MS Windows Server

What is Backup Operators

Backup Operators

Backup Operators can override security restrictions for the sole purpose of backing up or restoring files. Backup Operators” group is an historical Windows built in group. Backup operator groups allows users to take the backup and restore files regardless whether they have access to the files or not.

by default none of users are members of backup operators group.Any accounts that are members of the Backup Operators group must be documented, including application accounts.

Review the Backup Operators group in Computer Management.

What privileges are provided to backup operators?

  • Can recover and back up files.
  • Can create a system backup.
  • Able to recover system state. (Only Windows® XP and 2003). To restore system state on Windows Vista, 7, 8, 8.1, 2008, or 10, you must also be a member of the Administrators group.
  • The TSM Scheduler service can be started

What are the limitations of backup operators?

  • Unable to launch further services (TSM Client Acceptor, TSM Remote Client Agent, and TSM Journal Service)
  • Not possible to install and set up client services
  • Open file support cannot be used
  • Not possible to backup and restore images
  • Windows file sharing cannot be backed up or restored

How to add a user to the Backup Operators group

Open Computer Management

Choose Groups. In Computer Management > Local Users and Groups > Groups, you may locate it.

Double-click Backup Operators and then click on Add

To add a user to the backup operators group, click Add and provide the name.

Click on OK 

Click on Apply and OK

Things to consider before using the Backup Operators group account

Things to consider before employing a backup Before using a Backup Operators group account to back up, archive, restore, or retrieve your data, there are a few things you should keep in mind.

Before using a Backup Operators group account to back up, archive, restore, or recover your data, take the following factors into mind:

You might be unable to run the backup-archive client if you have previously used it with an Administrators group account because you are unable to access the log files (for example dsmerror.log). Giving the Backup Operators group Read and Write access to the log files or the folders holding these log files would help to solve this issue.

If you try an incremental backup of an existing file space using a member of the Backup Operators group and you already have backups from a backup-archive client version 5.2 or earlier, all of the data will seem to have changed and will be transferred again to the IBM Spectrum ProtectTM Server.

The Windows encrypting file system may prevent members of the Backup Operators group from backing up or restoring data from files that have been encrypted by an Administrator account (EFS).

It is not within the scope of their power for members of the Backup Operators group to alter the last access time for files that have been encrypted using the Windows encrypting file system (EFS). 

So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!

Recommended content

RODC Installation Guide- Step by step guide to install read only domain controller

RODC Filtered Attribute Set

Installing and configuring a RODC in Windows Server-2012

How to find the GUID of Domain Controller

Understanding Group Policy Preferences

Group Policy Verification Tool GPOTool Exe

Group Policy Health Check on Specific Domain Controller

Netlogon Folder in Active Directory

Custom Attributes in Active Directory

Tombstone Lifetime of My Active Directory Forest

Computers AD Site From the Command Line

Active Directory Database Integrity

Disabling and Enabling the Outbound Replication

DFS Replication Service Stopped Replication

Strict Replication Consistency

The replication operation failed because of a schema mismatch between the servers involved

Troubleshooting ad replication error 8418 the replication operation failed because of a schema mismatch between the servers

Replication information in txt file

Repadmin Replsummary

Enabling the outbound replication

Guys please don’t forget to like and share the post.Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them .

You can also share the feedback on below windows techno email id.

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.

How useful was this post?

Click on a star to rate it!

As you found this post useful...

Follow us on social media!

Was this article helpful?
YesNo

Vipan Kumar

He is an Active Directory Engineer. He has been working in IT industry for more than 10 years. He is dedicated and enthusiastic information technology expert who always ready to resolve any technical problem. If you guys need any further help on subject matters, feel free to contact us on admin@windowstechno.com Please subscribe our Facebook page as well website for latest article. https://www.facebook.com/windowstechno
Back to top button