media Checks image files and drives for damage Native support of dynamic drives Secure encryption of your data AES with up to 256 Bit Images can be used as virtual drives Checksum function for checking and distinguishing sums of images and originals Windows PE Version Also starts without an operating system Make direct copies of drives System Requirements Operating System Windows Vista all editions Windows XP all editions Windows 2000 Professional Extra for O amp O Disklmage Server Edition Windows 2000 Server all editions Windows Server 2003 all editions Hardware 512 MB RAM for Server Edition 1024 MB RAM recommended 30 MB free hard disk space CD ROM Drive VGA Graphic Card with minimum 800x600 resolution and 256 colors Keyboard and mouse Administrative Privileges In order to install and register O amp O Diskimage you must be a member of a local admin istrator group or possess an equivalent
3. e Help lee Restoration k Restore one or more drives to an earlier condition f Copy Drive ia Make perfect copies of any drives and volumes on your computer 7 Mount Image File as Drive 2 Mount a drive from an existing image file Write Image File s to CD DVD s Burn existing image files to CD or DVD Progress done CAP NUM SCRL O amp O Disklmage Start General Terms and Definitions Image An Image is a Copy of your drive or partition This Copy contains all information from the original A special feature of an image is that the file format is specially compressed and takes up much less disk space than the original The more you make images of your drive the less you need worry about data loss Should data on the original drive be lost or dam aged with just a few mouse clicks you can restore your last image with all data onto your computer thus recovering the original statet of your drive before the last imaging Image File An image can be made up of many image files omg For instance if the storage medium you wish to put the image on is not large enough you can split the image onto different storage media You can also manually set the number of MB per Storage medium When you wish to split an image onto several storage media a new image file is created on each medium that forms part of one Image It is vital that the media CD DVD are numbered in case you wish to use the image to recov
4. of a copy as opposed to the creation of an Image is that you cut out the diversion through the image file You can directly access the copy of the drive without ha ving to restore the drive itself You do however require much more disk space for a copy as you do for an image Important When copying your Drive Source Drive the selected target drive will be overwritten You should therefore save your copy on an external hard disk for example either in a free area or overwrite a previously selected drive purely for this purpose Select Copy Drive from the start page Select from the list the drive you wish to copy Select a location for the copy from the right hand column Click on Start Copy and confirm your entries PANS You can also reverse your copy in exactly the same fashion Note You can apply further settings for the copy process under Copying Options See also the Chapter Copying Options Restore an Image If you wish to transfer an existing image to your computer click on Restore on the home page or in the file menu Advanced settings can be found under Options You can access all information on your newly created image in Image Information and the related Drive Information You can also apply further settings under Restoration Options To restore an Image please follow the instructions below 1 Please make sure that the drive containing the image is connected to your computer 2 Under Tasks click on Select
5. However it is recommended to split images at image creation to avoid any confusion that may arise e Under Options Image File Split you can determine the size and limit the amount of image files Image sizes can be set to match the capacity of the storage media Encrypting Data Encryption based on the AES Algorithm is possible up to 256 Bit This provides your image with optimal protection against attacks by third parties e You can select the encryption grade for your files under Options Image File Encryption e You will then be asked to enter a password at the Create Image stage Set Compression Level Under Options Image File you can also determine the settings for the Compression Level Here you can choose between No Compression and Default Default is the rate most recommended Note Compression increases the time required to create an image file However the file then requires less disk space on the storage medium Post Comments to Image Files Under Options Image File Additional Properties you have the option of adding comm ents to your image files i e Drive C no program Exclude Data from an Image When using the imaging method Used Sector Imaging you have the option of excluding data from the image or compression Please follow these instructions for excluding data if Mark the drive you wish to image wm Drive 1 Base 114473 z ip Test Volume G 1999 1843 NTFS S Test Volume H 1999 1899 NTFS 2 Please make s
6. Image 3 A window appears with the drive and image file Should the image file presented not match the one required browse through your drives and enter the path to the image file omg 4 Select Open Now click on either Select Target or Suggest Target 6 Selecta target drive for the image file You can either replace an existing volume or create a new volume with a new name gi 7 Now click on Restore Image 8 Click on Start in the program window The image file will now be transferred to the computer Important During restoration the image overwrites your selected drive with the drive data con tained within the image All data on the target drive is lost and replaced by the image Please therefore make absolutely certain that you wish to overwrite the target drive Note If you split your image onto various storage media all such media will be required for a restoration If you have opted to make an incremental image all images from the origi nal base image to all subsequent incremental images will be required Note When you wish to restore a system drive you must use the O amp O Disklmage Start CD and start the restoration from there Note Should the drive containing the image files not be displayed under Selection click on Refresh Drives Options Under Settings in the top right of the menu list you can customize O amp O Disklmage to your own requirements For example you can determine whether your created sett
7. Image Properties Split e Should the image exceed the chosen maximum file size it will be split into several image files e You can then write the image files to CD DVD e Simply click on Tools on the start page then on Write Image File s to CD DVD and follow the instructions What do I do when my Image is too big for a CD DVD e If you already have an Image saved to your hard disk that is too big for the removable storage medium then you can of course still split the image file Under Tools open up Convert Image File Select the Image you wish to change by using Add Then select Split and enter the required maximum file size of the individual parts During conversion one copy of the Image is made whilst the original remains un changed have split the Image and saved it to various storage media CD DVD want to restore this Image display drives from the Image use the Image as a Base Image for Incremental Imaging purposes merge Incremental Images convert the Image file Before you go ahead with any of the above named steps we strongly advise you to save all parts of the Image in a folder on your hard disk Please ensure the folder is not on the drive to where you wish to restore the Image Once you have done this you can complete the steps outlined above by simply following the instructions under the respective chapters in the User s Guide Can I carry on working during the imaging procedure O amp O Disklmage does n
8. When you have correctly entered the license code you will receive confirmation in the dialog window You can now register online and benefit from many advantages such as technical support and free upgrades To do so simply click on Register Product Online To close the assistant simply click on Close Updates for O amp O Disklmage With an update from the previous version to O amp O Disklmage 2 please take note of the following First uninstall the previous version of O amp O Disklmage Start the O amp O Disklmage installation Complete the O amp O Disklmage installation in the normal way Once finished the new version is fully installed Uninstallation To remove O amp O Disklmage from your PC please follow the instructions below Open the Control Panel in the Windows start menu and select Add or Remove Pro grams Please select O amp O Disklmage from the list of installed software programs and then click on the Add Remove button Confirm the uninstallation of O amp O Disklmage Once uninstallation is complete you will re ceive a confirmation message and you may be prompted to restart your computer Using the Windows PE Version No installation is necessary for the Windows PE Version of O amp O Disklmage It starts directly from CD You will need this CD when for example you wish to restore your system par tition Starting O amp O Disklmage under Win PE 1 Please ensure that your system can be started from the CD The
9. appropriate settings can be created in BIOS You can obtain further information on this from your Mother board manufacturer 2 Put the O amp O Disklmage CD in your computer s CD DVD drive Restart the computer 4 Follow the instructions at the start of the CD DVD A window containing the system sett ings will then appear 5 Select a language and region 6 Atthe next stage you can load drivers for those devices where no drivers under Windows PE were initially found 7 After license confirmation O amp O Disklmage will start up w 2 O amp O DriverLoader IDE ATA ATAPI controllers 86 764 765 Trio32 64 64V 53 Inc i 440BX ZX DX 824438X ZX DX Host bridge AGP disabled Intel Corporation Load Drivers under Windows PE 6 Installation and System Requirements User s Guide for O amp O Disklmage 2 Introduction In this section we will explain to you how after successfully installing O amp O Disklmage you can take images of drives and transfer them again to your computer Start O amp O Disklmage under Start Programs O amp O Software O amp O Disklmage You can receive online help by simply clicking on Help 0 amp 0 Diskimage 2 Professional Edition File View Tools Help Q 668 Tasks E Imaging pd se j Imaging S RTE Create an image of one or more drives Mount Drive Burn Image Files 4 Incremental Image a Create an incremental image Which task would you like to run Help
10. for the purposes detailed in the descrip tion and the user manual O amp O Disklmage Professional Edition The software requires Windows 2000 Professional Windows XP all Editions or Windows Vista all Editions operating systems The use of the software per the contract cannot be guaranteed without one of the aforementioned systems O amp O Disklmage Server Edition The software requires Windows 2000 all Editions Win dows Server 2003 all Editions Windows XP all Editions or Windows Vista all Editions operating systems The use of the software per the contract cannot be guaranteed without one of the aforementioned systems 2 License granting For the duration of this contract O amp O grants you the simple non exclusive and perso nal right henceforth referred to as License to use a copy of the software on a single com puter If this single computer is a multi user system this right applies for all users of the system As license holder you may transfer software saved on a data storage medium from one com puter to another provided that such software will only ever be used on a single com puter Repeated and deliberate installation use and subsequent uninstallation on various compu ters floating license is prohibited 3 Trial version license cost You are entitled to test the software without obligation and free of charge for a period of 30 days Should you wish to use the software beyond the 30 day period you
11. made By saving all sectors on a single partition or drive all unoccupied and deleted portions of file systems can also be saved Of course such a complete image also includes portions of data that have been damaged by software malfunctions Direct Forensic Imaging The direct forensic image method is similar to the forensic imaging method mentioned above As before this method creates a complete image of the source drive The dif f erence however is that data are read through low level system interface When encrypti on software is in use on a system for example this makes it possible to create an image that includes encrypted and hidden files Splitting an Image An image can be split into multiple image files If a storage volume lacks the needed space to contain a full image of your selected drives you will automatically be requested to enter another target location It is also possible to manually set the maximum size of an image file If the image being created is larger than entered file size an additional image file will be created This function is especially useful when you plan to write your image to a CD DVD at a later time Sometimes a CD DVD is not large enough to contain the entire image file For this reason it is recommended to limited image files to the size of the storage medium onto which you will be writing your images The image file can also be split at a later time using the convert image file function
