Announcement

Collapse
No announcement yet.

Incorrect permissions for backup by normal user

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Incorrect permissions for backup by normal user

    Hi everybody,

    I need to do a scheduled backup of the Active Directory from one of my servers to another server running from a normal user account which isn't member of any group with special permissions (i.e. Administrators or Backup Operators).

    So far I assigned this specific user permissions in User Rights Assignment in Local Policies (same as Backup Operators have) and set full access for directories WINDOWS\NTDS and WINDOWS\SYSVOL. This let me access System state backup option via ntbackup, but when I try to run it, it fails to create shadow copy:

    Backup Status
    Operation: Backup
    Active backup destination: File
    Media name: "Backup.bkf created 27. 10. 2006 at 5:32"

    Volume shadow copy creation: Attempt 1.
    Timeout before function completed

    Error returned while creating the volume shadow copy:0xffffffff.

    Error returned while creating the volume shadow copy:ffffffff
    Aborting Backup.

    When I tried to analyse the problem, I figured out, that both vssadmin and Disk Management Concole deny my access to shadow copies due to "incorrect permissions". Does anybody have an idea how to solve this problem? Any help much appreciated.

  • #2
    Re: Incorrect permissions for backup by normal user

    I'm not sure how you are running your backup jobs, but if you create a batch file for running the backup job and schedule that, maybe you could use runas to execute the job with the correct priveliges?

    NTBackup command:
    http://tinyurl.com/y6qwp6

    RunAs command:
    http://tinyurl.com/pj65j
    A wise man once said: "Assumption is the mother of all fu*k ups".

    Any advice I give is to the best of my knowledge, there is no guarantee what so ever that it will actually work in your particular scenario. I will not accept any responsibility for unexpected consequences, after all - you are taking advice from a complete stranger over the internet. =)

    Comment


    • #3
      Re: Incorrect permissions for backup by normal user

      Originally posted by Anders View Post
      I'm not sure how you are running your backup jobs, but if you create a batch file for running the backup job and schedule that, maybe you could use runas to execute the job with the correct priveliges?

      NTBackup command:
      http://tinyurl.com/y6qwp6

      RunAs command:
      http://tinyurl.com/pj65j
      Thanks for reply! Problem is that this backup has to be stored in the directory where only this one specific user have an access so I would probably need to run ntbackup as this user. Also this user cannot be member of Administrators and Backup Operators groups.

      Comment


      • #4
        Re: Incorrect permissions for backup by normal user

        Some update:

        I recognized that runas is actually doing good job running my ntbackup command with /netonly access to the backup directory for my normal user. Runas is run with the Administrator privilege but still prompts for the user's password. Since I want to schedule this job, I would like to runas get necessary credentials automatically but /servcred doesn't work with /netonly access. Some suggestions how to workaround this issue?

        Comment

        Working...
        X