Domain Group backup Operators

[Guest paulreims@gmail.com]

Hello,

just a small question, because I did not find the answer on the net:

Is the built-in Domain group "backup-Operators" by default added to

the local "backup-operators" group on every server on the domain or do

I have to manually create a group an add it via GPO to the "backup-

operators"-group on every server?

 

Thanx in advance

PR

[Guest Jorge Silva]

Re: Domain Group backup Operators

 

Hi

-No. By default each server has the default "backup-Operator" security group

that corresponds to that particular server. In DCs the members of that group

are shared between all servers but this principle doesn't apply to member

servers because the member servers don't work in the same way that DCs do

for this particular situation.

-Yes, using GPO to add members to those security groups on the servers

works, but there're other ways, like scripting, or creating a specific

security group n AD to do backups and not using the builtin, etc..

 

--

I hope that the information above helps you.

Have a Nice day.

 

Jorge Silva

MCSE, MVP Directory Services

[Guest paulreims@gmail.com]

Re: Domain Group backup Operators

 

On 11 Jun., 12:04, "Jorge Silva" <jorgesilva...@hotmail.com> wrote:

> Hi

> -No. By default each server has the default "backup-Operator" security group

> that corresponds to that particular server. In DCs the members of that group

> are shared between all servers but this principle doesn't apply to member

> servers because the member servers don't work in the same way that DCs do

> for this particular situation.

> -Yes, using GPO to add members to those security groups on the servers

> works, but there're other ways, like scripting, or creating a specific

> security group n AD to do backups and not using the builtin, etc..

>

> --

> I hope that the information above helps you.

> Have a Nice day.

>

> Jorge Silva

> MCSE, MVP Directory Services

 

Thank you very much, this perfectly answered my question. I finally

used a "restricted groups"-GPO, which worked very well.

 

Best regards

PR