About Macrium Image Guardian

To protect Macrium backup files against ransomware attacks, our experienced team of developers added Macrium Image Guardian. MIG will prevent unauthorised modifying of Macrium backup files on local and USB volumes.

Should the worst happen, you can be assured that your latest backups are recoverable. Unlike antivirus software products, MIG is focussed on the single task of protecting Macrium files. It has a small footprint and will not impact the performance of your PC.

Macrium Image Guardian protects your backup files from unauthorised modification.

MIG only grants write access to Macrium Reflect (version 7.1 and later) and any image tools created by us. All other processes will be denied write access.

MIG protects local NTFS volumes and allows Macrium Reflect (version 7.1 and later) to use the protected volume as a shared network resource.

Macrium Image Guardian protection architecture

How Macrium Image Guardian works

Macrium Image Guardian protecting backups in a networked environment

Macrium Image Guardian over a network

In the above illustration, the PC sharing the backup repository (Shared Volume) has a full install of Macrium Reflect, including MIG. A local drive is shared over the network and MIG has been enabled on that drive in the Macrium Reflect user interface.

The other PCs on the network can backup to this shared drive and do not require MIG to be installed. Backup file write access is automatically granted to Macrium Reflect 7.1, and later, all other write access will fail.

The PC hosting the share with MIG installed can be used as a standalone Macrium Reflect installation. The protected drive will prevent unauthorised access to backup files on that drive if the local PC creates backups to the protected volume.

Protected File Types

Extension Backup Type
.mrimg Macrium Reflect image files
.mrbak Macrium Reflect File and Folder backup files
.mrex Macrium Reflect Exchange backup files
.mrsql Macrium Reflect SQL backup files


You can read more about MIG here.

*Note: SQL backup files can only be created to a protect volume by Macrium Reflect running on the local PC. Network write access will be blocked for all processes, including Macrium Reflect. This limitation will be removed in a future update.