Solved

NT Backup not working using AT-- permissions problem

Posted on 1998-02-03
11
394 Views
Last Modified: 2013-12-19
For some reason, NT backup isn't working with the AT command. I have the backup hardware set up on my PDC, and it'll back up that information fine. When I schedule a ackup of my BDC I get the message "You do not have permission to access portions of. Please see the owner or administrator to get permission.".
The BDC has a share set up for backup (let's call it backup$). The schedule service is runnign as the Administrator. backup operators, domain admins, and (finally) the Administrator have full control of the backup share. I know that the administrator has permission on every directory, every file on that server. Permission is still being denied.

I checked the advanced user rights and made sure the Administrator had 'em all. Still no good. Am I missing something?

The backup$ is mapped to i: on the PDC. The batch file launched every night is NTBACKUP BACKUP  i: /V /R /B /D "FULL BACKUP" /L "C:\LOG\LOG.TXT" /hc:on

the AT command was
at 20:00 /interactive /every:m,t,w,th,f,s cmd /c c:\bkupfull.bat

Any ideas?
0
Comment
Question by:danterrill
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 3

Expert Comment

by:biyiadeniran
ID: 1570768
What kind of access do users access the directory remotely have:
try setting it like this:
NETWORK  Read
if it doesn't work try full control.

Good luck
0
 

Author Comment

by:danterrill
ID: 1570769
The Administrator has full control of the share and the directories. I know I can read all of the files. I know that the schedule service is running as the administrator, but it's almost as if the backup itself is running as another user.
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570770
user that want to backup entire system has to act as part of system. this is a enhanced right !!
make sure that only users who has rigths to
- act as part of operating system
- system backup operator
can invoke such commands.
0
 

Author Comment

by:danterrill
ID: 1570771
I'm afraid that account already has those rights. Any other ideas?
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570772
do you know about object you dont can access too?
I think this can be profiles stored on this BDC because of this will be created with rigths to owner only. Administratros AND system are excluded from this.
On my machines i take over owner ship of all to admin and give full control to user and read access to admin and system.

hope this helps
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:danterrill
ID: 1570773
The schedule account, which is  doing the backup, is the owner of the directories, and has full permissions on them. Guess I'll have to call Microsoft today.
0
 
LVL 1

Accepted Solution

by:
kuk010998 earned 200 total points
ID: 1570774
Tip: schedule a cmd w/ option 'interactive' - once it fires, you have a command prompt reacting quite like your scheduled job would. Anything you start from here works under the schedule account. In general, buying BackupExec or ArcServe is far better than AT-scheduling NTBACKUP. Last thought: Run the schedule service under the system account, then let the batch file first establish the needed network connections (net use X: \\computer\share password /USER:domain\user), call ntbackup then delete the connections. Drive letters used in the batch MUST NOT exist or be mapped by the logged-in user, but the account used is independent. Lastly, you could set up the share used for backup as a null share on the BDC gravely compromising security.
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570775
Sorry this was intended as comment.
0
 

Author Comment

by:danterrill
ID: 1570776
Thanks, KUK -- that did it!
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570777
Heh - have had enough probs with scheduled jobs. Scheduling VB apps - scheduling Access - etc. I even have a machine running two copies of the scheduler under different accounts! The one thing I have had no luck with is sending an email from a scheduled Access code. That scheduled cmd trick I offered is invaluable - e.g. to set up an exchange profile for the system account!
0
 

Author Comment

by:danterrill
ID: 1570778
How did you set up the multiple schedule account?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Resolve DNS query failed errors for Exchange
This tutorial demonstrates a quick way of adding group price to multiple Magento products.
A short film showing how OnPage and Connectwise integration works.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now