Question : bkf / bks files

I have just been doing a review of NTFS permissions on shares and dierctories on a windows 2003 server. I came across a backup directory \\localServer\Backup. In this directory are 2 files:

localServer.bkf (8 Gb)
localServer.bks (18 Kb)

Checking the directory ACL, Everyone has "full control" over these files. My question is, are these files likely to be a backup of the Server / OS. Looking in type it says "Windows Backup FIle". If so what can be used to open the bkf files to see what content and ensure there are no sensitive data in them. If they are a backup and I restore them or view the files, will the backup have maintained the NTFS ACL's, or will all files be open to view by anyone who actually gets hold of the bkf file?

Answer : bkf / bks files

Windows backup has no security built in.  It DOES preserve permissions.  If someone grabbed that file and restored it on another machine, they would not IMMEDIATELY be able to access the files - but they could easily take ownership of the files and then not have a problem accessing them.

There is the slightest of chances the file was encrypted on the disk using NTFS encryption, but unlikely (I've never encountered anyone that's even tried to use NTFS encryption - check the properties of the file).

BKF is the standard file name created for NTBackup (Windows Backup in 2000 and 2003) files.  BKS, if memory serves is the SELECTIONS of what was to be backed up (makes sense considering it's size).
Random Solutions  
 
programming4us programming4us