Restore as a normal User without Admin privileges

[fraack]

Hi,

I installed Veeam Endpoint on our Notebooks as a local Administrator. Our Domain Users do not have any administrative privileges on it. When I am logged in as a Domain user I am not able to perform a restore Operation. The following error message occurs: Access is denied. RPC Client is not member of built in Administrators Group.

Is there a Resolution for it or is it strongly necessary to run a restore with an administrative user account?

Greetings

Florian

[fraack]

I tried something to figure out the Problem. I uninstalled Veeam Endpoint on one Notebook and logged in as a simple Domain User. I published the Veeam Endpoint Software again via SCCM. After a sucessfull Installation I was able to perform a restore Operation with this simple Domain user. I logged out and in as another Domain user. The same Problem occurs Access denied.

This function would be very great for some of our Computers where several People work at.

[jeancharles]

Maybe it would be a good try to add your users to "backup operators" and see if this impersonation right is enough.

[fraack]

I just tried it out, but with no success.

[Dima P.]

Hi guys,
It is a known limitation – yes, to perform a restore user must have an admin privileges. We are going to correct that in GA.

[caras]

Hello at all, I'm new here.

It seems that every user can do a backup with this program (the backup was defined by an Administrator before),
but only Administrators can restore data with this program (Otherwise there is an "Backup sync failed" message after completing the first dialogue).
Is there really no possibility that a simple user can bring back his own files after an accidental file deletion?

Regards.
Ruediger

[Vitaliy S.]

Hi Ruediger, we are looking into removing admin privileges requirement in the GA version.

[caras]

Hello Vitaliy.

> Hi Ruediger, we are looking into removing admin privileges requirement in the GA version.

Don't remove too much.
If find the fact very good, that only an administrator can define a backup.
That may prevent that a user floods a backup server with data after he played at the backup settings.

May be two checkboxes at admin level "Users can restore files" and "Users can define backups" would be the best solution.

[Dima P.]

We are in discussions about the privileges so any use case behind this request is highly appreciated.

Ruediger,

"Users can restore files" and "Users can define backups"

For me these two options are covered by giving the user administrative permissions. In addition, file level recovery and volume level recovery could harm user’s computer, for example by restoring the corrupted Windows folder or overwriting the existing system partition, so its good to have an additional safety trigger

[ninjaburn81]

I agree that allowing users to recover files, but can it be done in a way similar to 'Previous Versions' in Windows 7/8? This way only users with access to a particular file/folder has the ability to restore to this location.

[Dima P.]

Hi Adam,
I like this idea, but unfortunately, it seems to work only with Windows native backup tool.

[gse]

Our laptop users do not have admin rights. Unfortunately this right seems to be necessary to perform a restore.
How can we let the user restore a file without the demand for admin right?

[Vitaliy S.]

Currently it is not available, but thanks for the feedback.

[snadam]

I'm deploying VEB to some of my users that are rarely in the office and not domain members. I too would like the ability to allow non-administrative users to perform a restore. Was the feature dropped from GA (mentioned earlier in the thread) or am I missing something?

[Vitaliy S.]

Yes, local admin credentials are required when doing restores for the reasons mentioned above. BTW, domain members are not required, so I'm a bit confused with your statement.

[Juraj G.]

Hello guys,

are local admin rights still required to perform a restore with VEB? If yes, is it planned to be changed in future and in which version?

Thank you.

Juraj

[Mike Resseler]

Hello Juraj,

First: Welcome to the forum!

Please see above in this thread for information on your topic

Cheers
Mike

[Juraj G.]

Hi Mike.

Thanks!

I've found the information closely looking in the thread. I'd like to ask if you were considering adding "users can perform restore" option (during initial setup or in settings) and possibly leave local admin permissions required by default.

Thank you & keep on running the great product of Veeam!

Juraj