This user right determines which users can bypass file and directory, registry, and other persistent object permissions for the purposes of backing up the system.
Specifically, this user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Caution
Assigning this user right can be a security risk. Since there is no way to be sure that a user is backing up data, stealing data, or copying data to be distributed, only assign this user right to trusted users.
Policy path:
Computer Configuration\Windows Settings\Local Policies\User Rights Assignment
Default:
Default on workstations and servers: Administrators
Backup Operators.
Default on domain controllers:Administrators
Backup Operators
Server Operators
Supported on:
At least Windows XP SP2, Windows Server 2003
Registry settings:
User Rights security settings are not registry keys
Reboot required:
No
Comments: