• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 866
  • Last Modified:

Applying permissions to a backup operator account

I want to create a backup account that will only backup data on a few servers.  This backup account will run a scheduled task to backup the current system state.  I have the account made but the account does not have enough permissions.  I want to apply the least privileges principle but the only account who can perform this job is the Domain Admins.  We do not have a power user group or other integrated windows group.  

What would be the best method for applying my backup account backup only enough permissions to run the backup system state in a scheduled task?  
0
Donald_Gibson
Asked:
Donald_Gibson
  • 3
  • 2
2 Solutions
 
Brian PiercePhotographerCommented:
Why not just use the built-in Backup operators group ?
0
 
mahe2000Commented:
you have an user rigth to specify which users can make backups and another to specify who can restore backups. Be sure that users can write in the folder where the backups are stored.

the rights are: "Backup files and directories" and "Restore files and directories"... amazing!!! :)
0
 
Donald_GibsonAuthor Commented:
KCTS - the built-in Backup operator group does allow me to backup.  If I go under Scheduled Tasks, right mouse click on my backup and go to RUN, it says status: Running for a few moments then it goes to blank.

mahe2000 - Where is this user right you speak of?  Is it a group policy setting?
0
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

 
Brian PiercePhotographerCommented:
Backup operators should have these rights - thats what they are for
0
 
Donald_GibsonAuthor Commented:
I agree with you KCTS but I am on a windows 2000 domain that has proprietary software running on the network and the manufactures (Honeywell) made scripts to overwrite policies.  The Backup Operator account will not work.  I am familiar with linking policies to organizational units but how do I view the policy of a group, lets say the Backup Operators?
0
 
Donald_GibsonAuthor Commented:
I found out what I need to do.  I need to go to the local groups and add the Backup Operator to the Backup Operator group.

Thanks for the help guys.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now