12. must purchase an appropriate license from O amp O or your supplier 4 Description of further rights and limits The license holder is prohibited from a altering translating reverse developing decompiling or disassembling the software without the advance written permission of O amp O b creating products derived from the software or making copies of the written material translating or altering the written material or creating products derived from the written material c distributing copies of the software to third parties d changing or removing the copyright mark on the copies of the software e renting out or lending the software The license holder is permitted to transfer all rights from this license agreement pernmanently to another person provided that the recipient also agrees to all conditions of this license The license holder must use the software only in compliance with all relevant laws and in ternational treaties 5 Length of the agreement This agreement is valid infinite The right of a license holder to use this software is removed automatically and without notice if he or she violates one of the terms of this agreement At the end of the period of right to use the license holder is obliged to destroy the software all copies of the software and the written material 6 Compensation for breach of contract O amp O would like to point out that you are responsible for any damages arising from breach of copyr
13. Carry out an Incremental Imaging Copy a Drive Restore an Image Program Settings Options Image Operations Introduction Mount Image file as a Drive Unmount Drive Convert Image File Merge Incremental Image Files Check Image File for Errors Check for Drive Errors Save Images onto CD DVD Map Disconnect Network Drive Image Options Introduction Selecting Imaging Methods mo anank BBW WWW 0 OOONNNN 12 12 14 14 16 16 16 17 17 17 18 18 19 20 21 21 21 Used Sector Imaging Incremental Imaging Forensic Imaging Direct Forensic Imaging Splitting an Image Encrypting Data Set Compression Level Post Comments to Image Files Exclude Data from an Image Exclude Data from Compression Data Comparison with Checksums Ignoring Erroneous Sectors Creating an Image Profile Settings for copying Drives General Copying Options Set a Copy Method Create a consistent copy of a drive Overwrite Unused Sectors Write Directly to Storage Volume Ignore Bad Sectors Set a Copy Profile Restoration Options Introduction Overwrite unused Sectors Write directly to Storage Volume Options Profile Frequently Asked Questions O amp O Support and Contact Software License Agreement 21 21 22 22 22 23 23 23 23 25 25 25 26 27 27 27 27 28 28 28 28 29 29 29 29 29 30 32 33 Welcome to O amp O Disklmage Thank you for choosing O amp O Disklmage O amp O Disklmage gives you a quick and easy me thod of p
14. ble to block the system partition If you leave the drive unblocked as you wish to continue working during the procedure changes will be cached or intermediately saved This working memory buffer is however restricted You can see from the Cache Status Display how much intermediate memory is available Warning Should you go over the free intermediate memory current changes will be saved direct to the source drive This makes the copy inconsistent and may render it unusable Note To maintain the maximum possible intermediate memory please close all applications before starting the copy procedure for example defragmentation Ignoring Bad Sectors If an error occurred while reading a storage volume it is possible to set under Imaging Options Advanced whether the read process should be aborted No or the bad sector be overwritten with a zero in the image file Yes Creating an Image Profile Under Imaging Options Option Profiles you can reset the imaging settings to the Default Settings or select an existing profile Under Current Profile you can select from preset Multimedia or Archive profiles The Multi media profile excludes already compressed music and video data i e avi mp3 mpeg from imaging The Archive Profile on the other hand excludes other compressed data such as zip or rar If you would like to save your user defined settings please follow these instructions 1 Activate your settings under ima
15. d Merge Incremental Image Files If you have created several incremental images you can merge these to form a new base image The newly created base image is now a full image Previous images can then be deleted after the merge has been completed 1 First make sure all the drives with the base image and incremental images are available to the computer 2 In the menu list under Tools click on Merge Incremental Images 3 A program window will appear where you can select from and merge the existing incre mental image files Note Only incremental image files with the same base image may be merged together By click ing Image Information and the corresponding Drive Information you will be able to view all of details regarding the image Check Image File for Errors Under Tools is a function called Check Image File for Errors This function checks the struc tural integrity of an image file It determines whether the logical structure is intact and not damaged Such damage can be caused by virus attacks or defective hardware Check for Drive Errors Under Tools is the function CheckDisk which carries out an intensive analysis of the file sys tem and data storage interface protecting against any possible loss of data CheckDisk is an assistant that leads you step by step through the examination of your drives Simply follow the instructions in the dialogue window and select your drive In the next stage the analysis is carried ou
