Jump to content

password protect backup tape using ntbackup


Recommended Posts

Posted
Is it possible to password protect backup tape using ntbackup?
  • Replies 6
  • Created
  • Last Reply

Popular Days

Guest Mathieu CHATEAU
Posted

Re: password protect backup tape using ntbackup

 

Someone can steal the tape and restore it from it's home, as he will have

"administrator" privilege on it's own computer.

 

Windows NT Backup and Security

http://support.microsoft.com/kb/q104221/en-us

 

The tape is not encrypted. The name of the computer and owner is just

written in the head of the tape.

 

Anyone having these rights can restore:

The system administrator, who has access to all tapes.

The person who created the tape originally. In this case, you must be logged

on to the computer where the tape was originally created.

A person with the "Back up files and directories" right.

 

So it's just a protection for inside your company, to avoid user reading

ntbackup files found on a share.

 

 

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message

news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...

> Take a look at...

> http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

>

>

> --

> Ryan Hanisco

> MCSE, MCTS: SQL 2005, Project+

> Chicago, IL

>

> Remember: Marking helpful answers helps everyone find the info they need

> quickly.

>

>

> "PB" wrote:

>

>> Is it possible to password protect backup tape using ntbackup?

Posted

Re: password protect backup tape using ntbackup

 

Using ntbackup - Switch: /R:{yes} will make no difference. Is that correct?

 

"Mathieu CHATEAU" wrote:

> Someone can steal the tape and restore it from it's home, as he will have

> "administrator" privilege on it's own computer.

>

> Windows NT Backup and Security

> http://support.microsoft.com/kb/q104221/en-us

>

> The tape is not encrypted. The name of the computer and owner is just

> written in the head of the tape.

>

> Anyone having these rights can restore:

> The system administrator, who has access to all tapes.

> The person who created the tape originally. In this case, you must be logged

> on to the computer where the tape was originally created.

> A person with the "Back up files and directories" right.

>

> So it's just a protection for inside your company, to avoid user reading

> ntbackup files found on a share.

>

>

>

> --

> Cordialement,

> Mathieu CHATEAU

> http://lordoftheping.blogspot.com

>

>

> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message

> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...

> > Take a look at...

> > http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

> >

> >

> > --

> > Ryan Hanisco

> > MCSE, MCTS: SQL 2005, Project+

> > Chicago, IL

> >

> > Remember: Marking helpful answers helps everyone find the info they need

> > quickly.

> >

> >

> > "PB" wrote:

> >

> >> Is it possible to password protect backup tape using ntbackup?

>

>

Guest Mathieu CHATEAU
Posted

Re: password protect backup tape using ntbackup

 

Not outside your domain, or even against other domain admin & co...

 

That may be useful between developpers backing up with ntbackup, or any

people that isn't admin.

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"PB" <PB@discussions.microsoft.com> wrote in message

news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...

> Using ntbackup - Switch: /R:{yes} will make no difference. Is that

> correct?

>

> "Mathieu CHATEAU" wrote:

>

>> Someone can steal the tape and restore it from it's home, as he will have

>> "administrator" privilege on it's own computer.

>>

>> Windows NT Backup and Security

>> http://support.microsoft.com/kb/q104221/en-us

>>

>> The tape is not encrypted. The name of the computer and owner is just

>> written in the head of the tape.

>>

>> Anyone having these rights can restore:

>> The system administrator, who has access to all tapes.

>> The person who created the tape originally. In this case, you must be

>> logged

>> on to the computer where the tape was originally created.

>> A person with the "Back up files and directories" right.

>>

>> So it's just a protection for inside your company, to avoid user reading

>> ntbackup files found on a share.

>>

>>

>>

>> --

>> Cordialement,

>> Mathieu CHATEAU

>> http://lordoftheping.blogspot.com

>>

>>

>> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message

>> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...

>> > Take a look at...

>> > http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

>> >

>> >

>> > --

>> > Ryan Hanisco

>> > MCSE, MCTS: SQL 2005, Project+

>> > Chicago, IL

>> >

>> > Remember: Marking helpful answers helps everyone find the info they

>> > need

>> > quickly.

>> >

>> >

>> > "PB" wrote:

>> >

>> >> Is it possible to password protect backup tape using ntbackup?

>>

>>

Posted

Re: password protect backup tape using ntbackup

 

Is there an solution to protect the tape?

 

"Mathieu CHATEAU" wrote:

> Not outside your domain, or even against other domain admin & co...

>

> That may be useful between developpers backing up with ntbackup, or any

> people that isn't admin.

>

> --

> Cordialement,

> Mathieu CHATEAU

> http://lordoftheping.blogspot.com

>

>

> "PB" <PB@discussions.microsoft.com> wrote in message

> news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...

