Administrator rights

  • Thread starter Thread starter Nils M. Lunde
  • Start date Start date
N

Nils M. Lunde

Hi!

I have a few simple questions that I hope someone would take the time to
answer:

Question 1:
-----------
I have a PDC for domain MYDOMAIN running Windows 2000 Server.
On the PDC i have a Builtin group called Backup Operators, and a user called
Backup who is member of this group.

I have a folder, Backup, where only members of the group Backup Operators
have access.

When I try to log on using the Backup user, it works fine; the user is able
to both read from and write to the folder.
Then I made the Administrator member of the Backup Operators group, and
thought that also this user would be able to access this folder. I was
wrong. The Administrator is unable to gain access to this folder unless I
give Administrators or Domain Admins groups access.

Can anyone tell me why this is happening?
I don't want any lecture in "best practice", I only want to know the logics
in why the Administrator is denied access although he is member of the same
group as the Backup user.


Question 2:
-----------
I read from the Windows 2000 documentation that the Backup user should be
able to copy folders that he doesn't have access to.
Is that true no matter what backup program I use if I run it as Backup user?
I tried copiing a folder that I didn't have access to while loged in as
Backup, but without any luck.

Could anyone please tell me how these things work?


Thanks in advance!

-Nils Magne Lunde
Options AS
 
I will reply to both 1 and 2 as I think it is all due to who has the Backup
files and directories right.
Check if the backup operators has such right, I bet it has not. Such right
bypasses NTFS permissions.
 
Back
Top