Using the program in a multi-user environment
I have a laptop with many user accounts. There is also the Administrator account active. Yet I can only run the program with administrative privileges. Also my scheduled backup task only works when I run it manually using the Administrator credentials.
Is this really the only way?
Thank you! Now I know why administrative privileges are needed. Yet still there's no solution to this dilemma. I already have created the Backup Operators group and added the users. But I haven't seen any difference yet.
Try adding the Backup Operators group to the Properties, Security tab for the trueimage.exe Process. Run a Windows search to locate trueimage.exe, right click, properties, security, add group.
Which rights does the group need? Full access?
Does this also apply to TrueImageLauncher.exe and TrueImageMonitor.exe?
Yes full access, if other aspects of the application do not work then you can do the same for the other processes.
I did it for all processes. But still I have to enter the Administrator password. :-(
I notice that in post number 2 you state that you "created the backup operators group". I assume you did this in Computer management?
The Backup Operators Group already exists. Creating a new group would not have the correct permissions needed. Have a look at the link below and note the section explaining How to add a user to the Backup Operators Group. Add you user accounts to this existing Group and set permissions for Read and Write.
Remove the group that you created then see if that improves things for you. If yes then you should go back and remove the permissions policy changes you setup previously for the true image processes.
I notice that in post number 2 you state that you "created the backup operators group". I assume you did this in Computer management?
You're right!
The Backup Operators Group already exists. Creating a new group would not have the correct permissions needed. Have a look at the link below and note the section explaining How to add a user to the Backup Operators Group. Add you user accounts to this existing Group and set permissions for Read and Write.
I don't see a link in your post. And why now "Read and Write"? In a post above I was told to grant "Full Access".
Sorry for the link ommision, it apears below:
http://www.backup4all.com/kb/what-are-backup-operators-365.html
Read and Write should be sufficient privledges for those in this Group. Full access grants much more control and possibly to much control depending on whom these users are. I adviced Full access as Win 10 security has changed in many ways and it may be that you will still have to grant such permissions to the Group. Better to start with the minimum and work up if needed.
I can't see 2 groups, so I guessI did it the right way and my expression was misunderstanding. There's no new information in your link. Sorry, but this doesn't help.
Henja, Enchantech's posts are spot on. However as an alternative, you could create a Windows Scheduled task (control panel >>> administrative tools >>> task scheduler (right click and run as administrator). Create a new scheduled task that is triggered by whatever you want, at startup, at logon, once a day at a specific time, etc. You can then set the task to run as such:
"C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe" /script:"2D01277E9-8320-9E8D-BF7A-725EBB9DE06A.tib.tis"
note: change your script name with the name of your script located in C:\ProgramData\Acronis\TrueImageHome\Scripts
You can open each script with notepad to find the one that you want to make sure you have the correct script name.
I've attached a backup task you can import yourself to use as a base. This one is to run at any logon after 15 minutes (that way it doesn't interfere with login scripts or tasks or slow things down at login). You could change it to a set time each day as well. I have also configured it to run "hidden" and using the local system account. You'll need to use the account you want (system would also be fine, but needs to be changed to system on your local machine). You also need to change the backup task name as the one I used is from my system and won't match yours.
...... There is also the Administrator account active......
Henja...Is the Administrator account the account that you activate by typing in:
net user administrator /active:yes
Do any of the other user accounts have Administrator privileges?
Yes, that's the account! No other account has got Administrator privileges.
Henja,
I believe one regular account on the laptop should have administrator privileges. That account should not be used for any web surfing, blogging, and especially not used for e-mail. It should only be used for tasks that require admin privileges, such as software updates....and running ATI. If you run ATI from this account, you won't have to input the admin password, but you will get the UAC popup. Using this setup, if ATI is run from any other account, it will ask for the admin password. With this setup, scheduled tasks will run.
This is how I have my laptop set up. One admin account and several user accounts with regular user privileges.
Regards,
FtrPilot
Yes, the (scheduled) task also works with my Adminstrator account. This can't be the solution though.
No, it's not the official solution, but a way that could work and is relatively easy to setup and configure. Security wise though, I think that creating a scheduled task to run with the system account (or another admin account) just for that scheduled task, would be more ideal in a network environment where you want users to have limited access. In my work Active Directory environment, we only allowed scheduled tasks to run with specific service accounts that have access to specific shares as well and this is not just for Acronis, but other things like automated robocopy scripts or other automated read/write scripts as well.
The other solution was the one mentioned by Enchantec early one which is to add your logged on users group to the backup operators group and them give read/write access to the shares/locations where the backups need to be written to.
Ultimately, it's up to you as to which one you want to implement. This is not a unique issue to Acronis, but something you're going to run into with any application or job that requires admnistrative access to run.
Bobbo, I tried your solution to create a scheduled task. But it didn't work. Nothing happened after the system start. Do I have to change the task in TrueImage?