danterrill
asked on
NT Backup not working using AT-- permissions problem
For some reason, NT backup isn't working with the AT command. I have the backup hardware set up on my PDC, and it'll back up that information fine. When I schedule a ackup of my BDC I get the message "You do not have permission to access portions of. Please see the owner or administrator to get permission.".
The BDC has a share set up for backup (let's call it backup$). The schedule service is runnign as the Administrator. backup operators, domain admins, and (finally) the Administrator have full control of the backup share. I know that the administrator has permission on every directory, every file on that server. Permission is still being denied.
I checked the advanced user rights and made sure the Administrator had 'em all. Still no good. Am I missing something?
The backup$ is mapped to i: on the PDC. The batch file launched every night is NTBACKUP BACKUP i: /V /R /B /D "FULL BACKUP" /L "C:\LOG\LOG.TXT" /hc:on
the AT command was
at 20:00 /interactive /every:m,t,w,th,f,s cmd /c c:\bkupfull.bat
Any ideas?
The BDC has a share set up for backup (let's call it backup$). The schedule service is runnign as the Administrator. backup operators, domain admins, and (finally) the Administrator have full control of the backup share. I know that the administrator has permission on every directory, every file on that server. Permission is still being denied.
I checked the advanced user rights and made sure the Administrator had 'em all. Still no good. Am I missing something?
The backup$ is mapped to i: on the PDC. The batch file launched every night is NTBACKUP BACKUP i: /V /R /B /D "FULL BACKUP" /L "C:\LOG\LOG.TXT" /hc:on
the AT command was
at 20:00 /interactive /every:m,t,w,th,f,s cmd /c c:\bkupfull.bat
Any ideas?
ASKER
The Administrator has full control of the share and the directories. I know I can read all of the files. I know that the schedule service is running as the administrator, but it's almost as if the backup itself is running as another user.
user that want to backup entire system has to act as part of system. this is a enhanced right !!
make sure that only users who has rigths to
- act as part of operating system
- system backup operator
can invoke such commands.
make sure that only users who has rigths to
- act as part of operating system
- system backup operator
can invoke such commands.
ASKER
I'm afraid that account already has those rights. Any other ideas?
do you know about object you dont can access too?
I think this can be profiles stored on this BDC because of this will be created with rigths to owner only. Administratros AND system are excluded from this.
On my machines i take over owner ship of all to admin and give full control to user and read access to admin and system.
hope this helps
I think this can be profiles stored on this BDC because of this will be created with rigths to owner only. Administratros AND system are excluded from this.
On my machines i take over owner ship of all to admin and give full control to user and read access to admin and system.
hope this helps
ASKER
The schedule account, which is doing the backup, is the owner of the directories, and has full permissions on them. Guess I'll have to call Microsoft today.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Sorry this was intended as comment.
ASKER
Thanks, KUK -- that did it!
Heh - have had enough probs with scheduled jobs. Scheduling VB apps - scheduling Access - etc. I even have a machine running two copies of the scheduler under different accounts! The one thing I have had no luck with is sending an email from a scheduled Access code. That scheduled cmd trick I offered is invaluable - e.g. to set up an exchange profile for the system account!
ASKER
How did you set up the multiple schedule account?
try setting it like this:
NETWORK Read
if it doesn't work try full control.
Good luck