How to use Snapshot to recover files?

The Snapshot feature allows admins to easily copy a Team Share or a user’s personal data as it existed at a specific point in time, including content that was previously deleted, recreated, or changed. The Snapshot feature even recovers the revision history of restored content, starting from the selected date.
 

Ransomware is a type of malware that denies access to infected data, demanding a payment to remove the restriction.  In many instances, you can use Restore Deleted and Revision Rollback feature to restore affected files to their previous, healthy condition.

However, advanced ransomware attacks might delete, recreate, then change files names, affecting a file’s revision history, and preventing you from restoring to a previous revision. The Snapshot feature helps you recover from these attacks, allowing you to restore data as it existed before the infection.
 

In addition to ransomware recovery, you can also use the Snapshot feature for data management. If an employee resigns from an organization, you might decide to clone his personal root folder as a Team Share and retain this content as a record or archive.

Technical Note: 

Please note that purged files and folders cannot be recovered using this feature. Purged files and folders are defined as:

• Files and folders that have been deleted and then purged
• Files and folders that have been deleted, purged, and then manually recreated
• Files and folders that have been moved from a folder location that is later deleted and purged; in these instances, the revisions captured in the original folder location will not be recovered. Purge settings can be managed as an organization policy.

When using the Snapshot feature to recover Team Share data, the system will copy the data into a new Team Share. Administrators can then subscribe appropriate users to this new Team Share.

1. In the administrative web portal, click the Shares tab. The Shares page displays, listing all existing Team Shares.
    
2. Find the affected Team Share and click its Snapshot button.
   
   

   

   
    
3.  In the Snapshot dialog box, enter the following information:
   
   
   1. In the New Team Share Name field, enter the name of the new Team Share.
       
   2. Select the Only Include Data Up To The Following Point In Time checkbox if you need to capture files from a specific point in time. Then, select a date prior to when the Team Share was affected.
       
   3. Click the OK button when you are finished. Or click, the Cancel button if you do not wish to proceed. Please note that this procedure might take several minutes.

When using the Snapshot feature to recover a user’s personal data, the system will copy the user’s personal root folder into a new Team Share. Administrators can then subscribe appropriate users to this new Team Share.

1. In the administrative web portal, click the Accounts tab. The Accounts page displays, listing all existing user accounts.
    
2. Find the affected user account and click its Snapshot button.
    
   

   

   
   
   
    
3.  In the Snapshot dialog box, enter the following information:
   
   
   1. In the New Team Share Name field, enter the name of the new Team Share.
       
   2. Select the Only Include Data Up to The Following Point In Time checkbox if you need to capture files from a specific point in time. Then, select a date prior to when the data was affected.
       
   3. Click the OK button when you are finished. Or click, the Cancel button if you do not wish to proceed. Please note that this procedure might take several minutes.
       
   4. In the Confirm Snapshot dialog box, click the Yes button to confirm. Administrators will then have the ability to add appropriate subscribers to this new Team Share.
       
   5. Optionally, review the status indicator in the Team Share page, or review the Activity Log to confirm the completion of this process.

The Rollback pop-up window displays, prompting you to select a date and time. Select a day and time before the time to which you want to restore. For example, if you select June 25th at 12:40 PM, the feature will find the first file version before June 25th at 12:40.  If a version exists at 12:40 and another at 12:39, the file at 12:39 will be restored.

The servers are located in the Netherlands. Keep the time difference in mind.

 Click Rollback when you are finished.