Backup failure - "ANS5174E A required NT privilege is not held"

mivey

ADSM.ORG Member
Joined
Dec 29, 2003
Messages
37
Reaction score
0
Points
0
Website
http
Anyone know why a backup fails with this error message, even though my account has admin privileges on the machine, and also the group "Everyone" has full control for the folders I'm trying to back up? The only thing I can find when I look up this message is:



Explanation: The user account running TSM does not possess a required NT user right/privilege for performing the current operation.

System Action: Object will not be processed.

User Response: See your system administrator.
 
From TSM support, hopefullt these will be helpful...They both essentially say the same thing, with the latter mentioning the registry. So you are listed in the 'Administrators' group?



Message ANS5174E or ANS1449E on Windows NT, Windows 2000, or Windows 2003 TSM client

Technote (FAQ)



Problem

During TSM backup, the process fails with the ANS5174E or ANS1449E message indicating that the user lacks a required NT permission.



Cause

Generally, the user is attempting to run the incremental or selective command and processing is halted because one of the NT permissions (rights) is lacking.



Solution

Users running backups on NT/2000/2003 require three rights:



o Back up files and directories

o Restore files and directories

o Manage auditing and security logs



The third right is required to access NTFS System Access Control list (SACL) security descriptors.



The SACL is essentially auditing information and every NTFS object has one,

so the client must interrogate it during backup to determine if it needs to be backed up.



By default the "Backup Operator" group does not have the third right, so persons who must back up the node must be given that right. To assign this right, the Windows Administrator must:



1. Click on "Administrative Tools" in the Control Panel

2. Select "Local Security Policy"

3. Open the "Local Policies" folder

4. Click on "User Rights Assignment"

5. Select "Manage auditing and security logs"

6. Add the person or group to receive this right.











ANS5174E A required NT privilege is not held

Technote (FAQ)



Problem

ANS5174E A required NT privilege is not held







Solution

Users running backups on NT/2000 require three rights:

.

o Back up files and directories

o Restore files and directories

o Manage auditing and security logs

.

By default the "Backup Operator" group does not have the last-listed

right so persons who must back up the node must be given that right. To

assign this right, the Windows Administrator must:

.

1. Click on "Administrative Tools" in the Control Panel

2. Select "Local Security Policy"

3. Open the "Local Policies" folder

4. Click on "User Rights Assignment"

5. Select "Manage auditing and security logs"

6. Add the person or group to receive this right.

Users without these rights can only back up files they own and cannot

back up the system registry or files owned by other users. These are

local user rights and must be set using the local User Manager

application, and domain accounts may not automatically be enabled for

them. Domain accounts may be granted local rights by the local User

Manager.

.

The account must also have the following permission to the

HKEY_LOCAL_MACHINE, HKEY_KEY_USERS, and HKEY_CURRENT_USER registry

hives:

Query Value

Set Value

Create Subkey

Enumerate Subkeys

.

The local system account and local administrator group have these

permission by default. Other accounts/groups (including domain

Administrators) must be granted these permission either explicitly

through the registry editor security dialog (regedt32), or implicitly by

adding the account/group to the local Administrators group through the

local User Manager (recommended).
 
CBell,



Mivey said the ID is part of admininstrator group. So, by default, it will have those access unless they changed it.



One of our user also complained the same and permissions look right.
 
Anyone else have any ideas about how to fix this problem? Like I said before, I'm trying to run a manual backup, logged in under my userid, which is in the admin group. I checked all of the items that cbell recommended, but they are all okay. Any other advice would be greatly appreciated. Thanks...
 
OK. But I asked that question because originally I was placed on different (Windows) machines as local user with admin rights. When not able to do certain things with the TSM client, such as configure or run backups, the network guys changed things by taking out my local user account and adding me into the local 'Administrators' group. That did the trick, and I still don't what the difference was or is. Anyway, that's why I asked such an apparently silly question. ;)
 
Back
Top