16. e will meet the particular requirements and demands of the purchaser or that it will function together with other software he or she has chosen The purchaser is responsible for the correct choice of software and the consequences of the use of that software as well as the results aimed at or intended The same principle applies to the written material that accompanies the software If the software is fundamentally unfit foruse as described in clause 1 the customer has the right to cancel the contract O amp O has the same right should the creation of software that is fundamentally fi t for use as described in clause 1 not be practically possible O amp O is not responsible for any damages unless such damages are caused deliberately or arise from gross negligence on the part of O amp O In contracts with traders an assumption of responsibility for gross negligence is excluded This does not apply to assurances by O amp O that refer to specific characteristics Responsibility for damages not included in such an assurance will not be accepted Damages for data loss will be restricted to the typical recovery costs incurred in an environ ment where regular and appropriate backup copies have been created 10 Competency If the license holder is a registered merchant under German law the law that applies to this contract is the law of the Federal Republic of Germany In this case the state and federal courts of the Federal Republic of Germany assume r
17. ed as a base This option is set as default Should it not have been selected then you will require next to the incremental image a complete image and all previous incremental images too 1 Please make sure that the drive containing the base image is connected to your computer 2 Click on Incremental Image in the start screen of O amp O Disklmage 3 Apop up window will open where you can select your base image You can find all details of the Image under Image Information and the related Drive Information 4 Click then on Create Image 5 Click the button to the right and the available drives will be displayed The last image file in the drive is normally displayed automatically If not please enter the target path man ually or browse through the other drives 6 The Image is automatically named after the creation date You can however enter a name manually All information from the image will be saved which you can later access through Image Information in the Tools list 7 Now click on Open and then on Start An incremental image will be created from the base image The Imaging Method of the original complete image e g Used Sector Imaging remains the same and cannot be amended Copy a Drive This function enables you to take a copy of an entire drive with all the saved data and without having to create image files The drive is then saved on a selected storage medium as a proper drive without compression The advantage
18. er a drive or as a base image for an incremental imaging Incremental Image An incremental image can be created using the Incremental Imaging Method see also Image Options Image Methods Only changes to the base image are saved A Base image has to have been made previously from the drive you wish to now image incrementally see Base Image This method saves you time and computer performance as the image only contains recent changes Should you have built up a number of incremental images you can combine them to form a Base image Base Image A base image is an image of your drive that you can create using all imaging methods It ser ves as the basis for creating an incremental image An incremental image can also be used as a base image When creating or restoring an incremental image you will need the com plete base image as well as the subsequent incremental images There is an exception to this rule should the option Data Comparison with Checksums under Image Options Ad vanced be selected then you only require the last incremental image to create a new one This option is set by default Create an Image To create an Image of one or more drives please follow the instructions below Note If you wish to save an image to an external hard disk connect this to your computer before starting O amp O Disklmage It will then be displayed as a drive 1s In the start screen or file menu click on Image O amp O DiskImage 2 P
19. esponsibility If you have any questions regarding the licensing of O amp O software or you wish to contact O amp O please get in touch with us as follows O amp O Software GmbH Am Borsigturm 48 13507 Berlin Germany Tel 49 0 30 4303 4303 Fax 49 0 30 4303 4399 E mail info oo software com sales oo software com Web www oo software com
20. ew minutes Exclude Data from Compression Data that are already compressed e g rar or zip files can not be further compressed during the imaging process and for this reason may be excluded from the compression process This accelerates the procedure To exclude data from compression please follow the procedure laid down in excluding data from an image Data already compressed i e Zip Rar files is excluded from compression by default Data Comparison with Checksums Unaltered data from incremental images is saved with the other data as standard using checksums The files are fractionally larger It is sufficient when at the next incremental ima ging you use a previous incremental image with checksums as the base image This funtion is activated by default If you save all images to a single directory you might consider deac tivating this function Your images will then take up less space on the disk e The setting Data Comparison with Checksums can be activated under Imaging Options Advanced Create a consistent Image You can lock the drive you wish to create an image of for the duration of the copy proce dure This prevents changes being made to the drive while the image is being created The drive will no longer be displayed in Explorer and all applications will be closed The drive is not locked by default e To block a drive activate the function Lock Drive under Image Options Advanced Note It is not possi
21. ging options 2 Select Option Profiles New Profile 3 Give your newly created profile a name Under Profile Management it is possible to make changes to current profiles or delete those that are not longer needed Current Profile Current Profile A profile is a collection of options and settings that can be given a name and saved for later use Imaging Options User s Guide for O amp O Disklmage 2 Image Options 27 General Copying Options Under Copy Drive and Copying Options you can apply settings for the copy process Copying Options Profile Default Copy Read Procedure gt Ignore Bad Sectors Option Profiles Lock Drive Write Procedure Zero Unused Sectors Write Directly to Storage Volume Automatic Settings for the copy process Set a Copy Method As with creating an Image you can also individually set a copy method for the copying pro cess The copy methods are constructed in a similar way to the Image methods You can choose between Used Sector Forensic or Direct Forensic You can read more about this topic under Imaging Options Imaging Methods Create a consistent copy of a drive You can block the drive you wish to copy for the duration of the copy procedure This pre vents changes being made to the drive while it is being copied The drive will no longer be displayed in Explorer and all applications will be closed The drive is n
