NBK needs full access rights to source and destination to backup directories/files. It is recommended to set up a dedicated user "BackupAdmin" in the Active Directory or locally on a system.
Windows SBS
For full access to the backup/copy/DR/storage jobs, please create a new user via "Active Directory Users and Computers" in the Active Directory directory "Users", NOT in the directory "SBS Business Users" of the Active Directory (AD), please do not use SBS Console.
This new user (e.g. "BackupAdmin") must be a member of the following groups:
- local Administrators
- Domain Admins
- Backupoperators
- Domain User (can remain as long as there exist no GPOs for users)
If GPOs exist for users:
Change the primary group of domain users to "Domain Admins". Remove the membership in the group of domain users. Log on to the system once as this user and log off again.
Other Windows Editions / Versions
On other Windows systems/versions, also set up a "BackupAdmin" user in the AD.
Local users
If you do not use AD and the systems are in a workgroup, set up a local "BackupAdmin" with membership in groups "Administrators" and "Backup Operators".
Use this new user "BackupAdmin" for all NBK jobs and schedules.
For the backup with shares as target (whether on NAS systems or other Windows shares) additional configurations are required. Please refer to another article for more information.