Restore as a normal User without Admin privileges

Backup agent for Microsoft Windows servers and workstations (formerly Veeam Endpoint Backup FREE)

Restore as a normal User without Admin privileges

Veeam Logoby fraack » Wed Jan 14, 2015 2:25 pm

Hi,

I installed Veeam Endpoint on our Notebooks as a local Administrator. Our Domain Users do not have any administrative privileges on it. When I am logged in as a Domain user I am not able to perform a restore Operation. The following error message occurs: Access is denied. RPC Client is not member of built in Administrators Group.

Is there a Resolution for it or is it strongly necessary to run a restore with an administrative user account?

Greetings

Florian
fraack
Certified Trainer
 
Posts: 41
Liked: 5 times
Joined: Wed Sep 24, 2014 7:44 am
Full Name: Florian Raack

Re: Restore as a normal User without Admin privileges

Veeam Logoby fraack » Wed Jan 14, 2015 2:48 pm

I tried something to figure out the Problem. I uninstalled Veeam Endpoint on one Notebook and logged in as a simple Domain User. I published the Veeam Endpoint Software again via SCCM. After a sucessfull Installation I was able to perform a restore Operation with this simple Domain user. I logged out and in as another Domain user. The same Problem occurs Access denied.

This function would be very great for some of our Computers where several People work at.
fraack
Certified Trainer
 
Posts: 41
Liked: 5 times
Joined: Wed Sep 24, 2014 7:44 am
Full Name: Florian Raack

Re: Restore as a normal User without Admin privileges

Veeam Logoby jeancharles » Wed Jan 14, 2015 3:01 pm

Maybe it would be a good try to add your users to "backup operators" and see if this impersonation right is enough.
jeancharles
Enthusiast
 
Posts: 41
Liked: 3 times
Joined: Tue Dec 27, 2011 9:55 am
Full Name: Jean-Charles DEMARQUE

Re: Restore as a normal User without Admin privileges

Veeam Logoby fraack » Wed Jan 14, 2015 3:06 pm

I just tried it out, but with no success.
fraack
Certified Trainer
 
Posts: 41
Liked: 5 times
Joined: Wed Sep 24, 2014 7:44 am
Full Name: Florian Raack

Re: Restore as a normal User without Admin privileges

Veeam Logoby Dima P. » Wed Jan 14, 2015 5:56 pm

Hi guys,
It is a known limitation – yes, to perform a restore user must have an admin privileges. We are going to correct that in GA.
Dima P.
Veeam Software
 
Posts: 6683
Liked: 478 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

[MERGED] Restore permission

Veeam Logoby caras » Thu Feb 05, 2015 10:10 am

Hello at all, I'm new here. :-)

It seems that every user can do a backup with this program (the backup was defined by an Administrator before),
but only Administrators can restore data with this program (Otherwise there is an "Backup sync failed" message after completing the first dialogue).
Is there really no possibility that a simple user can bring back his own files after an accidental file deletion?

Regards.
Ruediger
caras
Novice
 
Posts: 4
Liked: 1 time
Joined: Thu Feb 05, 2015 9:56 am

Re: Restore as a normal User without Admin privileges

Veeam Logoby Vitaliy S. » Thu Feb 05, 2015 2:31 pm 1 person likes this post

Hi Ruediger, we are looking into removing admin privileges requirement in the GA version.
Vitaliy S.
Veeam Software
 
Posts: 19960
Liked: 1145 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Restore as a normal User without Admin privileges

Veeam Logoby caras » Mon Feb 09, 2015 8:36 am

Hello Vitaliy.

> Hi Ruediger, we are looking into removing admin privileges requirement in the GA version.

Don't remove too much.
If find the fact very good, that only an administrator can define a backup.
That may prevent that a user floods a backup server with data after he played at the backup settings.

May be two checkboxes at admin level "Users can restore files" and "Users can define backups" would be the best solution.
caras
Novice
 
Posts: 4
Liked: 1 time
Joined: Thu Feb 05, 2015 9:56 am

Re: Restore as a normal User without Admin privileges

Veeam Logoby Dima P. » Mon Feb 09, 2015 10:02 pm

We are in discussions about the privileges so any use case behind this request is highly appreciated.

Ruediger,
"Users can restore files" and "Users can define backups"

For me these two options are covered by giving the user administrative permissions. In addition, file level recovery and volume level recovery could harm user’s computer, for example by restoring the corrupted Windows folder or overwriting the existing system partition, so its good to have an additional safety trigger
Dima P.
Veeam Software
 
Posts: 6683
Liked: 478 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

Re: Restore as a normal User without Admin privileges

Veeam Logoby ninjaburn81 » Tue Feb 10, 2015 9:24 pm

I agree that allowing users to recover files, but can it be done in a way similar to 'Previous Versions' in Windows 7/8? This way only users with access to a particular file/folder has the ability to restore to this location.
ninjaburn81
Enthusiast
 
Posts: 99
Liked: 19 times
Joined: Mon Feb 25, 2013 7:56 pm
Location: Pittsburgh, PA
Full Name: Adam Vogini

Re: Restore as a normal User without Admin privileges

Veeam Logoby Dima P. » Tue Feb 10, 2015 10:00 pm

Hi Adam,
I like this idea, but unfortunately, it seems to work only with Windows native backup tool.
Dima P.
Veeam Software
 
Posts: 6683
Liked: 478 times
Joined: Mon Feb 04, 2013 2:07 pm
Location: SPb
Full Name: Dmitry Popov

[MERGED] Restore without admin rights

Veeam Logoby gse » Wed Sep 30, 2015 1:37 pm

Our laptop users do not have admin rights. Unfortunately this right seems to be necessary to perform a restore.
How can we let the user restore a file without the demand for admin right?
gse
Lurker
 
Posts: 2
Liked: never
Joined: Fri Sep 25, 2009 8:23 am
Full Name: Geert Schepers

Re: Restore as a normal User without Admin privileges

Veeam Logoby Vitaliy S. » Wed Sep 30, 2015 2:12 pm

Currently it is not available, but thanks for the feedback.
Vitaliy S.
Veeam Software
 
Posts: 19960
Liked: 1145 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Re: Restore as a normal User without Admin privileges

Veeam Logoby snadam » Mon Oct 19, 2015 10:16 pm

I'm deploying VEB to some of my users that are rarely in the office and not domain members. I too would like the ability to allow non-administrative users to perform a restore. Was the feature dropped from GA (mentioned earlier in the thread) or am I missing something?
snadam
Influencer
 
Posts: 11
Liked: never
Joined: Mon Mar 11, 2013 10:03 pm

Re: Restore as a normal User without Admin privileges

Veeam Logoby Vitaliy S. » Tue Oct 20, 2015 10:52 am

Yes, local admin credentials are required when doing restores for the reasons mentioned above. BTW, domain members are not required, so I'm a bit confused with your statement.
Vitaliy S.
Veeam Software
 
Posts: 19960
Liked: 1145 times
Joined: Mon Mar 30, 2009 9:13 am
Full Name: Vitaliy Safarov

Next

Return to Veeam Agent for Windows



Who is online

Users browsing this forum: No registered users and 1 guest