Re: ntbackup will not run as scheduled task using Backup Operators?
From: Trevor (trevorseward_at_hotmail.com)
Date: 11/01/04
- Next message: miku: "Document library"
- Previous message: miku: "Installing Share Point Portal Server 2003"
- In reply to: Pegasus \(MVP\): "Re: ntbackup will not run as scheduled task using Backup Operators?"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 31 Oct 2004 18:47:48 -0800
I don't need explicit permissions:...
Backup Operators
Back up files and directories; Allow log on locally; Restore files and
directories; Shut down the system.
Members of this group can back up and restore all files on domain
controllers in the domain, regardless of their own individual permissions on
those files.
Backup Operators can also log on to domain controllers and shut them down.
This group has no default members.
Because this group has significant power on domain controllers, add users
with caution.
"Pegasus (MVP)" <I.can@fly.com> wrote in message
news:OvsTQX7vEHA.4028@TK2MSFTNGP15.phx.gbl...
> Maybe because your NTFS permissions do not include
> the backup operator's group?
>
>
> "Trevor" <trevorseward@hotmail.com> wrote in message
> news:Ooq1aO7vEHA.3916@TK2MSFTNGP10.phx.gbl...
>> I can already tell it fails out using a runas. I'm just saying that
>> every
>> document I've seen from MS says that this should work under 2003 so why
>> isn't it?
>>
>>
>> "Pegasus (MVP)" <I.can@fly.com> wrote in message
>> news:efYyJk6vEHA.3624@TK2MSFTNGP09.phx.gbl...
>> > Log on under the backup account and check the permissions
>> > in the foreground!
>> >
>> > "Trevor" <trevorseward@hotmail.com> wrote in message
>> > news:uMmK%23S6vEHA.1308@TK2MSFTNGP09.phx.gbl...
>> >> According to MS the BUILTIN\Backup Operators are:
>> >> Backup Operators can override security restrictions for the sole
> purpose
>> > of
>> >> backing up or restoring files
>> >>
>> >> Am I missing something? Yes, Exchange is running at these times.
>> >> Everything that Microsoft has to say with backing up Exchange is that
> the
>> >> user must have "at least" Backup Operator rights. But this doesn't
> seem
>> > to
>> >> work properly.
>> >>
>> >> Thanks!
>> >>
>> >>
>> >> "Pegasus (MVP)" <I.can@fly.com> wrote in message
>> >> news:OjLVLJ6vEHA.3376@TK2MSFTNGP12.phx.gbl...
>> >> >
>> >> > "Trevor" <Trevor@discussions.microsoft.com> wrote in message
>> >> > news:4902C439-8AF5-4547-A73E-D405D118AE0D@microsoft.com...
>> >> >> Server is 2003 w/ Exchange 2003 SP1. I'm attempting to backup the
>> > System
>> >> >> State and Exchange 2003 store.
>> >> >>
>> >> >> I created a user cleverly called "backup" and am using a batch file
> to
>> >> >> execute the backup:
>> >> >> --------
>> >> >> net use Z: \\192.168.1.77\backup
>> >> >>
>> >> >> for /f "Tokens=1-4 Delims=/ " %%i in ('date /t') do set
>> >> > dt=%%i-%%j-%%k-%%l
>> >> >> for /f "Tokens=1" %%i in ('time /t') do set tm=-%%i
>> >> >> set tm=%tm::=-%
>> >> >> set dtt=%dt%%tm%
>> >> >>
>> >> >> C:\WINDOWS\system32\ntbackup.exe backup "@D:\Computer
>> >> >> Backup\ExchangeBackup.bks" /a /d "Exchange %dtt%" /v:yes /r:no
> /rs:no
>> >> > /hc:on
>> >> >> /m copy /j "Exchange Backup %dtt%" /l:s /f "Z:\Computer
>> >> >> Backup\%dtt%-Exchange.bkf"
>> >> >>
>> >> >> net use Z: /delete
>> >> >> exit
>> >> >> --------
>> >> >>
>> >> >> Works very well, as long as the user is a part of the Domain Admins
>> >> >> group.
>> >> >> However, I want this to be a lesser user and was originally
> attempting
>> > to
>> >> > use
>> >> >> Backup Operators.
>> >> >> ntbackup will just fail out if the user is a Backup Operator with
> the
>> >> >> following error:
>> >> >>
>> >> >> -----
>> >> >> The saved selection file "Backup\ExchangeBackup.bks" cannot be
> found.
>> >> >> The saved selection file "Backup\ExchangeBackup.bks" cannot be
> found.
>> >> >> -----
>> >> >>
>> >> >> Makes no sense, why would this work fine as a Domain Admin but not
>> >> >> just
>> >> >> as
>> >> > a
>> >> >> Backup Operator?
>> >> >>
>> >> >> What am I missing?
>> >> >>
>> >> >> Thanks!
>> >> >> Trevor
>> >> >
>> >> > Creating a "backup" account is a good idea. However, it does not
>> > "bypass"
>> >> > permissions, as you put it - it simply runs ntbackup.exe under an
>> > account
>> >> > that has the required authority to run the job.
>> >> >
>> >> > I have seen cases where the error message you quote was generated
>> >> > because Exchange was NOT running at the time.
>> >> >
>> >> > On a different subject: You could do without the lines
>> >> >
>> >> > for /f "Tokens=1-4 Delims=/ " %%i in ('date /t') do set
>> >> > dt=%%i-%%j-%%k-%%l
>> >> > for /f "Tokens=1" %%i in ('time /t') do set tm=-%%i
>> >> > set tm=%tm::=-%
>> >> > set dtt=%dt%%tm%
>> >> >
>> >> > and make the ntbackup.exe switch like so: /d "Exchange %date%
>> >> > %time%"
>> >> >
>> >> >
>> >>
>> >>
>> >
>> >
>>
>>
>
>
- Next message: miku: "Document library"
- Previous message: miku: "Installing Share Point Portal Server 2003"
- In reply to: Pegasus \(MVP\): "Re: ntbackup will not run as scheduled task using Backup Operators?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
