On 16/08/07, Troester, Robert <[EMAIL PROTECTED]> wrote: > > "All Windows NT based OS (NT, 2000, XP Pro), are configured by default > to share the entire C drive as C$. This is a special share used for > various administration functions, one of which is to grant access to > backup operators. All you need to do is create a new domain user, > specifically for backup. Then add the new backup user to the built in > ``Backup Operators'' group. You now have backup capability for any > directory on any computer in the domain in one easy step. This avoids > using administrator accounts and only grants permission to do exactly > what you want for the given user, i.e.: backup. Also, for additional > security, you may wish to deny the ability for this user to logon to > computers in the default domain policy."
In my experience, even though this is Microsoft's official stand, this is a lie. The Backup Operators group has no special rights, and you may have to explicitly grant rights to it for it to read files and directories, and in certain cases you might need Administrator to take ownership on those files for you to even grant rights to Backup Operators. At least this was the case in NT4. In fact nothing has special root-like privileges in NT operating systems; not even Administrator or even SYSTEM has rights to read everything. -- cheers, -ambrose Gmail must die. Yes, I use it, but it still must die. PS: Don't trust everything you read in Wikipedia. (Very Important) ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ BackupPC-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
