Notes

These notes refer to backing up as a non-admin user on versions of Windows from Vista onwards, and arise out of the changed security model now employed in Windows.

Non-administrative users need to be added to the 'Backup Operators' Group to allow users to bypass security restrictions for the sole purpose of backing-up and restoring files. Note that what follows will however not work in Vista Home, which lacks the Backup Operators administrative group: a Vista Home user will need to be logged on as administrator in order to run TSM.

Users must have read-write access to the dsmerror.log, dsmsched.log and dsmwebcl.log files and have read-write permissions on the C:\Program Files\tivoli\tsm\baclient folder in order to avoid the warning message of not being able to write dsmerlog.pru and/or dsmsched.pru. In fact if you grant users read-write access to the baclient folder under C:\Program Files\tivoli\tsm then this is inherited by the files in the folder.

If you have been performing Windows System State backups with an account which is a member of the Administrators group and if you want to subsequently start doing backups or restores with an account which is a member of the Backup Operators group, you must delete the staging directory, C:\adsm.sys, before attempting backups or restores of the System State or System Services as a member of the Backup Operators group.

If you have existing backups from a TSM 5.2 or previous client and you attempt an incremental backup of an existing file space with a member of the Backup Operators group, all of the data will appear as changed and it will be resent to the Tivoli Storage Manager Server.

Members of the Backup Operators group might not be able to back up or restore file data that was encrypted by an Administrator account using the Windows encrypting file system (EFS).

Members of the Backup Operators group do not have the proper authority to update the last access time for files that are encrypted with the Windows encrypting file system (EFS). If EFS files are restored by a member of the Backup Operators group, the last access time will not be preserved.

Members of the Backup Operators group do not have the authority to set up and run the TSM scheduler service.