Solved

NT Backup not working using AT-- permissions problem

Posted on 1998-02-03
11
423 Views
Last Modified: 2013-12-19
For some reason, NT backup isn't working with the AT command. I have the backup hardware set up on my PDC, and it'll back up that information fine. When I schedule a ackup of my BDC I get the message "You do not have permission to access portions of. Please see the owner or administrator to get permission.".
The BDC has a share set up for backup (let's call it backup$). The schedule service is runnign as the Administrator. backup operators, domain admins, and (finally) the Administrator have full control of the backup share. I know that the administrator has permission on every directory, every file on that server. Permission is still being denied.

I checked the advanced user rights and made sure the Administrator had 'em all. Still no good. Am I missing something?

The backup$ is mapped to i: on the PDC. The batch file launched every night is NTBACKUP BACKUP  i: /V /R /B /D "FULL BACKUP" /L "C:\LOG\LOG.TXT" /hc:on

the AT command was
at 20:00 /interactive /every:m,t,w,th,f,s cmd /c c:\bkupfull.bat

Any ideas?
0
Comment
Question by:danterrill
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 3

Expert Comment

by:biyiadeniran
ID: 1570768
What kind of access do users access the directory remotely have:
try setting it like this:
NETWORK  Read
if it doesn't work try full control.

Good luck
0
 

Author Comment

by:danterrill
ID: 1570769
The Administrator has full control of the share and the directories. I know I can read all of the files. I know that the schedule service is running as the administrator, but it's almost as if the backup itself is running as another user.
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570770
user that want to backup entire system has to act as part of system. this is a enhanced right !!
make sure that only users who has rigths to
- act as part of operating system
- system backup operator
can invoke such commands.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 

Author Comment

by:danterrill
ID: 1570771
I'm afraid that account already has those rights. Any other ideas?
0
 
LVL 5

Expert Comment

by:heiko
ID: 1570772
do you know about object you dont can access too?
I think this can be profiles stored on this BDC because of this will be created with rigths to owner only. Administratros AND system are excluded from this.
On my machines i take over owner ship of all to admin and give full control to user and read access to admin and system.

hope this helps
0
 

Author Comment

by:danterrill
ID: 1570773
The schedule account, which is  doing the backup, is the owner of the directories, and has full permissions on them. Guess I'll have to call Microsoft today.
0
 
LVL 1

Accepted Solution

by:
kuk010998 earned 200 total points
ID: 1570774
Tip: schedule a cmd w/ option 'interactive' - once it fires, you have a command prompt reacting quite like your scheduled job would. Anything you start from here works under the schedule account. In general, buying BackupExec or ArcServe is far better than AT-scheduling NTBACKUP. Last thought: Run the schedule service under the system account, then let the batch file first establish the needed network connections (net use X: \\computer\share password /USER:domain\user), call ntbackup then delete the connections. Drive letters used in the batch MUST NOT exist or be mapped by the logged-in user, but the account used is independent. Lastly, you could set up the share used for backup as a null share on the BDC gravely compromising security.
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570775
Sorry this was intended as comment.
0
 

Author Comment

by:danterrill
ID: 1570776
Thanks, KUK -- that did it!
0
 
LVL 1

Expert Comment

by:kuk010998
ID: 1570777
Heh - have had enough probs with scheduled jobs. Scheduling VB apps - scheduling Access - etc. I even have a machine running two copies of the scheduler under different accounts! The one thing I have had no luck with is sending an email from a scheduled Access code. That scheduled cmd trick I offered is invaluable - e.g. to set up an exchange profile for the system account!
0
 

Author Comment

by:danterrill
ID: 1570778
How did you set up the multiple schedule account?
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article is in response to a question (http://www.experts-exchange.com/Networking/Network_Management/Network_Analysis/Q_28230497.html) here at Experts Exchange. The Original Poster (OP) requires a utility that will accept a list of IP addresses …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question