Securing a Backup Server
I work at a small place with 7 computers. I have a backup computer with drives hooked to it that I back everything up to. That is that computers sole purpose, nothing else. I want to see about protecting it from a ransomware attack... My thoughts are, disable internet access, encrypt everything on it, and make the network 1 way. As in I put the backup program on it and it pulls all the files from the other computers through shared folders, without the server sharing anything back. So I would password protect the hell out of the server so nobody could access it but I can access theirs to make backups..
Is this a surefire way to protect it or is there something else I need to do or what?
I should also say I do make monthly external backups so if anything happens then I'm good other than the current month. I just wanted to see if it was possible to secure the server so they wouldn't be screwed on a months worth of data since it's a machine shop and there might be weeks worth of CAD files they drew up that could potentially be lost.
Also is there a benefit to windows server over regular windows 10? I just have a regular computer and it is what does all the backups, didn't know if there was a benefit to windows server edition if all it does is backups..
Thanks for the help!