22. ictions Problem when refreshing under Windows If you are working over a remote desktop con nection you must restart your computer to display the newly created drive For Forensic purposes only Initializing an entire hard disk as a virtual drive can lead to problems recognizing the virtual data volume if the imaged hard disk contains one of the following a damaged partition table a partitioning process not supported by your operating system e g GPT a RAID System component where only one physical hard disk was imaged a Dynamic drive Unmount Drive If you wish to remove a mounted drive with the image file click under Tools on Unmount Drive and remove the drive image file in the program window Convert Image File Convert Image file ee Drive ST3120022A Target Path H Image20070731 0mg Test Volume G Imaging Method Used Sector Imaging 7 Compression l Default E Encryption El Split E Add Personal Comments Converting Image File With the tool Convert Image File you can Change the properties of existing images such as compression and encryption Merge images of the same type including incremental images Split images Extract and individually save certain image paritions see also Frequently Asked Ques tions Under Add you can select and edit images A copy of the respective image will be made so that the original image remains unchange
23. ight if you violate these contract terms 7 Changes and Updates O amp O is entitled to update the software as it wishes O amp O is not obliged to make updated versions available to license holders who have not registered their product with O amp O or who have not paid the update fee Any additional software code that is made available to you as an update is considered a part of the software and is therefore subject to the terms of this agreement 8 O amp O s Guarantees and Responsibility a O amp O guarantees the original license holder that the data medium carrying the software is free of errors at the point of delivery assuming normal operating conditions and a normal level of maintenance b If the delivered data carrier is faulty the purchaser can demand a replacement during the 24 month guarantee period For this he or she must return the data carrier any back up copies and the written material along with a copy of the invoice or receipt to O amp O or to the dealer where the product was purchased c If a fault as described in clause 8 b is not corrected by means of a replacement delivery within a reasonable time period the purchaser can demand either that the sale price be reduced or that the contract be cancelled 9 Limited Liability For these reasons and for those mentioned in clause 1 of this contract O amp O accepts no responsibility for mistakes in the software In particular O amp O does not guarantee that the softwar
24. ings should be saved and applied as preferred settings at the next program start up Program Settings Customize O amp O DiskImage to Meet Your Needs gt E Start and Finish Imaging Start Page Start Page Restoran Save Options Yes E Working Directories Default Path C Users Test Documents O amp 0 DiskIma E Behavior Initialize Disk Initialize CD DVD drives Initialize floppy drives Start and Finish Program Settings Under General you can determine the program page which is displayed when starting O amp O Disklmage For example you can ensure that the page Imaging always appears as the start page With Save Options the latest settings options for data backup can be saved If you chose the method Incremental Imaging for example then with the next program start up Incre mental Imaging will appear as the preferred method Under Image Default Path you can create or change the target path for the image storage medium The Path is stored and then applied as standard to every imaging procedure Under Behavior you can determine whether drives should be read out initialized by O amp O Disklmage and if so which ones CD DVD and Floppy Drives are excluded from initial ization by default Note If you activate CD DVD and Floppy Drives for initialization the time required for the various functions of O amp O Disklmage may substantially increase Under Imaging you have the further opt
25. ion of also displaying those drives not visible in the program window e g Microsoft reserved partitions under GPT Drives OEM BIOS Parti tions with DELL and IBM or the System Area 1MB under Windows Vista The option Validate Image File allows you to determine whether an image file should be checked for errors immediately after it is created This option is also available when resto ring an image whereby the image file is checked for errors prior to being restored Introduction This chapter will show you which operations you can perform with a created image The various image operations can be found in the menu list under Tools Help View Image Information Ctrl I J Write Image File s to CD DVD Ctrl B Mount Image File as Drive Ctrl M 3 Unmount Drive Ctrl Shift M Convert Image File Ctrl K Merge Incremental Image Ctrl Z Check Image File for Errors Validate Ctrl V Check Drive for Errors Checkdisk Ctrl C w Map Network Drive Ctri N Disconnect Network Drive Ctrl Shift N Tools Mount Image file as a Drive You can have your created image file displayed in Explorer as a regular drive This allows you e g to copy files or directories from the image file onto existing hard disks It is however not possible to make changes to the image file such as deleting or adding files e Under Tools click on Mount Image File as drive and select an image file from the program window Technical Restr
26. ions Selecting Imaging Methods Under Options Image File you can determine which Imaging Method should be applied as standard to every new image In most cases the default option Image used sectors is recommended Used Sector Imaging Using this imaging method will limit the imaging process only to used sectors on a drive With this option you can save time system resources and disk space This method is the default imaging method Incremental Imaging The incremental imaging method will create an image that only contains the changes made to a base image or a previous incremental image If you would like to create an incremental image it is necessary to first select at least one image file as your base image A previously created incremental image can also be used as a base image Using this method will lead to the creation of a new image file containing the changes that have been made to the base image More information on this can be found in the section entitled Getting Started Cre ating an Incremental Image Forensic Imaging The imaging method is especially useful when creating images of non supported files sys tems or when for example you would like to recover deleted data from a source drive with special data recovery software Even in the case of laboratory work in which the original hard disk is not to be touched the forensic imaging function is useful With this method an exact sector level copy of the source drive is
