1

Our Domain is currently Set up with a Server 2012 domain controller.

We have Home profiles enabled, which is annoying because it grants the User and only the user access to their files. We need to find a way to backup these files. I.e. grant admins access to these files too.

The backup we use is based on a scheduled task running Robocopy to bulk move files to another server. From there they get backed up to a tape.

I have already tried:

  • running the scheduled task as "NT AUTHORITY\SYSTEM"
  • Granting Permissions to the root of the home folder

I am aware that I can manually take ownership of the folders, the fix the permissions from there, but I would prefer another solution (if it exists) as we have around 300 users in the domain.

Mitch
  • 13
  • 3
  • What is wrong with granting your admin group full NTFS permissions? – Michael Frank Feb 11 '15 at 01:29
  • `which is annoying because it grants the User` - There are group policies that will remove this behaviour. But using them won't change the ACLs after the fact. So you could apply the policies, then mass reset the permissions and include a backup group. – Zoredache Feb 11 '15 at 01:33
  • @Zoredache Care to elaborate which GPs would do this? I have absolutely no clue... –  Feb 11 '15 at 02:02

1 Answers1

4

Create a user account (or add an existing user account) and add it to the Backup Operators group and run your task as that user.

joeqwerty
  • 109,901
  • 6
  • 81
  • 172
  • Since the OP is using robocopy, they should also be passing the command line option to run robocopy in Backup Mode. Either `/b`, or `/zb`. – Zoredache Feb 11 '15 at 01:34
  • @Zoredache Thanks, i'll give it a try tonight when the backups run! –  Feb 11 '15 at 02:25