In an accounting firm, losing SAGA data is not just an inconvenience - it can mean days or weeks of lost work, penalties, loss of client trust, and even legal issues. The SAGA server can be affected by hardware failures, ransomware, human errors, or cyberattacks. A daily, automated, and offloaded backup is essential.

Here is a simple, affordable, and highly effective solution: backup script +archiver + Synology NAS with RAID 1 and write-only user.

How the Solution Works

1. The script runs automatically via Windows Task Scheduler on the SAGA server (or any computer with access to the data folder).

2. It archives the SAGA folder using 7-Zip, applying an exclusion list (temporary files, unnecessary logs, open database files, etc.).

3. It copies the archive to a Synology NAS mapped as a network drive.

Everything happens without human intervention, every night.

Synology Configuration – RAID 1 (Mirroring)

We recommend at least two identical hard drives configured in RAID 1 (Synology Hybrid RAID or classic RAID 1).

• If one disk fails, data remains safe on the other.

• Synology sends immediate email/SMS notifications in case of disk errors.

• A third disk can be added later as a hot spare.

This configuration offers excellent hardware-level protection at a reasonable cost.

Write-Only Dedicated User – The Most Important Security Measure

This is the strongest point of the solution:

• Create a dedicated user on Synology (e.g., saga_backup).

• This user has only Write permission in the backup folder.

• It has no Read permission and no delete rights.

Why is this so important?

• Even if the SAGA server is infected with ransomware, the virus cannot read the existing backups on the NAS.

• It cannot delete or encrypt previous backups.

• The attacker sees an empty folder or has no access to the content.

This turns the NAS into a simple but very effective “WORM-light” (Write Once, Read Many) storage.

Mapping the Network Drive in Windows

On the SAGA server (or backup workstation), map the Synology folder as follows:

1. Open File Explorer → This PC → Map network drive.

2. Choose a drive letter (e.g., Z:).

3. Folder: \\Synology-IP\backup-folder-name

4. Check “Connect using different credentials” and enter the saga_backup user (write-only).

5. Optional: Check “Reconnect at sign-in”.

The script will then see the NAS as a normal drive (Z:\).

Advantages of This Solution

• Low cost (a Synology DS223j or DS224+ with 2 NAS HDDs is enough for most firms).

• Full automation.

• Double protection: RAID 1 + write-only user.

• Fast restore - you can restore a full archive or individual databases anytime.

• Backup history (keep 7–30 days of archives).

• Independence from cloud providers (can be combined with another cloud for true off-site).

Additional Recommendations

• Run the script late at night (after SAGA is closed).

• Keep at least one off-site backup (another NAS, in the cloud or external drive).

This solution is already successfully used by several accounting firms and offers an excellent price/performance ratio.