- v.8.1 does not copy files C:\pagefile.sys and C:\hiberfil.sys
It does if you backup and select ""Forensic Copy"" instead of intelligent sector copy... and edit the Shadow Copy exclusions.
Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\FilesNotToSnapshotMacriumImage
This would also be important for you if wanting exact restores:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\BackupRestore\KeysNotToRestore
Personally, you are not after backup software. Backup software makes changes to images to make it EASIER to restore.
You require "CLONING" software. I suggest you save your time and focus on Cloning Software which will make an exact copy (a clone).
This will be great for forensic recovery, forensic analysis, and especially inspecting hibernation file and other temporary files for computer activity, if required etc.
What is Backup?
The Original and the Copy must be equal in checksum.
Your Operating System is constantly performing copy operations, and each time it checks the Original and the Copy against the checksum.
If you don't check the equality of the original and the copy, then your Operating System will crumble like a house of cards.…
The Macrium Reflect program (as well as many other Backup programs) modifies the Registry files that are located here:
C:\Windows\System32\config\
and here:
C:\Users \[Your User]\NTUSER.DAT
... therefore, strictly speaking, the Macrium Reflect program (like most others) is not a 100% backup program
... by the way, I do not know of any program that can do 100% backup.
Again, you are confusing Cloning with Backup. You can use Imaging software from bootable USB/CD that performs cloning functionality. Usually this is Secter-by-Sector / RAW /
Forensic Copy, which retains all ACTIVE data and any previously deleted data or lost clusters / chains etc. This is VERY different to a standard backup or snapshot (designed for speed).
Well of course the checksums for pagefile.sys and hiberfil.sys will be different - but it does not matter one iota!
Let me repeat, not what I think, but what Macrium state clearly in their documentation.
The data blocks in Pagefile (pagefile.sys) and hibernation (hiberfil.sys) files will be excluded from images. Data blocks in these files are temporary and not required when Windows starts.
The image will contain the MFT entries for these files, ie. their file names and the sectors in use, but
none of the data from those two files has been saved or will be restored. And why doesn't this matter? Because the data in these files was only relevant to the OS while it was running at the time of the image. On a restart all this data is rendered obsolete and invalid, the OS will immediately overwrite it with current data for its new session.
In my line of work, they are required for forensic analysis. So with zero information "why" the users require an exact copy, they are barking up the wrong tree by insisting on backup software to somehow clone their computer. Just like other posts where users insist on using Cloning software to restore to dissimilar hardware!!! People just don't understand and want to jam a piece of the puzzle as hard as they can!
It's essentially a snapshot of your sy
Backups / Snapshots
vs
Cloning / Sector-by-sector / Raw / Forensic backup
Unfortunately few developers give users the complete freedom to dictate exactly what should be retained and what should be removed during backup. I really miss S/W vendors that produced software platforms in the 2000's and 2010's. I grew up on Restrospect backup - these days no one even seems to know about them! The same with ShadowProtect (we're a partner) which I rarely see mentioned as people seem to persist with Macrium or Hasleo etc. There are MUCH better solutions out there!
This is the same debate I have had with Macrium over email, and then asking for help on here, as they were VERY obtuse about making changes for licences already purchased. I had hoped others would help on the forums, but many users seem to have their own agenda or simply no real-world experience (eg. in commercial / enterprise / education / government environments). Such an uphill battle for clients loyal to a business that turns around after MANY years and says "just upgrade to v10"... NOPE!!
