https://www.betaarchive.com/wiki/index.php?title=Microsoft_KB_Archive/104221&feed=atom&action=history
Microsoft KB Archive/104221 - Revision history
2024-03-28T14:15:44Z
Revision history for this page on the wiki
MediaWiki 1.39.3
https://www.betaarchive.com/wiki/index.php?title=Microsoft_KB_Archive/104221&diff=262537&oldid=prev
X010: Text replacement - """ to """
2020-07-20T08:30:17Z
<p>Text replacement - """ to """</p>
<table style="background-color: #fff; color: #202122;" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="en-GB">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 08:30, 20 July 2020</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l51">Line 51:</td>
<td colspan="2" class="diff-lineno">Line 51:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* Tape Security and Access</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* Tape Security and Access</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* Tape Ownership and Control</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* Tape Ownership and Control</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back Up Files and Directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>Right</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* <ins style="font-weight: bold; text-decoration: none;">"</ins>Back Up Files and Directories<ins style="font-weight: bold; text-decoration: none;">" </ins>Right</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l64">Line 64:</td>
<td colspan="2" class="diff-lineno">Line 64:</td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Tape Ownership and Control ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Tape Ownership and Control ===</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Under NTFS, file permission information is written with the files to tape. These are kept for restore purposes only and do not restrict access to files on the tape. However, the computer name of the system the backup was made from and user name of the person who first created a tape or tape set is stored in the tape header. Therefore, if you are logged on to MACHINE1\USER1, you cannot read secure tapes created by MACHINE2\USER1. These are considered two separate individuals. This allows enforcement of minimal restrictions to tape access. Access is controlled at a <del style="font-weight: bold; text-decoration: none;">&quot;</del>tape<del style="font-weight: bold; text-decoration: none;">&quot; </del>level. No attempt is made to restrict access at the backup set or to individual files on the tape. The <del style="font-weight: bold; text-decoration: none;">&quot;</del>Restrict Access to Owner or Administrator<del style="font-weight: bold; text-decoration: none;">&quot; </del>check box designates the tape as a <del style="font-weight: bold; text-decoration: none;">&quot;</del>secure<del style="font-weight: bold; text-decoration: none;">&quot; </del>tape. If the restrict access is enabled, Windows NT Backup protects the tape by creating a password from the user name and computer name. The tape can then be accessed with the backup software by only the following:<br /></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Under NTFS, file permission information is written with the files to tape. These are kept for restore purposes only and do not restrict access to files on the tape. However, the computer name of the system the backup was made from and user name of the person who first created a tape or tape set is stored in the tape header. Therefore, if you are logged on to MACHINE1\USER1, you cannot read secure tapes created by MACHINE2\USER1. These are considered two separate individuals. This allows enforcement of minimal restrictions to tape access. Access is controlled at a <ins style="font-weight: bold; text-decoration: none;">"</ins>tape<ins style="font-weight: bold; text-decoration: none;">" </ins>level. No attempt is made to restrict access at the backup set or to individual files on the tape. The <ins style="font-weight: bold; text-decoration: none;">"</ins>Restrict Access to Owner or Administrator<ins style="font-weight: bold; text-decoration: none;">" </ins>check box designates the tape as a <ins style="font-weight: bold; text-decoration: none;">"</ins>secure<ins style="font-weight: bold; text-decoration: none;">" </ins>tape. If the restrict access is enabled, Windows NT Backup protects the tape by creating a password from the user name and computer name. The tape can then be accessed with the backup software by only the following:<br /></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br /></div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div><br /></div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* The system administrator, who has access to all tapes.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* The system administrator, who has access to all tapes.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* The person who created the tape originally. In this case, you must be logged on to the computer where the tape was originally created.</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>* The person who created the tape originally. In this case, you must be logged on to the computer where the tape was originally created.