Norton Ghost

» see ghost.com as it lived, on the wayback machine

~ the eulogy ~

norton ghost was on every machine in my computer engineering lab around 2004. hacettepe had a small windows 2000 lab with maybe sixteen pcs, and every term the IT admins would re-image the entire room from a master ghost file kept on a server share with a floppy boot disk. you would walk in monday morning and the four people who broke something the previous friday had been undone. that was ghost.

murray haszard built it in 1995 for a small new zealand company called binary research in auckland. the name was an acronym: general hardware-oriented system transfer. it ran from a dos boot disk, read a partition byte-by-byte into a.gho file, wrote it back to another disk. that was the whole product. symantec bought binary research in 1998 and rebranded ghost as part of the norton line, which is when the english-speaking world started saying "ghost a drive" as a verb for cloning.

between 1998 and 2010 norton ghost was the default. ghost 2003 ran from a bootable cd and could image an ntfs partition in about fifteen minutes. ghost 9 from 2004 added windows-native cloning so you did not have to boot from cd anymore. ghost 14 from 2007 added the consumer backup product line that ran continuously inside windows. ghost 15 from 2010 was the last consumer release. by then the underlying tech was almost twenty years old and starting to show.

~ the dossier ~

~ what it was ~

the file format itself was the legend. a.gho file was just a compressed image of a partition. you could store it on a network share or on a usb drive, or on a dvd-r set if the partition was large enough to need it. the recovery boot was a dos environment that loaded ghost.exe and let you restore the image with two keystrokes. anyone who managed a small business windows fleet in the 2000s remembers the green-on-black ghost progress bar. it was as ugly as it was reliable.

the enterprise side of ghost was a different product called ghost solution suite. it added remote management and multicast cloning across a network. that product is technically still alive in 2026 under broadcom's symantec enterprise division. but the cultural ghost, the one people meant when they said the word, was the consumer one.

~ how it actually ended ~

ghost 15 from 2010 was the last consumer release. for three years symantec kept selling it as a boxed product and online download. then on march 5 2013 symantec posted an "end of availability" notice on the support site, naming april 30 2013 as the date the consumer product would no longer be sold or developed. the official reason was that ghost did not support uefi or gpt partitions and the team would not be rewriting it. the unofficial reason was that consumer pc backup had moved to cloud services like carbonite or backblaze. the local-disk-imaging market had stopped growing.

~ what came after ~

symantec pointed users toward norton system recovery as the replacement, but that product never inherited the cultural weight of ghost. by 2014 the open source clonezilla had basically taken over the use case for IT shops that still needed offline imaging. ghost lives now as a verb that older IT people still use, sometimes ironically, when they say they will "ghost a machine" before a windows install. it sits in the cluster of consumer-pc utilities from the [[windows-xp]] era that quietly disappeared as computing moved off the local disk.

@}-->--

              )
             (_)
            .-'-.
            |   |
            |   |
            |   |
            |   |
          __|   |__   .-.
       .-'  |   |  `-:   :
      :     `---'     :-'
       `-._       _.-'
           '""""""

« previous  ·  random  ·  next »