Re: Robocopy Security and Authorization

Scheduled Tasks|Advanced|View Log may provide some details. If the job
connects to another machine you may need to add the user/ group 'logon as
batch job' rights (server side). Control Panel|Admin Tools|Local Security
Policy\Local Policies\User Rights Assignments
"Log on as a batch job"

If the task completes but the job does not then there is a problem in the
job itself. Remember that if it involves network resources to make sure the
user account has permissions to the resources and also use UNC paths as
mapped drives won't natively exist when no one is logged on.

--

Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

<peter.piotti@xxxxxxxxxxxx> wrote:
|I am running Windows Server 2003R2 and trying to use robocopy to
| perform nightly backups. I created a BAT file continong the
| appropriate robocopy commands.
|
| If I create a scheduled task to run the bat file using an account with
| administrator privledges, it runs fine. But I don't want the account
| running robocopy to have admin rights. I created a user account called
| RobocopyUser just for running the back up. I made it a member of
| Users, Backup Operators and Distributed COM Users. I gave the account
| full control over the directories it reads from and writes to. It
| still doesn't work.
|
| What can I do short of giving RobocopyUser admin rights?
|
| Thanks,
| Pete
|


.

Relevant Pages

  • Re: Robocopy Security and Authorization
    ... It appears that the problem is access to run the bat file itself. ... Robocopy doesn't even generate its log file. ... I also gave the RobocopyUser full rights to the BAT file, ... I noticed that the AT servce acct is the 'System' account. ...
    (microsoft.public.windows.server.general)
  • Re: delegating control over ou
    ... i didn't know which rights are responsible for ... locking an account was my mistake - of course it is ... not usefull to lock user account! ... >This is provided in the delegation wizard. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Account Lock out
    ... This is difference question on how to what rights to grant so that a domain ... user account will have unlimited number times to join workstations as a ... Domain administrator account to join workstation to the domain) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Denying Account deletion
    ... I dont have access to run this command from this site, ... that will allow them to manipulate all user account rights including ... disabling the account - without the rights to delete the account. ...
    (microsoft.public.windows.server.active_directory)
  • Denying Account deletion
    ... will allow them to manipulate all user account rights including disabling ... the account - without the rights to delete the account. ...
    (microsoft.public.windows.server.active_directory)