Backup Operator can't create backups - "You must be logged on as an administrator"
Hi All, I'm running some trials with Win7 before we deploy it fully, and I'm having problems being able to configure/run backups. Background Info: Computers are joined to a Windows Domain [2K8 & 2K3 DC's] My test account is just a standard user, but I've added them to the 'Backup Operators' group on the trial computer(s) When I try to configure a backup, I receive the UAC prompt and authenticate as the trial user After that though, I get an error message saying: The backup application could not start due to an internal error: You must be logged on as an administrator to perform this task. (0x81000010) I've tried searching for an answer, but I haven't really come up with anything helpful. Any ideas / suggestions on how I might be able to fix this?
June 8th, 2010 9:45am

Hi, To troubleshoot the issue, please try the following steps. 1. Add the standard user to AppLocker. Type Secpol.msc in Search box in Start menu> Application Control Policies > AppLocker > Executable Rules > New hash rule for Backup Operators to allow them to use sdclt.exe 2. Tried to add user in the following GPO: Computer Configuration>Windows settings>Security settings> Local policies>User rights assignements> Back up files and directories. 3. Plug an external hard drive and try to back up information to the driver for a test. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
June 9th, 2010 5:46am

Hello I have the very same issue: same error code when trying to configure backup but only since I joined my corporate domain. I performed the steps you indicated without noticing any improvement. Would you have any other leads? Could I provide any log helping in troubleshooting this? Thanks in advance.
August 11th, 2010 4:27pm

I have the same issue after joining domain, did you every find an answer?Tom
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 1:30pm

1 - Makes no sense and was a red herring, nobody mentioned AppLocker. (And I couldn't find the path to sdclt.exe anyway...existing documentation is *very* sparse. 2 - Pointed me in the right direction, but couldn't modify the local policy. The AD policy had a certain group listed, we had to add the local administrator's group to the policy, one gpupdate and logout/login later, and it's fixed!--Seek Truth, and you will find Joy!
June 28th, 2011 5:03pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics