BackupPC-users

Re: [BackupPC-users] Lots of nt_status_access_denied errors 2012R2

2014-02-12 13:47:19
Subject: Re: [BackupPC-users] Lots of nt_status_access_denied errors 2012R2
From: Arnold Krille <arnold AT arnoldarts DOT de>
To: backuppc-users AT lists.sourceforge DOT net
Date: Wed, 12 Feb 2014 19:45:15 +0100
On Wed, 12 Feb 2014 11:45:35 -0600 Les Mikesell <lesmikesell AT gmail DOT com>
wrote:
> On Wed, Feb 12, 2014 at 9:44 AM, Michael Stowe
> <mstowe AT chicago.us.mensa DOT org> wrote:
> >
> >> Adding the backuppc user account to the Backup Operators group
> >> made no difference.
> >
> > The "Backup Operators" group has special privileges on the domain
> > to log on to domain controllers and shut them down, as well as back
> > up and restore files on domain controllers.
> >
> > This doesn't do you a lot of good because this doesn't have a lot
> > to do with user files, or smb/cifs access to files, nor does it
> > anticipate, say, locked files or anything of the sort.
> >
> > So, if you want to back up files via smb/cifs, you'll have to grant
> > permission to a user to read those files, and more or less accept
> > the fact that open files won't be available at all.
> 
> But shouldn't a user who is a member of the administrator and backup
> operator groups have permission to read everything that isn't locked?

No. On windows users can prevent the Administrator from reading their
files. To regain access to these file, the Administrator first has to
become the owner of the file, then he is allowed to change the
permissions and include himself back in.

Either try your luck with one of the shadow-copy tools or have your
users save the important data on a samba(4) server.

Fun fact: There was a time when you could prevent Windows from booting
by deactivating the logging service. Every other service failed to
start and told you to look into the log to determine the reason:-)

Have fun,

Arnold

Attachment: signature.asc
Description: PGP signature

------------------------------------------------------------------------------
Android apps run on BlackBerry 10
Introducing the new BlackBerry 10.2.1 Runtime for Android apps.
Now with support for Jelly Bean, Bluetooth, Mapview and more.
Get your Android app in front of a whole new audience.  Start now.
http://pubads.g.doubleclick.net/gampad/clk?id=124407151&iu=/4140/ostg.clktrk
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/