I've been tasked with creating an automatic backup system that will backup a users home drive to their respective network drive that we have on a file server. After much hassle of actually getting this to work, I finally found a good solution using robocopy. The only problem is that it requires the user to be in the local Backup Operators group in order perform the operation. I read a little bit about the Restricted Users in GPOs, so I using restricted users, I added the "Domain Users" group to every computers local Backup Operators group. It is performing the functionality that that I need it to do with robocopy, but I'm a little new at Windows/AD administration and I'm not an expert per se. What (if any) security risks have I opened by adding the "Domain Users" group to every machine's Backup Operators group?
Thanks for any help or advice, it's greatly appreciated.