> > Using ntbackup - Switch: /R:{yes} will make no difference. Is that

> > correct?

> >

> > "Mathieu CHATEAU" wrote:

> >

> >> Someone can steal the tape and restore it from it's home, as he will have

> >> "administrator" privilege on it's own computer.

> >>

> >> Windows NT Backup and Security

> >> http://support.microsoft.com/kb/q104221/en-us

> >>

> >> The tape is not encrypted. The name of the computer and owner is just

> >> written in the head of the tape.

> >>

> >> Anyone having these rights can restore:

> >> The system administrator, who has access to all tapes.

> >> The person who created the tape originally. In this case, you must be

> >> logged

> >> on to the computer where the tape was originally created.

> >> A person with the "Back up files and directories" right.

> >>

> >> So it's just a protection for inside your company, to avoid user reading

> >> ntbackup files found on a share.

> >>

> >>

> >>

> >> --

> >> Cordialement,

> >> Mathieu CHATEAU

> >> http://lordoftheping.blogspot.com

> >>

> >>

> >> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message

> >> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...

> >> > Take a look at...

> >> > http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

> >> >

> >> >

> >> > --

> >> > Ryan Hanisco

> >> > MCSE, MCTS: SQL 2005, Project+

> >> > Chicago, IL

> >> >

> >> > Remember: Marking helpful answers helps everyone find the info they

> >> > need

> >> > quickly.

> >> >

> >> >

> >> > "PB" wrote:

> >> >

> >> >> Is it possible to password protect backup tape using ntbackup?

> >>

> >>

>

>

Guest Mathieu CHATEAU
Posted

Re: password protect backup tape using ntbackup

 

Not with ntbackup directly.

Commercial backup software allow to encrypt the backup stream with keys.

 

The free only solution i found, which is cheap and bad:

do the ntbackup on disk

zip the ntbackup file with password protection (or use PGP)

then backup the zip to tape with ntbackup.

 

You Would consider putting the tape in a real safe place (like in a bank)

instead of doing the cheap solution that will ask you a lot more time in

case of restore (not even speaking of disaster recovery)

 

shame on me to speak about this solution

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"PB" <PB@discussions.microsoft.com> wrote in message

news:B9BFE015-E1EB-4373-9F3B-1CB115F664C0@microsoft.com...

> Is there an solution to protect the tape?

>

> "Mathieu CHATEAU" wrote:

>

>> Not outside your domain, or even against other domain admin & co...

>>

>> That may be useful between developpers backing up with ntbackup, or any

>> people that isn't admin.

>>

>> --

>> Cordialement,

>> Mathieu CHATEAU

>> http://lordoftheping.blogspot.com

>>

>>

>> "PB" <PB@discussions.microsoft.com> wrote in message

>> news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...

>> > Using ntbackup - Switch: /R:{yes} will make no difference. Is that

>> > correct?

>> >

>> > "Mathieu CHATEAU" wrote:

>> >

>> >> Someone can steal the tape and restore it from it's home, as he will

>> >> have

>> >> "administrator" privilege on it's own computer.

>> >>

>> >> Windows NT Backup and Security

>> >> http://support.microsoft.com/kb/q104221/en-us

>> >>

>> >> The tape is not encrypted. The name of the computer and owner is just

>> >> written in the head of the tape.

>> >>

>> >> Anyone having these rights can restore:

>> >> The system administrator, who has access to all tapes.

>> >> The person who created the tape originally. In this case, you must be

>> >> logged

>> >> on to the computer where the tape was originally created.

>> >> A person with the "Back up files and directories" right.

>> >>

>> >> So it's just a protection for inside your company, to avoid user

>> >> reading

>> >> ntbackup files found on a share.

>> >>

>> >>

>> >>

>> >> --

>> >> Cordialement,

>> >> Mathieu CHATEAU

>> >> http://lordoftheping.blogspot.com

>> >>

>> >>

>> >> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in

>> >> message

>> >> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...

>> >> > Take a look at...

>> >> > http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/ntbackup_command.mspx?mfr=true

>> >> >

>> >> >

>> >> > --

>> >> > Ryan Hanisco

>> >> > MCSE, MCTS: SQL 2005, Project+

>> >> > Chicago, IL

>> >> >

>> >> > Remember: Marking helpful answers helps everyone find the info they

>> >> > need

>> >> > quickly.

>> >> >

>> >> >

>> >> > "PB" wrote:

>> >> >

>> >> >> Is it possible to password protect backup tape using ntbackup?

>> >>

>> >>

>>

>>


×
×
  • Create New...