| Author |
 Topic  |
|
|
Michael
Old Timer
USA
608 Posts
Status: offline |
 Posted - 11/28/2012 : 12:43:50 AM
|
I have 2 desktop that will copy data to each other for backup.
Normal setup for me is with the customer user account with admin rights, the administrator account and another added admin account with passwords the customer does not know or have. I can use the administrator account to get in if the normal account is hosed with virus or such. I "enable" the Do Not Show Last User in the policy so the users don't ask about the administrator or other account. And really don't like all the icons showing at login. (could not find another way to hide the users like we could in XP) When the Do Not Show Last User is enabled, they have to enter user and password at each login. On these 2 computers they are use to seeing just the user login (win xp pro) and enter the password. So I plan to setup the administrator and extra account with my passwords and then disable the accounts so they will not show at login and the 1 account will show with the user already listed. So for the backup I need the folder on PC2 that the files from PC1 will backup to, to be off limits to PC1 normal user login. I will have the administrator as only one with access to the backup folder. Administrator on both pc have same password. So if I set the batch file to run as the disabled administrator account will it be a problem? I will test to find out in the morning but the pc are to be delivered early morning to customer. Just wanted to know if this should work.
Thanks,
Michael
|
|
|
wkasdo
Administrator
Netherlands
7405 Posts
Status: offline |
Posted - 11/28/2012 : 02:52:07 AM
|
> So if I set the batch file to run as the disabled administrator account will it be a problem?
Yes, it will. A disabled account cannot log on, not even as a batch job. |
Make it as simple as you can, but not simpler -- Albert Einstein |
 |
|
|
Michael
Old Timer
USA
608 Posts
Status: offline |
Posted - 11/28/2012 : 10:03:10 AM
|
OK, so if I run the batch file as the user that is logged in, will the data copy to a folder that the user does not have access to ?
??
Michael |
|
|
|
Btil Entrails
Here To Stay
USA
198 Posts
Status: online |
Posted - 11/28/2012 : 10:35:16 AM
|
With what you are asking, I would say do a test and prove if you can make work what you are needing, but if the logged on user does not have access they cannot do what is needed.
A different way to handle the backups, create a domain service account group for the backup needing to be done, and put the user account in that group and put the group onto both machines with high enough permissions and then you would have no user account needing to be on each target machine, you would just need to have users in said group and the batch would work for each of those users logged on at that time?
|
Chris
"It takes a big man to cry, but it takes a bigger man to laugh at that man."
Jack Handy quotes (American Writer and cast member of Saturday Night Live from 1991-2003. Famous for his Deep Thoughts comedy sketches.) |
|
|
|
Michael
Old Timer
USA
608 Posts
Status: offline |
Posted - 11/28/2012 : 2:14:37 PM
|
Thanks Chris,
This is not domain, just 2 workgroup pc. You are correct, I should test for myself, just pressed for time and the software vendor has been doing a remote session working on them this morning.
Thanks
Michael |
|
|
|
sophiawhite
Welcome Newcomer
United Kingdom
1 Posts
Status: offline |
Posted - 12/10/2012 : 06:14:01 AM
|
Hi Guys !
Get in safe mode and under Administrator account: Right click on the folder and select Properties. Their should be a tab called Security. Click it and there should be a button called Advanced. Click there.
Click on the tab called Owner. Select Administrators(-yourMachinename-\Adminst… and then check mark 'Replace Owner on Subcontainers and objects'
Click Apply and say YES if a confirmation dialog comes asking if you want to have full control.
Now try and see if you can get access. Am not sure if it would work. Hope this helps...
|
|
|
| |
Topic |
|
Disabled account access to folders
