Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I accustomed to create a dedicated admin-level Domain user account, on which backup processes are running, then blocking it's login ability on station, but I always thought it's a security risk.

Anyone can suggest a better practice how to do it?

share|improve this question

You could add the user to the Backup Operators group, rather than Administrators. This grants the user the Read access to files and folders it needs to back up, but without the elevated privileges given to an Administrator. It's probably worth keeping the user prevented from logging on to workstations to prevent it accessing files for any purpose other than backups.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.