Domain Group backup Operators

  • Thread starter Thread starter paulreims@gmail.com
  • Start date Start date
P

paulreims@gmail.com

Guest
Hello,
just a small question, because I did not find the answer on the net:
Is the built-in Domain group "backup-Operators" by default added to
the local "backup-operators" group on every server on the domain or do
I have to manually create a group an add it via GPO to the "backup-
operators"-group on every server?

Thanx in advance
PR
 
Re: Domain Group backup Operators

Hi
-No. By default each server has the default "backup-Operator" security group
that corresponds to that particular server. In DCs the members of that group
are shared between all servers but this principle doesn't apply to member
servers because the member servers don't work in the same way that DCs do
for this particular situation.
-Yes, using GPO to add members to those security groups on the servers
works, but there're other ways, like scripting, or creating a specific
security group n AD to do backups and not using the builtin, etc..

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
 
Re: Domain Group backup Operators

On 11 Jun., 12:04, "Jorge Silva" <jorgesilva...@hotmail.com> wrote:
> Hi
> -No. By default each server has the default "backup-Operator" security group
> that corresponds to that particular server. In DCs the members of that group
> are shared between all servers but this principle doesn't apply to member
> servers because the member servers don't work in the same way that DCs do
> for this particular situation.
> -Yes, using GPO to add members to those security groups on the servers
> works, but there're other ways, like scripting, or creating a specific
> security group n AD to do backups and not using the builtin, etc..
>
> --
> I hope that the information above helps you.
> Have a Nice day.
>
> Jorge Silva
> MCSE, MVP Directory Services

Thank you very much, this perfectly answered my question. I finally
used a "restricted groups"-GPO, which worked very well.

Best regards
PR
 
Back
Top