

Live images are mostly used for systems that can not be shut down to create the image. This is the reason why you should always test the recovery after the backup. Depending on what is running while you take the image you need to take this into consideration. The worst-case scenario would be that the snapshot would be the "disk state" after a "cold reset". Simply speaking this will be the case for standard software (specifically all Windows features) but there might be problems for non-standard software.


You can create the image both ways, in most cases, the software will make sure that your data is consistent. I'm not sure about Macrium specifically, but the live imaging software suits use more or less the same "technology" to do the live image.
