Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I accustomed to create a dedicated admin-level Domain user account, on which backup processes are running, then blocking it's login ability on station, but I always thought it's a security risk.

Anyone can suggest a better practice how to do it?

share|improve this question

1 Answer 1

You could add the user to the Backup Operators group, rather than Administrators. This grants the user the Read access to files and folders it needs to back up, but without the elevated privileges given to an Administrator. It's probably worth keeping the user prevented from logging on to workstations to prevent it accessing files for any purpose other than backups.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.