27. level of privileges If you are a domain administrator then you must possess the adequate level of administrative privileges Installation Installing O amp O Disklmage is very straight forward Simply follow the instructions set out below 1 2 3 Start the computer on which you would like to install O amp O Diskimage Log in as a local administrator or user with equivalent privileges Start the installation file SETUP EXE from O amp O Disklmage which you have either down loaded from our server or have on your personal CD ROM After the set up program has been successfully initialized please follow the on screen instructions to complete the installation You will be given the option of making O amp O Disklmage available to just you or to all users Registration In order to register O amp O Disklmage you will require the registration code you received when purchasing the product This registration code will also be referred to as a license key serial number or product ID If you would like to register start O amp O Disklmage The registration assistant always appears automatically at the start to guide you if you are using an unregistered version or have entered the registration code incorrectly Entering the License Number Note In order to activate the product after installation or at a later time you must possess a valid license key If you do not enter a valid license key you can still use O amp O Disklmage as a full
28. lopments and support Also included on our website are regularly updated FAQs and Knowledge Bases that offer the most common problems and questions regarding our products All registered customers receive installation and product support free of charge for the first 90 days after registration When contacting our support department please do not forget to have your registration code ready In addition it may be helpful to read our frequently asked questions FAQ section of our website before you contact our support department It is always possible that your specific question or problem may have already been addressed Authorized Resellers For answers to all questions regarding the licensing and purchase of our software products our authorized reseller partners in over 30 countries stand ready to assist you Their names and addresses may be found at our website under the Purchase heading We would also be more than happy to assist you in finding the partner closest to you O amp O Software GmbH Am Borsigturm 48 13507 Berlin Germany Tel 49 0 30 4303 4303 Fax 49 0 30 4303 4399 E mail support oo software com sales oo software com Web www oo software com IMPORTANT PLEASE READ CAREFULLY This end user license agreement is a legally binding contract between yourself as a natural or a legal person and the company O amp O Software GmbH O amp O for the software product named above By installing the software product yo
29. more regular you carry this out the more up to date the data is contained within those images Which drives should I Image e System drive Windows mostly Drive C e All remaining data drives where private and business data e g customer data photo collections or music is stored Where should I store my Image e Not on the same hard disk where the imaged drive is located e Ideally on an external hard disk e DVD just bought myself a new computer If take a complete Image of my old computer can restore it to my new one e Restoring data drives is not a problem e We do not recommend a complete restoration inclusive operating system onto another computer with different hardware as this can lead to a system crash Do have unlimited use of all functions with the trial version e The trial version is fully functional and has no restrictions e You should however note that restoring a system partition is only possible with the bootable O amp O Disklmage CD included when you purchase the product When do I need the bootable CD from O amp O Disklmage e For restoring the system partition e When your operating system will no longer start How do I save an Image to CD DVD e You must create an image file s and save it to your hard disk before you can write it to CD DVD e When creating the image you should restrict the image file size to the size of the inten ded removable medium where it will be saved under Image Options
30. ot block drives by default during imaging You can therefore con tinue working and make changes The working memory buffer is however restricted You can see how much is available in the Cache Status Display See Chapter Creating Consis tent Images Note To maintain the maximum available working memory buffer please close all applications before and during the procedure for example defragmentation or copy processes Important Should you go over the available working memory the current changes will be written direct to the source drive This makes the image inconsistent and may render it unus able In such cases you should load the image after the procedure is finished and check it for errors Can still change the image retrospectively Under Tools you can find the function Convert Image File This enables you to change cer tain properties and content of the image retrospectively see Chapter Convert Image File have created an image of several drives but want to create a sepa rate image of just one of those drives 1 Under Tools select Convert Image File 2 Select the image using Add and then select the drive you wish to separately image 3 After confirming click Start A new image will now be created The old image remains unaltered Technical Support To receive more information about O amp O Disklmage please visit our website www oo soft ware com and get the latest information about product deve
