I created a user ("backupagent") on a laptop running Windows 7 Home Premium, and added that user to the Administrators group, with a randomly-generated, difficult-to-guess password. My plan is to log into the machine over SMB to back up the files on the laptop (actually, BackupPC is doing this, but I can't seem to get this to work with smbclient on its own either).
I set up a windows share ("cback") on the laptop sharing the entire C: drive, and allowed backupagent all permissions on the share ("Read" / "Modify" / "Full Control").
When I log into the machine from my Linux box using "smbclient", I am able to access much of the filesystem, except for files under the "C:\Users\UserName" folder, which are of course the most important ones to back up. When I attempt to list the files in any directories contained in C:\Users\UserName, I get an error:
smb: \Users\UserName\Desktop\> ls NT_STATUS_ACCESS_DENIED listing \Users\UserName\Desktop\*
Why is backupagent (a member of the Administrators group) unable to access these files? Windows permissions have always been completely bewildering to me...