</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>* A person with the <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>* A person with the <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Any of these people are allowed to read, write, or erase the tape. Persons without the <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right cannot modify the tape unless they created it by writing the first backup set. This prevents the accidental or deliberate erasure of information by anyone other than the tape's owner (the person who first wrote the tape), a backup user, or a system administrator. For tapes being written to transfer files between computers, <del style="font-weight: bold; text-decoration: none;">&quot;</del>restrict access<del style="font-weight: bold; text-decoration: none;">&quot; </del>should not be selected. For nonrestricted tapes, anyone would be allowed to read, write, or erase the tapes. Note that user-supplied passwords are not used for security purposes because they are easily forgotten. The proliferation of password use with various utilities can compromise security when the logon password is used in multiple places. Without the use of data encryption, tapes are not considered truly secure, and should be physically secured to protect sensitive data. The backup utility cannot prevent deliberate erasure of information from a tape. Security identification (SID) information is not used by Windows NT Backup.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Any of these people are allowed to read, write, or erase the tape. Persons without the <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right cannot modify the tape unless they created it by writing the first backup set. This prevents the accidental or deliberate erasure of information by anyone other than the tape's owner (the person who first wrote the tape), a backup user, or a system administrator. For tapes being written to transfer files between computers, <ins style="font-weight: bold; text-decoration: none;">"</ins>restrict access<ins style="font-weight: bold; text-decoration: none;">" </ins>should not be selected. For nonrestricted tapes, anyone would be allowed to read, write, or erase the tapes. Note that user-supplied passwords are not used for security purposes because they are easily forgotten. The proliferation of password use with various utilities can compromise security when the logon password is used in multiple places. Without the use of data encryption, tapes are not considered truly secure, and should be physically secured to protect sensitive data. The backup utility cannot prevent deliberate erasure of information from a tape. Security identification (SID) information is not used by Windows NT Backup.</div></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>=== <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back Up Files and Directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>Right ===</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>=== <ins style="font-weight: bold; text-decoration: none;">"</ins>Back Up Files and Directories<ins style="font-weight: bold; text-decoration: none;">" </ins>Right ===</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Under NTFS, an Access Control List (ACL) is used to control each person's rights to system resources. Windows NT Backup will usually not back up drives, volumes, directories and/or files to which you do not have access privileges. Your ACL restrictions are inherited by the application at runtime. The exception is when you have the <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right. Under this exception, you are able to back up and restore drives, directories, and files to which you would otherwise not have access to. The <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right allows you to bypass ACL protection in order to back up another's files. In addition to being able to read the files, the <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right allows Windows NT Backup to update the <del style="font-weight: bold; text-decoration: none;">&quot;</del>archive<del style="font-weight: bold; text-decoration: none;">&quot; </del>bit in the file header. Windows NT Backup checks for the existence of the <del style="font-weight: bold; text-decoration: none;">&quot;</del>Back up files and directories<del style="font-weight: bold; text-decoration: none;">&quot; </del>right for the active user, enables the associated rights while processing files, and disable these rights when backup/restore operations are complete.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Under NTFS, an Access Control List (ACL) is used to control each person's rights to system resources. Windows NT Backup will usually not back up drives, volumes, directories and/or files to which you do not have access privileges. Your ACL restrictions are inherited by the application at runtime. The exception is when you have the <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right. Under this exception, you are able to back up and restore drives, directories, and files to which you would otherwise not have access to. The <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right allows you to bypass ACL protection in order to back up another's files. In addition to being able to read the files, the <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right allows Windows NT Backup to update the <ins style="font-weight: bold; text-decoration: none;">"</ins>archive<ins style="font-weight: bold; text-decoration: none;">" </ins>bit in the file header. Windows NT Backup checks for the existence of the <ins style="font-weight: bold; text-decoration: none;">"</ins>Back up files and directories<ins style="font-weight: bold; text-decoration: none;">" </ins>right for the active user, enables the associated rights while processing files, and disable these rights when backup/restore operations are complete.</div></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr>
<tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div></div></div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div></div></div></td></tr>
</table>
X010
https://www.betaarchive.com/wiki/index.php?title=Microsoft_KB_Archive/104221&diff=48211&oldid=prev
