Backup Operator can't create backups - "You must be logged on as an administrator"
Hi All,
I'm running some trials with Win7 before we deploy it fully, and I'm having problems being able to configure/run backups.
Background Info:
Computers are joined to a Windows Domain [2K8 & 2K3 DC's] My test account is just a standard user, but I've added them to the 'Backup Operators' group on the trial computer(s)
When I try to configure a backup, I receive the UAC prompt and authenticate as the trial user
After that though, I get an error message saying:
The backup application could not start due to an internal error:
You must be logged on as an administrator to perform this task.
(0x81000010)
I've tried searching for an answer, but I haven't really come up with anything helpful.
Any ideas / suggestions on how I might be able to fix this?
June 8th, 2010 9:45am
Hi,
To troubleshoot the issue, please try the following steps.
1. Add the standard user to AppLocker.
Type Secpol.msc in Search box in Start menu> Application Control Policies > AppLocker > Executable Rules > New hash rule for
Backup Operators to allow them to use sdclt.exe
2. Tried to add user in the following GPO:
Computer Configuration>Windows settings>Security settings> Local policies>User rights assignements> Back up files and directories.
3. Plug an external hard drive and try to back up information to the driver for a test.
Thanks,
Novak
Free Windows Admin Tool Kit Click here and download it now
June 9th, 2010 5:46am
Hello
I have the very same issue: same error code when trying to configure backup but only since I joined my corporate domain.
I performed the steps you indicated without noticing any improvement.
Would you have any other leads? Could I provide any log helping in troubleshooting this?
Thanks in advance.
August 11th, 2010 4:27pm
I have the same issue after joining domain, did you every find an answer?Tom
Free Windows Admin Tool Kit Click here and download it now
February 21st, 2011 1:30pm
1 - Makes no sense and was a red herring, nobody mentioned AppLocker. (And I couldn't find the path to sdclt.exe anyway...existing documentation is *very* sparse.
2 - Pointed me in the right direction, but couldn't modify the local policy. The AD policy had a certain group listed, we had to add the local administrator's group to the policy, one gpupdate and logout/login later, and it's fixed!--Seek Truth, and you will find Joy!
June 28th, 2011 5:03pm