Does Restore-WBBackup preserve alternate data streams and security descriptors during file recovery?
25.5K reputation · 09 Mar 2023, 13:07 UTC
Goal
Determine whether the PowerShell Restore-WBBackup cmdlet retains alternate data streams, extended attributes, and file security descriptors when recovering files from a Windows Server Backup.
Constraints and uncertainty
The Backup module does not provide a built‑in switch to validate metadata integrity after a restore, and documentation does not explicitly state which file system attributes are preserved. Consequently, administrators must rely on external checks, but the exact behavior of Restore-WBBackup with respect to ADS, EA, and ACLs remains unclear.
Specific questions:
- Does
Restore-WBBackuppreserve alternate data streams attached to restored files? - Are extended attributes (such as those used by EFS or custom file system features) retained after a restore?
- Does the restored file inherit the original security descriptor (owner, groups, DACL, SACL) or does it adopt default permissions?