3155ffGd: importing KB archive
2020-07-18T15:03:34Z
<p>importing KB archive</p>
<p><b>New page</b></p><div><div id="nsbanner"><br />
<br />
<div id="bannerrow1"><br />
<br />
{|<br />
| Knowledge Base<br />
|<br />
|}<br />
<br />
<br />
</div><br />
<div id="TitleRow"><br />
<br />
= <span id="KB104221"></span>Windows NT Backup and Security =<br />
<br />
<br />
</div><br />
<br />
</div><br />
<div id="nstext" valign="BOTTOM"><br />
<br />
Article ID: 104221<br />
<br />
Article Last Modified on 10/31/2006<br />
<br />
<br />
-----<br />
<br />
APPLIES TO<br /><br />
<br /><br />
<br />
* Microsoft Windows NT Advanced Server 3.1<br />
* Microsoft Windows NT Workstation 3.1<br />
* Microsoft Windows NT Advanced Server 3.1<br />
<br />
<br />
-----<br />
<br />
<div class="notice_section"><br />
<br />
This article was previously published under Q104221<br />
<br />
</div><br />
<div class="summary_section"><br />
<br />
== SUMMARY ==<br />
<br />
This article describes and defines Windows NT security as it relates to the following aspects of the Windows NT Backup program:<br /><br />
<br /><br />
<br />
* Tape Security and Access<br />
* Tape Ownership and Control<br />
* &quot;Back Up Files and Directories&quot; Right<br />
<br />
<br />
</div><br />
<div class="moreinformation_section"><br />
<br />
== MORE INFORMATION ==<br />
<br />
=== Tape Security and Access ===<br />
<br />
Tape security is in the form of access restriction to an entire tape or family set. The application does not provide restrictions to individual sets or files. When creating a new tape, the user has the option to restrict access to the tape by selecting the Restrict Access check box in the Backup Information dialog box.<br />
=== Tape Ownership and Control ===<br />
<br />
Under NTFS, file permission information is written with the files to tape. These are kept for restore purposes only and do not restrict access to files on the tape. However, the computer name of the system the backup was made from and user name of the person who first created a tape or tape set is stored in the tape header. Therefore, if you are logged on to MACHINE1\USER1, you cannot read secure tapes created by MACHINE2\USER1. These are considered two separate individuals. This allows enforcement of minimal restrictions to tape access. Access is controlled at a &quot;tape&quot; level. No attempt is made to restrict access at the backup set or to individual files on the tape. The &quot;Restrict Access to Owner or Administrator&quot; check box designates the tape as a &quot;secure&quot; tape. If the restrict access is enabled, Windows NT Backup protects the tape by creating a password from the user name and computer name. The tape can then be accessed with the backup software by only the following:<br /><br />
<br /><br />
<br />
* The system administrator, who has access to all tapes.<br />
* The person who created the tape originally. In this case, you must be logged on to the computer where the tape was originally created.<br />
* A person with the &quot;Back up files and directories&quot; right.<br />
<br />
Any of these people are allowed to read, write, or erase the tape. Persons without the &quot;Back up files and directories&quot; right cannot modify the tape unless they created it by writing the first backup set. This prevents the accidental or deliberate erasure of information by anyone other than the tape's owner (the person who first wrote the tape), a backup user, or a system administrator. For tapes being written to transfer files between computers, &quot;restrict access&quot; should not be selected. For nonrestricted tapes, anyone would be allowed to read, write, or erase the tapes. Note that user-supplied passwords are not used for security purposes because they are easily forgotten. The proliferation of password use with various utilities can compromise security when the logon password is used in multiple places. Without the use of data encryption, tapes are not considered truly secure, and should be physically secured to protect sensitive data. The backup utility cannot prevent deliberate erasure of information from a tape. Security identification (SID) information is not used by Windows NT Backup.<br />
=== &quot;Back Up Files and Directories&quot; Right ===<br />
<br />
Under NTFS, an Access Control List (ACL) is used to control each person's rights to system resources. Windows NT Backup will usually not back up drives, volumes, directories and/or files to which you do not have access privileges. Your ACL restrictions are inherited by the application at runtime. The exception is when you have the &quot;Back up files and directories&quot; right. Under this exception, you are able to back up and restore drives, directories, and files to which you would otherwise not have access to. The &quot;Back up files and directories&quot; right allows you to bypass ACL protection in order to back up another's files. In addition to being able to read the files, the &quot;Back up files and directories&quot; right allows Windows NT Backup to update the &quot;archive&quot; bit in the file header. Windows NT Backup checks for the existence of the &quot;Back up files and directories&quot; right for the active user, enables the associated rights while processing files, and disable these rights when backup/restore operations are complete.<br />
<br />
</div><br />
<br /><br />
<br />
Additional query words: prodnt<br />
<br />
Keywords: KB104221<br />
<br />
<div class="footer"><br />
<br />
<br /><br />
<br />
<br />
-----<br />
<br />
[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]<br />
<br />
<span>© Microsoft Corporation. All rights reserved.</span><br />
<br />
<br />
</div><br />
<br />
</div></div>
3155ffGd