Administrator rights

From: Nils M. Lunde (nilsml_at_options.no)
Date: 02/18/04 

Date: Wed, 18 Feb 2004 13:50:50 +0100

Hi!

I have a few simple questions that I hope someone would take the time to
answer:

Question 1:
-----------
I have a PDC for domain MYDOMAIN running Windows 2000 Server.
On the PDC i have a Builtin group called Backup Operators, and a user called
Backup who is member of this group.

I have a folder, Backup, where only members of the group Backup Operators
have access.

When I try to log on using the Backup user, it works fine; the user is able
to both read from and write to the folder.
Then I made the Administrator member of the Backup Operators group, and
thought that also this user would be able to access this folder. I was
wrong. The Administrator is unable to gain access to this folder unless I
give Administrators or Domain Admins groups access.

Can anyone tell me why this is happening?
I don't want any lecture in "best practice", I only want to know the logics
in why the Administrator is denied access although he is member of the same
group as the Backup user.

Question 2:
-----------
I read from the Windows 2000 documentation that the Backup user should be
able to copy folders that he doesn't have access to.
Is that true no matter what backup program I use if I run it as Backup user?
I tried copiing a folder that I didn't have access to while loged in as
Backup, but without any luck.

Could anyone please tell me how these things work?

Thanks in advance!

-Nils Magne Lunde
Options AS

Relevant Pages

  • Re: ntbackup problem with Outlook Express dbx files after XP SP3
    ... Log on as Administrator. ... Unhide the folder "Application Data". ... Start a Command Prompt. ... Any backup jobs that have files BELOW this directory do NOT run. ...
    (microsoft.public.windowsxp.general)
  • RE: Internet Browsing Impeeded
    ... >IE plugin may need administrator privilege. ... Create a new folder on the desktop and move all the ... >e) Select Desktop in Save in box and type backup in File ... Find and delete the following registry key. ...
    (microsoft.public.win2000.termserv.apps)
  • RE: schedule backup failure
    ... from the SBS 2K3 server directly? ... We use System account to start the backup job. ... a disabled user account named Backup User ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Backup - How do I Specify Username/Password for destinatio
    ... 'Backup User' which is disabled most of the time. ... The SBS Backup ... the *storage server* has no way to give the ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS Backup - How do I Specify Username/Password for destinatio
    ... 'Backup User' which is disabled most of the time. ... It's this part that is the 'catch' for SBS backup. ... SBS domain, the *storage server* has no way to give ...
    (microsoft.public.windows.server.sbs)