II. Background: Windows Disk Format
- Partition Tables
- GUID Partitition Table (GPT)
- Typical partition table for most disks since allows virtually unlimited disk size (9 Zettabytes = 9 Billion Terabytes)
- Master Boot Record (MBR)
- Older legacy systems and tools (e.g. Microsoft Recovery Tool still creates MBR) allow a maximum of 2 terabytes
- GUID Partitition Table (GPT)
- File systems
- New Technology File System (NTFS)
- Default file system on Windows client and server machines (replaced FAT, FAT32, ExFat)
- Is read-only when used on a Mac (use ExFat instead for external discs used for both OS)
- Extended File Allocation Table (ExFat)
- Older file format allows read/write on both Windows and Mac
- Optimized for SSD, SD cards
- Resilient File System (ReFS)
- Windows server file system option (starting with 2012)
- Ultimately Microsoft intends to replace NTFS with ReFS
- New Technology File System (NTFS)
- Utilities
- Disk Management utility (or from within Computer Management Utility)
- Diskpart (command-line utility, type Diskpart at command line or powershell to start)
- List Disk, List Partition, List Volume
- Powershell
- Get-Disk
- References
- Warner (2016) Comptia A+, Pluralsight
III. Types: Storage Devices
- Mechanical Hard Drives (magnetic hard disks)
- Aluminum platters spin (7200 rpm on desktop, faster = less latency) under actuator arm with read-write head
- Iron oxide on surface can be magnetized and represent individual bits (1=magnetic, 0=unmagnetized)
- Each disc has heads (sides), tracks (concentric rings), sectors (pie slice of platter, 512B), clusters (track sections)
- Sectors are grouped into clusters
- Each cluster is the smallest amount of disk space an file will be written
- NTFS will typically have 4 KB clusters (exception: 8-64 KB if drive/volume >16 TB)
- ExFat will typically have 128 KB clusters (unless drive <32 GB)
- Files are saved to complete clusters (e.g. a 6 kb file would use an 8 kb cluster)
- Hard drive enclosures allow USB access to internal drive (e.g. from failed system)
- https://en.wikipedia.org/wiki/Hard_disk_drive
- Solid State Devices
- Solid State Hard Drives (SSD)
- Modern, more expensive, faster drives with non-volatile RAM, gradually replacing mechanical drive
- Flash drives can fail suddenly (contrast with mechanical drives which often gradually fail)
- https://en.wikipedia.org/wiki/Solid-state_drive
- Flash Memory Cards (compact flash, SD, micro SD)
- Number on card represents flash memory speed rating (higher numbers, e.g. 10, are faster)
- https://en.wikipedia.org/wiki/Memory_card
- USB Keys (thumb drive, USB memory stick)
- Available with encryption and password protection (even with keypad on USB key)
- https://en.wikipedia.org/wiki/USB_flash_drive#Security_systems
- Solid State Hard Drives (SSD)
- Optical Drives (CD, DVD, Blue Ray)
- At least with computer use, replaced by more durable, faster and higher capacity devices
- https://en.wikipedia.org/wiki/Optical_disc_drive
- Tape Drives and Magnetic Tape Data Storage
- Large capacity tape (e.g. 500 GB) still used for longterm, reliable data backup (often off-site)
- https://en.wikipedia.org/wiki/Magnetic_tape_data_storage
IV. Typres: Interfaces (primarily Mechanical Hard Drives)
- Parallel ATA (PATA) or Enhanced Integrated Drive Electronics (EIDE, IDE)
- Older, slower, 40 pin ribbon cable connected drives, configured with jumper connectors
- https://en.wikipedia.org/wiki/Parallel_ATA
- Serial ATA (SATA or eSATA)
- Modern drive interface for desktop and server machines (set-up without jumpers; set in BIOS)
- SATA speeds increase from SATA 1 (1.5 GBit/s), SATA 2 (3 GBit/s) to SATA 3 (6 GBit/s)
- https://en.wikipedia.org/wiki/Serial_ATA
- Small Computer System Interface (SCSI)
- Older, parallel protocol, which allowed daisy-chaining of devices; replaced by SAS (serial SCSI)
- https://en.wikipedia.org/wiki/SCSI
- Serial Attached SCSI (SAS)
- Modern serial SCSI interface for multiple drives daisy-chained used in high-end machines and servers
