Threads like this are why this is the best forum for any EHR bar none. Kudos to AC for hosting it.

I find for small business IT in general, the advice and discussion here is better than anywhere on the webs.

For backups how long do of a backup history should we keep? Since crypto slowly corrupts files before we recognize it, how long is enough that we could go back and find uncorrupted copies of specific imported times. In other worse what's the longest one should plan for between infection and detection a Crypto virus?

With VMs is it any easier or harder to "authenticate" an AC restoration on v9.x?

I run 1 2012 R2 essentials VM for domain and AC. Using Windows built-in backup on the host "Server 2012 R2 essentials" to 2 alternating usb hard drives. The windows backup is a bit obtuse guess i should try veeam? advantages?

Other general security/backup/crypto prevention recommendations? I'm considering using "Sandboxie" for employee web browsing. Or buy them all Chromebooks and tell them to use those on break?

Larry
Solo IM
Midwest