Giving a user administrative privilege means that user now has full control over your computer. Normally when you are considering user rights and permissions, you should follow the principle of least privilege. This means only assign a user the minimal amount of rights and permissions for them to perform their required tasks. For example, if you want to give a user the right to backup files and directories you could add the user to the Administrators group. However, this goes against the principle of least privilege. A more appropriate solution would be to add the user to the Backup Operators group. You can do so using the following steps:
- Right click My Computer and click Manage.
- Expand Local Users and Groups. Click the Groups container. All the groups are displayed in the details pane.
- Double click Backup Operators and click the Add button.
- Type in the user name of the user you want to add to the group. Click the Check Names button. Click OK.
- Click OK.
Alternatively, you can also assign a user the right to backup files and directories through the local security policy (instead of adding the user account to the Backup Operators group). Simply open the Group Policy console and expand the following: Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment. In the details pane, double click Backup files and directories. Click Add User or Group. Enter the name of the user you want to assign this user right to and click Check Names. Click OK.
[tags]backup,diana huggins,local security policy,backup operators group,permissions[/tags]