{"id":8031,"date":"2026-10-17T12:36:17","date_gmt":"2026-10-17T09:36:17","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&#038;p=8031"},"modified":"2026-10-17T12:36:17","modified_gmt":"2026-10-17T09:36:17","slug":"where-does-server-share-protection-backup-the-files-and-can-a-custom-location-be-selected","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/en\/support-articles\/where-does-server-share-protection-backup-the-files-and-can-a-custom-location-be-selected\/","title":{"rendered":"Where does Server Share Protection backup the files and can a custom location be selected?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>Where does Server Share Protection backup the changed files and can a custom location be selected?\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p>The Server Share Protection feature detects malware activity on server shared folders and automatically restore them if they are broken or encrypted by malware.<\/p>\n<p>Server Share Protection creates a session for every new connected user. For every session there is an associated backup folder inside the %ProgramData% \\ WithSecure \\ AmData folder. Server Share Protection analyzes the user session to check if the user is malicious or not.<\/p>\n<p>You can change the default backup folder for Server Share Protection by following these steps:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal\u00a0<\/li>\n<li>Navigate to the <strong>Security Configurations &gt; Profiles<\/strong> page<\/li>\n<li>Open the profile that is in use on the server\u00a0<\/li>\n<li>Go to the <strong>Server share protection <\/strong>settings page<\/li>\n<li>In the <strong>Backup files <\/strong>section, enter the path to the <strong>A custom folder to store backed-up files <\/strong>field<\/li>\n<li>Click <strong>Save profile<\/strong><\/li>\n<\/ol>\n<p>The Server Share Protection &quot;<strong>A custom folder to store backed-up files<\/strong>&quot; folder path must be a path to a folder that already exists on the server locally. The SYSTEM account must have access rights to write to the folder. Otherwise, Server Share Protection is not able to protect shared folders and files.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I have several concerns regarding the restore module that appears in the server profiles.<\/p>\n<p>1.\u00a0It specifies that it is a backup copy that can be made to the files. Specifically which files?<br \/>\n2. Can I choose the files that I want to back up and how?<br \/>\n3. In case of damage by ransomware to these files, how can I restore them?<br \/>\n4. If the copy is local, can I assign a server or a computer on the internal network to save the copy?<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-8031","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005869","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-17 09:36:17","import_hash":"127cd4b5bfc0df5df535897f02289991e2fb3d1c","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article\/8031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=8031"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/support_article_product?post=8031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}