Unsolved
This post is more than 5 years old
13 Posts
0
2035
savegrp.exe command - Windows user account permissions?
Hi all,
Does anyone know what Windows permissions / policy settings are required for a specific user account to successfully run the savegrp.exe command without being a member of local administrator?
We use a script to backup certain servers due to other automated tasks that need to be run. Due to a recent security shakeup, the account that the script was run from was removed from the local administrator group on our NetWorker server, and the script now fails.
I have already tried the common sense stuff, like the Backup Operators group, and policy settings like "Log on as a batch job". The account already has administrator permissions inside NetWorker (have tested this with NetWorker User).
Below is the error I get when running the command as the specific account, without the admin rights. For testing purposes, the client in the group below triggers a local backup of C:\temp on the NetWorker server, and not backups of another client as we normally do. I have also tried using the runas command as well as logging in locally as the user account.
--------------
C:\Batch>savegrp AUPML_control-m_testgroup
05/09/07 12:33:51 savegrp: You are not authorized to run this command
--------------
The server is Win2003 and NetWorker version is 7.2.1.
Any assistance would be really appreciated. I can't find any mention of permissions in the savegrp documentation.
Does anyone know what Windows permissions / policy settings are required for a specific user account to successfully run the savegrp.exe command without being a member of local administrator?
We use a script to backup certain servers due to other automated tasks that need to be run. Due to a recent security shakeup, the account that the script was run from was removed from the local administrator group on our NetWorker server, and the script now fails.
I have already tried the common sense stuff, like the Backup Operators group, and policy settings like "Log on as a batch job". The account already has administrator permissions inside NetWorker (have tested this with NetWorker User).
Below is the error I get when running the command as the specific account, without the admin rights. For testing purposes, the client in the group below triggers a local backup of C:\temp on the NetWorker server, and not backups of another client as we normally do. I have also tried using the runas command as well as logging in locally as the user account.
--------------
C:\Batch>savegrp AUPML_control-m_testgroup
05/09/07 12:33:51 savegrp: You are not authorized to run this command
--------------
The server is Win2003 and NetWorker version is 7.2.1.
Any assistance would be really appreciated. I can't find any mention of permissions in the savegrp documentation.
ble1
14.3K Posts
0
May 9th, 2007 02:00
ble1
14.3K Posts
0
May 9th, 2007 02:00
jsperanz
13 Posts
0
May 9th, 2007 17:00
We are also using rsh to execute the commands remotely via Control-M, but for my testing I have been doing everything locally.
The rights in NetWorker are correct because I've tested backups via nsradmin and also backup/restore via the NetWorker User console.
I just tried nsrjb, and guess what.....
------------
C:\Documents and Settings\s-iaubatp>nsrjb
nsrjb: You are not authorized to run this command
------------
Surely there must be a way around this, or is this a side effect of NetWorker being ported from the unix world?
ble1
14.3K Posts
0
May 10th, 2007 00:00
If you are running Oracle backups (RMAN) why not starting them from Oracle client itself via oracle user? I currently use autosys so I can't check if anything additional can be done with c-m...
You said rights are correct - does that mean you start group via nsradmin? Because if you can that is your solution then.
PrinceAijaz
38 Posts
0
December 3rd, 2015 12:00
Hello Hrvoje Crvelin
I wanted to schedule Networker 8.2 backups using autosys. Would it be possible to share a sample script??
Regards
Aijaz
ble1
14.3K Posts
0
December 3rd, 2015 15:00
You don't need script; with autosys you can just define command you wish to use and that can be either calling savegrp on server or save on the client. The parameters you will use with those are pure NW based and depend on what you wish to do with such job.
PrinceAijaz
38 Posts
0
December 4th, 2015 05:00
Thanks Hrvoje Crvelin
Regards
aijaz