Solved

NT Backup not working using AT-- permissions problem

Posted on 1998-02-03
11
404 Views
Last Modified: 2013-12-19
For some reason, NT backup isn't working with the AT command. I have the backup hardware set up on my PDC, and it'll back up that information fine. When I schedule a ackup of my BDC I get the message "You do not have permission to access portions of. Please see the owner or administrator to get permission.".
The BDC has a share set up for backup (let's call it backup$). The schedule service is runnign as the Administrator. backup operators, domain admins, and (finally) the Administrator have full control of the backup share. I know that the administrator has permission on every directory, every file on that server. Permission is still being denied.

I checked the advanced user rights and made sure the Administrator had 'em all. Still no good. Am I missing something?

The backup$ is mapped to i: on the PDC. The batch file launched every night is NTBACKUP BACKUP  i: /V /R /B /D "FULL BACKUP" /L "C:\LOG\LOG.TXT" /hc:on

the AT command was
at 20:00 /interactive /every:m,t,w,th,f,s cmd /c c:\bkupfull.bat

Any ideas?
0
Comment
Question by:danterrill
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 3

Expert Comment

by:biyiadeniran
ID: 1570768
What kind of access do users access the directory remotely have:
try setting it like this:
NETWORK  Read
if it doesn't work try full control.

Good luck
0
 

Author Comment

by:danterrill
ID: 1570769
The Administrator has full control of the share and the directories. I know I can read all of the files. I know that the schedule service is running as the administrator, but it's almost as if the backup itself is running as another user.
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570770
user that want to backup entire system has to act as part of system. this is a enhanced right !!
make sure that only users who has rigths to
- act as part of operating system
- system backup operator
can invoke such commands.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:danterrill
ID: 1570771
I'm afraid that account already has those rights. Any other ideas?
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570772
do you know about object you dont can access too?
I think this can be profiles stored on this BDC because of this will be created with rigths to owner only. Administratros AND system are excluded from this.
On my machines i take over owner ship of all to admin and give full control to user and read access to admin and system.

hope this helps
0
 

Author Comment

by:danterrill
ID: 1570773
The schedule account, which is  doing the backup, is the owner of the directories, and has full permissions on them. Guess I'll have to call Microsoft today.
0
 
LVL 1

Accepted Solution

by:
kuk010998 earned 200 total points
ID: 1570774
Tip: schedule a cmd w/ option 'interactive' - once it fires, you have a command prompt reacting quite like your scheduled job would. Anything you start from here works under the schedule account. In general, buying BackupExec or ArcServe is far better than AT-scheduling NTBACKUP. Last thought: Run the schedule service under the system account, then let the batch file first establish the needed network connections (net use X: \\computer\share password /USER:domain\user), call ntbackup then delete the connections. Drive letters used in the batch MUST NOT exist or be mapped by the logged-in user, but the account used is independent. Lastly, you could set up the share used for backup as a null share on the BDC gravely compromising security.
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570775
Sorry this was intended as comment.
0
 

Author Comment

by:danterrill
ID: 1570776
Thanks, KUK -- that did it!
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570777
Heh - have had enough probs with scheduled jobs. Scheduling VB apps - scheduling Access - etc. I even have a machine running two copies of the scheduler under different accounts! The one thing I have had no luck with is sending an email from a scheduled Access code. That scheduled cmd trick I offered is invaluable - e.g. to set up an exchange profile for the system account!
0
 

Author Comment

by:danterrill
ID: 1570778
How did you set up the multiple schedule account?
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Downtime reduced, data recovered by utilizing an Experts Exchange Business Account Challenge The United States Marine Corps employs more than 200,000 active-duty Marines with operations in four continents, all requiring complex networking system…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question