Go Up
You are here: ConfigurationConfigure Netwrix Auditor Service AccountsData Collecting AccountConfiguring 'Back up Files and Directories' Policy

Configuring 'Back up Files and Directories' Policy

You can configure this policy via the Local Security Policy snap-in or using the Group Policy Management console. Review the following for additional information:

To configure the Back up Files and Directories' policy via the Local Security Policy snap-in

  1. On any domain controller in the target domain, open the Local Security Policy snap-in: navigate to Start Windows Administrative Tools (Windows Server 2016) or Administrative Tools (Windows 2012 R2 and below) Local Security Policy.
  2. Navigate to Security Settings Local Policies User Right Assignment.
  3. Locate the Back up files and directories policy and double-click it.
  4. In the Back up files and directories Properties dialog, click Add User or Group, specify the user that you want to define this policy for.

To configure the Back up Files and Directories' policy using the Group Policy Management console

NOTE: Perform this procedure only if the account selected for data collection is not a member of the Domain Admins group.

  1. Open the Group Policy Management console on any domain controller in the target domain: navigate to Start Windows Administrative Tools (Windows Server 2016/2019) or Administrative Tools (Windows 2012 R2 and below) → Group Policy Management.
  2. In the left pane, navigate to Forest: <forest name>Domains <domain name>Domain Controllers. Right-click the effective domain controllers policy (by default, it is the Default Domain Controllers Policy), and select Edit .

  3. In the Group Policy Management Editor dialog, expand the Computer Configuration node on the left and navigate to Policies Windows SettingsSecurity SettingsLocal Policies.

  4. On the right, double-click the User Rights Assignment policy.

  5. Locate the Back up files and directories policy and double-click it.

  6. In the Back up files and directories Properties dialog, click Add User or Group and specify the user that you want to define this policy for.

  7. Navigate to Start Run and type "cmd". Input the gpupdate /force command and press Enter. The group policy will be updated.

  8. Type repadmin /syncall command and press Enter for replicate GPO changes to other domain controllers.

  9. Ensure that new GPO settings applied on any audited domain controller.

Go Up