Solved

Applying permissions to a backup operator account

Posted on 2008-06-17
6
859 Views
Last Modified: 2013-12-05
I want to create a backup account that will only backup data on a few servers.  This backup account will run a scheduled task to backup the current system state.  I have the account made but the account does not have enough permissions.  I want to apply the least privileges principle but the only account who can perform this job is the Domain Admins.  We do not have a power user group or other integrated windows group.  

What would be the best method for applying my backup account backup only enough permissions to run the backup system state in a scheduled task?  
0
Comment
Question by:Donald_Gibson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 400 total points
ID: 21804753
Why not just use the built-in Backup operators group ?
0
 
LVL 3

Assisted Solution

by:mahe2000
mahe2000 earned 100 total points
ID: 21805005
you have an user rigth to specify which users can make backups and another to specify who can restore backups. Be sure that users can write in the folder where the backups are stored.

the rights are: "Backup files and directories" and "Restore files and directories"... amazing!!! :)
0
 
LVL 2

Author Comment

by:Donald_Gibson
ID: 21805274
KCTS - the built-in Backup operator group does allow me to backup.  If I go under Scheduled Tasks, right mouse click on my backup and go to RUN, it says status: Running for a few moments then it goes to blank.

mahe2000 - Where is this user right you speak of?  Is it a group policy setting?
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 70

Expert Comment

by:KCTS
ID: 21805295
Backup operators should have these rights - thats what they are for
0
 
LVL 2

Author Comment

by:Donald_Gibson
ID: 21805364
I agree with you KCTS but I am on a windows 2000 domain that has proprietary software running on the network and the manufactures (Honeywell) made scripts to overwrite policies.  The Backup Operator account will not work.  I am familiar with linking policies to organizational units but how do I view the policy of a group, lets say the Backup Operators?
0
 
LVL 2

Author Comment

by:Donald_Gibson
ID: 21805833
I found out what I need to do.  I need to go to the local groups and add the Backup Operator to the Backup Operator group.

Thanks for the help guys.
0

Featured Post

Guide to Performance: Optimization & Monitoring

Nowadays, monitoring is a mixture of tools, systems, and codes—making it a very complex process. And with this complexity, comes variables for failure. Get DZone’s new Guide to Performance to learn how to proactively find these variables and solve them before a disruption occurs.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
Recently, Microsoft released a best-practice guide for securing Active Directory. It's a whopping 300+ pages long. Those of us tasked with securing our company’s databases and systems would, ideally, have time to devote to learning the ins and outs…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question