Installation and User's Guide

Table 18. Required user security rights for Tivoli Storage Manager backup and restoreservices (continued)Operating systemWindows 2003, WindowsVista, or Windows 7Windows XPAccountWhat can I back up andrestore?All other accounts v All file and directoryobjects to which theaccount has accessMember of AdministratorsgroupvvvSystem Access ControlLists (SACL) used forauditing entries is notbacked up or restoredAll file and directoryobjectsSystem Object dataWindows XP All other accounts v All file and directoryobjects to which theaccount has accessv System Access ControlLists (SACL) used forauditing entries is notbacked up or restoredThe account must have the "Backup files and directories" and "Restore files and directories"security settings to back up these objects:v File objectsv Directory objectsv System state data with Windows 2003, Windows Vista, or Windows 7By default, the Administrators and Backup Operators groups are granted these securitysettings.By default, Tivoli Storage Manager client services run under the local systemaccount. However, the local system account does not have access to networkmapped drives and does not have the same permissions and logon properties as auser that is logged in to the system. If you experience discrepancies between a userinitiated backup and a scheduled backup using the local system account, considerchanging the services to run under the user account.Tip: In addition to the appropriate user security rights, the Tivoli StorageManager Backup-Archive client requires that the user has read permission to theroot of any drive that needs to be backed up or restored. If you are using thesystem account to logon for the Tivoli Storage Manager scheduler service, ensurethat you grant the system account (SYSTEM) read access to the root of the drive. Itis not sufficient to grant Everyone read access to the root of the drive.Domain resources, such as network drives, can only be accessed by servicesconfigured to run under a domain authorized account using dsmcutil or theService Control Panel Application.Backup Operators group operationsThe Backup Operators group allows users to back up and restore files regardless ofwhether they have read or write access to the files.82 IBM Tivoli Storage Manager for Windows Backup-Archive Clients: Installation and User's Guide