• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 139
  • Last Modified:

Need to allow someone to log onto EXCLUSIVELY to run NTbackup to tape and nothing else

Hi All,

I realize that I can grant a user local logon rights to a server (how exactly is this done).  But once's that's accomplished i only want them to have access to NTBACKUP so that they can run the backup to tape.  How to accomplish this?  Please note: I don't want to automatically set the back up to tape, for my own reasons.  Thanks.
1 Solution
To create the local account you will need to open the local users and groups snap in.  Here is how.
note:  if this is a domain controller this will not work since domain controllers dont have local accounts

1. Click Start, and then click Run.
2. In the Open box, type "mmc" (without the quotation marks), and then click OK to start MMC.
3. Start the Local Users and Groups snap-in.
4. Under Console Root, expand "Local Users and Groups", and then click Users.
5. rightclick the white space in the right pane and choose "new user"
6.  set the user name and password,,, now you have created a new user

now you need to put this user in the "backup operators" group

1.  rightclick your new user and choose properties
2.  select the "member of" tab
3.  select "add" and then type in "backup operators"
4.  ok out of everything and you are done.
Nirmal SharmaSolution ArchitectCommented:
>>>Need to allow someone to log onto EXCLUSIVELY to run NTbackup to tape and nothing else

If you want to give this right EXCLUSIVELY then you need to use User Rights Assignment.
1. Goto Start > Administrative Tools > Local Security Policy >
expand the following: -

Security Settings
    Local Policies
        User Rights Assignments
             in righ pane you need to select "Back up files and directories"

Add the user here....Now User has rights to take backup only and nothing else he can do as a member of Backup Operators can do so many things including backup.

Try putting the following into a .reg file and run it after logging on with that user account:

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

Now when they log on they won't even get a desktop, only the NTBackup screen.
If they are resourceful they might press Ctrl-Alt-Del to get taskmgr up and use it to start explorer.exe, so make sure you restrict their rights like the above comments suggested (after you've finished importing the reg file).


Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now