31. ot blocked by default e To block a drive activate the function Lock Drive under Copy Options Advanced Note It is not possible to lock the system partition If you leave the drive unblocked as you wish to continue working during the procedure changes will be cached or intermediately saved This working memory buffer is however restricted You can see from the Cache Status Display how much intermediate memory is available Warning Should you go over the free intermediate memory current changes will be saved direct to the source drive This makes the copy inconsistent and may render it unusable Note To maintain the maximum possible intermediate memory please close all applications before starting the copy procedure for example defragmentation Write over Unused Sectors Under Copying Options you can select Zero Unused Sectors should you wish to overwrite unused sectors with zeros Write Directly to Storage Volume With the option Write Directly to Storage Volume under Copying Options you can deter mine whether a restoration should be written directly to the storage volume by way of the file system driver e g restoring a Direct Forensic Image Ignore Bad Sectors Should an error occur during the reading of a storage medium under Imaging Options Ad vanced you can determine whether the read process should be stopped No or if the error should be included in the Image with a Zero Yes Set a Copy Profile Unde
32. r Copying Options Option Profiles you can either reset the image settings to Default or select a previously set Profile Under Current Profile you can choose between Default and Custom Should you wish to save your custom settings when copying please follow the instructions below e Create your Settings under Copying Options e Select Option Profiles New Profile e Give your new Profile a name in the pop up window Using Profile Management you can change or delete existing Profiles Introduction Under the menu header Restore by clicking on Options you can create restore settings Restoration Options Profile Default E Restoration Procedure Option Profiles Zero Unused Sectors No Write Directly to Storage Volume Automatic Restoration Procedure Restoration Options Overwrite unused Sectors With Zero Unused Sectors you can determine whether unused sectors are written over explicitly with 0 Write directly to Storage Volume You can decide whether the restoration should be carried out direct onto the data storage me dium i e direct forensic restoration It is recommended to keep the the setting on automatic Options Profile Current Profile A profile is a combination of options merged under one name which can then be selected when required When and how often should make Images e You should image an intact system e We recommend regular imaging once a month minimum The
33. reventing any kind of data loss With O amp O Disklmage you can create regular image files of your drives avoiding any future loss of your precious data O amp O Disklmage enables the convenient duplication or archiving of entire operating sys tems and individual partitions It even supports dynamic drives and RAID systems You can customize the imaging methods to suit your own individual needs The so called forensic imaging method lets you make a 1 to 1 image of your system You can also analyze even unassigned sectors for deleted data at a later time The remaining methods enable the imaging of only used sectors and exclude unimportant files from the image Another high light of O amp O Disklmage is the incremental imaging method This creates an image only of implemented changes to the base image Incremental images can also be merged at a later date to form a new and current image Because this saves a substantial amount of computer performance you are left free to continue working on your PC parallel to the imaging With O amp O Disklmage you can save an entire functional operating system environment and use it on several computers Administrators of larger networks will especially appreciate the value of this function Software developers also use this tool regularly to test new programs on defined standardized operating system environments With the new O amp O Disklmage Server Edition it is now also possible to image a server lo cally
34. rofessional Edition File View Tools Help Q dA BB curent Image Profile Default Volume Size MB Free MB File System O O w Drive 0 Base 238475 D Create Image O System C 97151 33268 NTFS eee O pata E 19999 O DATAIF 19988 19987 Tasks A Selection 2 T Select All Mf Invert Selection Refresh Drives a Imaging Options iDrive 1 Base 114473 op Test Volume G 1999 W Test2 Volume H I eBbtmpty Region Drive Information Test Volume G System Path Device HarddiskVolume4 File System NTFS Size in MB 1999 Free in MB 1843 More Progress done CAP NUM SCRL Program window for creating an Image 2 Select the drive for imaging by ticking the box next to it s Drive 1 Base 114473 W Test Volume G 1999 1843 NTFS O Test Volume H 1999 1899 NTFS Select drive 3 You can create advanced settings for your image under Options Imaging Options Profile Default gt Image File Image Properties Advanced Imaging Method Used Sector Imaging Option Profiles Base Image Compression Default Encryption No Encryption Split Automatic Split Size in MB 0 E Additional Properties Comment Imaging Method Select the method by which your data is to be secured Imaging Options 4 Click on Create Image once you have completed the required setting
35. s 5 Enter the target path of the drive you wish the image to be saved to You can either accept the suggested path or select another location 6 The Image is automatically named after the creation date You can however enter a namemanually Allinformationfromtheimagewillbesaved whichyoucanlateraccess through Image Information in the Tools list 7 Select Start The image file will now be created Note Further settings options i e Imaging Methods can be found in the Chapter Imaging Options Note If a drive is not large enough to store an image you will be prompted to select another You can also at this stage rename the file i e 2_Test omg Note Should all connected drives not be displayed under Selection click on Refresh Drives Carry out an Incremental Imaging An incremental image is recommended when you have already made several images of your drive When creating an incremental image only an image of the changes to the base image is made In order to carry out an incremental imaging a base image of the respective drives must have been created beforehand A base image can either be a complete image created using the methods Image Used Sectors Forensic or Direct Forensic or a previously created incremental image For the last option you should note the following if in the in cremental imaging procedure the option Data Comparison with Checksums was selected then this incremental image can be us
