Announcement

Collapse
No announcement yet.

Give access to check backup status page

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Give access to check backup status page

    Hi

    I need to give a user access to https://servername/backup/default.aspx , so that they can check on the backup status when i'm hols

    Problem is the user receives this message when accesing the page:

    You do not have the correct permissions to view this page. For more information contact your system administrator.

    To view this page, you must be a member of the Domain Admins security group.

    Obviously I do not get this error.

    i have given user full permissions to the directory c:\inetpub\backup, restarted iis and user's pc and no joy

    Please help




    Thanks

  • #2
    Re: Give access to check backup status page

    any ideas guys

    Comment


    • #3
      Re: Give access to check backup status page

      did you already reviewed the IIS logs?
      Marcel
      Technical Consultant
      Netherlands
      http://www.phetios.com
      http://blog.nessus.nl

      MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
      "No matter how secure, there is always the human factor."

      "Enjoy life today, tomorrow may never come."
      "If you're going through hell, keep going. ~Winston Churchill"

      Comment


      • #4
        Re: Give access to check backup status page

        This is an extract of the log when Danny (user) tries to access this page.

        Doesn't mean anything to me.


        2007-12-21 13:45:23 192.168.0.10 GET /backup/default.aspx - 80 SERVERNAME\danny 192.168.0.252 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.N ET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0 1358 471

        I think I have to give upon this, spending to much time on it.

        Comment


        • #5
          Re: Give access to check backup status page

          Made the user a member of Domain Admin, which displays the page successfully.

          What is the implications of adding a user to this group?

          What can they do ?

          Comment


          • #6
            Re: Give access to check backup status page

            Well the user can break everything if he likes. Even you're server.
            Also it's possible he can read everything he likes.

            I wouldn't do that if i where you.

            The site, does he connect to a database or something and is it possible he doesnt have the right permissions over there?
            Are the permissions within IIS set correctly?
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Re: Give access to check backup status page

              I personally am not very good with IIS permissions, so I would tackle it another way.
              Add the backup logs to the server status reports, then e-mail Danny the status reports everyday. Would that solve your problem?
              And for G-d's sake - DON"T MAKE HIM A DOMAIN ADMIN!

              Season's Greetings.
              TIA

              Steven Teiger [SBS-MVP(2003-2009)]
              http://www.wintra.co.il/
              sigpic
              Iím honoured to have been selected for the SMB 150 list for 2013. This is the third time in succession (no logo available for 2011) that I have been honoured with this award.

              We donít stop playing because we grow old, we grow old because we stop playing.

              Comment


              • #8
                Re: Give access to check backup status page

                The IIS log entry indicates successful access to the page as evidenced by the 200 status code and the data exchanged between the client and server at the end of the log entry, so I think that the problem is not with IIS but with the application. AFAIK, IIS has no inherent "To view this page, you must be a member of the Domain Admins security group" error file so if you are getting this message I would think that the backup application is the cause of the issue and you should look to that to find the answer. What is the backup application?

                Comment


                • #9
                  Re: Give access to check backup status page

                  Originally posted by joeqwerty View Post
                  What is the backup application?
                  Joeqwerty
                  It is part of the standard SBS installation, which uses NTBackup in an envelope called bkuprunner (IIRC) and the Server Management console displays the results by using the URL the original poster quoted.
                  TIA

                  Steven Teiger [SBS-MVP(2003-2009)]
                  http://www.wintra.co.il/
                  sigpic
                  Iím honoured to have been selected for the SMB 150 list for 2013. This is the third time in succession (no logo available for 2011) that I have been honoured with this award.

                  We donít stop playing because we grow old, we grow old because we stop playing.

                  Comment


                  • #10
                    Re: Give access to check backup status page

                    OK. I was basing my post on the standard 403 errors in IIS. I guess I don't understand why the 200 Status OK is in the log entry then. It seems that the user has access to the page, but not the application. What if the user were put into the Backup Operators group (assuming there is one in SBS)?

                    Comment

                    Working...
                    X