- Internal and external drives are attached to a host bus adapter
- https://en.wikipedia.org/wiki/Serial_Attached_SCSI
V. Types: Redundant Array of Independent Disks (RAID) Types
- Precautions
- RAID is best coordinated by a dedicated expansion card (hardware instead of software) for best performance
- RAID is not a replacement for system backup
- RAID 0 (Striping optimizes for speed)
- Data is striped across 2 disks, allowing for rapid data read/write (however, all data is lost when 1 drive fails)
- RAID 1 (Mirroring optimizes for redundancy)
- Identical data is written to each of 2 mirrored disks (at expense of losing 50% of available storage)
- RAID 5 (Disk Striping AND Parity/redundancy)
- Data is striped across at least 3-4 disks, with Parity data written to another drive
- RAID 01 or RAID 0+1 (Combines RAID 0 and RAID 1)
- One pair of drives is striped (RAID 0) and then the drive pair is mirrored to another drive pair (RAID 1)
- RAID 10 or RAID 1+0 (Combines RAID 1 and RAID 0)
- One drive is striped with another and each drive is mirrored to another set of drives
- Resources
VI. Differential Diagnosis: Storage Problems
- Precautions
- All hard drives (mechanical and SSD fail) unexpectedly
- Frequent backups are key
- Consider RAID Array
- Mechanical Hard Drive Head Crash
- Read/Write Head may be disrupted from disk platter with system jarring or fall
- Read-Write Failure
- Data-cable defect (try a different SATA cable)
- Hard disk defect (clone immediately to retain as much data as possible)
- Slow disk performance
- Limited free space on operating system drive (e.g. C:\)
- Fragmentation (Defragment Mechanical Hard Drives, but NOT SSD)
- Loud clicking or clunking noise
- Expect a quiet chirping from Mechanical Hard Drives in general
- Drive failure (clone immediately to retain as much data as possible)
- Drive not recognized
- Loose or missing SATA cables
VII. Management: Storage Devices Software Tools
- Defragmentation software (e.g. windows)
- Only defragment Mechanical Hard Drives
- Do NOT defragment SSD or Solid State Drives
- SSD defragmentation shortens life of SSD drive
- Unlike, mechanical drives, SSD Defragmentation does not offer significant performance benefit
- TRIM command can be used with SSD to mark open areas of writeable memory
- Self Monitoring, Analysis and Reporting Technology (SMART)
- Various software packages (e.g. Crystal Disk Info) predicts drive failure before it occurs (based on disk metadata)
- File Recovery Software
- Acronis Backup
- Windows File History (must be enabled)
- Apple Time Machine
- Windows command line utilities (run in Powershell)
- Background
- Command line tools are largely replaced by powershell (and graphical utilities)
- These command line tools are still used to create scripts to perform task automatically (bat files)
- Chkdsk
- Chkdsk /?
- Provides help
- Chkdsc c:
- Checks the C drive (and should return "..found no problems, no further action required")
- Chkdsk /?
- Format
- Formats a hard drive (careful - confirm the correct hard drive letter!)
- DiskPart
- Prompt becomes "DISKPART"
- "Help" displays help information
- List disk wil display disk information (similar to powershell "get disk")
- Allows for partitioning and defragmentation from the command line
- BootRec
- Utility that repairs critical disk structures
- Background
- Windows GUI Utilities
- Optimize Drives (and defragment)
- Allows for automation of Mechanical Hard Drive defragmentation on a scheduled basis
- SSD Drives will be defaulted to TRIM command (not defragmentation)
- Windows Explorer Disk Properties
- Tools Tab has links to GUI versions of "Check Disk" and "Optimize"
- Computer Management - Disk Management Tab (or Disk Management Utility)
- Allows visualization of disks and tools for formatting/partitioning
- Optimize Drives (and defragment)
-
Windows Powershell
- Get-Command -Module Storage | Select-Object -Property Name
- Get-Disk
VIII. References
- Warner (2015) CompTIA A+, Pluralsight