36. t While CheckDisk is busy working you can moni tor progress by means of a progress bar where all the program status messages are listed 15 Check drive ae Target System C Check drive Current Action Progress 15 _ Volume label is System CHKDSK is verifying files stage 1 of 3 processed CHKDSK is verifying indexes stage 2 of 3 Checking the drive for errors Save Images onto CD DVD To save your image to CD DVD it is necessary to have first created an image as described in the section entitled Creating an Image The image file s must be stored on an internal or external drive Only then will it be possible to write your image file s omg to CD DVD Images cannot be written directly to CD DVD without having first saved it to an external or internal drive 1 Before creating your image please note the storage capacity of your CD DVD 2 Under Imaging Options Image File Split limit the image files to the size of your future storage medium The image will then be split into multiple image files The splitting of the image file at a later time is also possible See Converting Image File t is recommen ded however that you have the image file split when it is created 3 Then under Tools click on Burn and follow the instructions in the dialogue window Note Only Image files omg or ISOs created using O amp O Disklmage can be written onto CD DVD Note When renaming individ
37. u declare your agreement with all con ditions of the license agreement If you do not agree with the conditions of the license agreement you are not entitled to install or use the software product Should this be the case you can return the software product along with a copy of the invoice or receipt to the distributor from whom the product was purchased in exchange for a full refund The software product is protected by copyright laws and international copyright contracts as well as other laws and agreements concerning intellectual property IMPORTANT NOTE The Microsoft Windows Preinstallation Environment software included with this device or software may be used for boot diagnostic setup restoration installation configuration test or disaster recovery purposes only NOTE THIS SOFTWARE CONTAINS A SECURITY FEATURE THAT WILL CAUSE END USER S SYSTEM TO REBOOT WITHOUT PRIOR NOTIFICATION TO THE END USER AFTER 72 HOURS OF CONTINUOUS USE 1 Subject of the contract System requirements The subject of this contract is the computer program the description thereof and the user manual as well as any other accompanying written material This will henceforth also be referred to as software O amp O wishes to point out that at the current state of technology it is not possible to cre ate software that works perfectly in all applications and combinations The subject of this contract is therefore a software program that is fit
38. ual pieces of the image it is recommended to keep the number portion of the filename the number in parentheses to avoid confusion with regards to the order of the files and possible problems when restoring the images at a later time Map Disconnect Network Drive Under Tools in the menu list you can select the option Map Network Drive in order to acc ess drives in a network This enables you for example to restore Images from this location or to save Images there a Map Network Drive What network folder would you like to map Specify the drive letter for the connection and the folder that you want to connect to Drive PG M Folder computer share X Example server share E Reconnect at logon Connect using a different user name Connect to a Web site that you can use to store your documents and pictures The option Disconnect Network Drive enables you to end the connection Introduction Under the menu heading Images you can implement settings for your image by clicking on Options All image files will then be created by using these settings as standard Imaging Options Profile Default Image Properties Used Sector Imaging Base Image Compression Default Encryption No Encryption Split Automatic Split Size in MB 0 Additional Properties Comment Imaging Method Select the method by which your data is to be secured Imaging Opt
39. ure that the image method Used Sector Imaging has been se lected 3 In the window Image Options click on Advanced By default 3 filters are active Imaging Options Profile Default E File Filter Image 3 Filters Active Compression No Filter Active Imaging Procedure Ignore Bad Sectors No Lock Drive No Data Comparison with Checksums Yes Under File Filter click on Image Click the button on the right next to the active filter to select files and directories A new program window appears Exclude Files from Image Determine the files that are not to be considered when creating the image file Using the wildcards and 7 itis possible to exclude multiple files or all files of a specific file type Excluded Files hiberfil s Daiena L J PC System Volume Information System C Data I E DATA II F Test Volume G l Test2 Volume H a 0 0 0 0 Exclude files from Image Select from the right hand side of the program window the files and directories you wish to exclude from the image Only data on the drive selected by you for imaging can be excluded By using Add you will exclude the checked data from the image 8 Once you have completed your exclusions you can close the window The changes you made will now be incorporated Note Depending on the amount of data on the hard disk the exclusion of files may take a f
40. y functional trial version for up to a maximum of 30 days Should you have any questions please contact our support team The registration assistant allows for a simple registration process When you select the option Enter Registration Code a dialog box will appear where you can enter the reg istration code you received when purchasing the software Please make sure that you do not confuse the letter O with zeros or enter in any empty spaces Press Next to save the registration data or Cancel to leave the dialog window without sa ving the data Should you run into any problems when entering your registration code please contact our support team Note about Licensing You can test O amp O Disklmage for 30 days free of charge and with no obligation The remai ning trial period will be displayed each time you start the program O amp O Disklmage is licensed per computer This means that for every computer on which you run O amp O Disklmage it is necessary that you purchase a license This license may not be transferred onto another computer If you would like to implement O amp O Disklmage in your company or as a technician for your customers then please contact our resellers or distributors who can offer you the right license to fit your needs Important It is not possible to restore a system partition with the trial version To do so you need the full version with the bootable O amp O Disklmage CD Completing Registration
Download Pdf Manuals
Related Search