1

Topic: It is insufficiently right on a folder of backup copies

Microsoft SQL Server 2016 (SP1) (KB3182545) - 13.0.4001.0 (X64) Oct 28 2016 6:17:30 PM
Added the rights for users:
System
LOCAL SERVICE
NETWORK SERVICE
Managers
There is no access. And yet I will not add in properties of safety Everything",  does not work.
How correctly to specify the rights to a folder?
Service MSSQLSERVER is launched from a name "NT Service\MSSQLSERVER".

2

Re: It is insufficiently right on a folder of backup copies

Slon747;
And the owner  who? Or even the direct command from SSMS does not transit?

3

Re: It is insufficiently right on a folder of backup copies

Ennor Tiegael wrote:

And the owner  who? Or even the direct command from SSMS does not transit?

The owner sa.
If to remove at a folder of the user Everything"the command" BACKUP DATABASE msdb TO Backup_disk "returns:
Cannot open backup device ' Backup_disk (E:\MSSQL_Backup\Backup_disk.bak) '. Operating system error 5 (It is refused access.).

4

Re: It is insufficiently right on a folder of backup copies

The rights to a folder with  should be at the security account under which server service MS-SQL (SQL servers on a SQL Agent or  under which it is launched SSMS), in your case starts it "NT Service\MSSQLSERVER".
As a variant, create the separate domain security account for start MS-SQL of the server, allocate with its rights that under it service SQL (how to make such  without  it is right full information at this forum) would work

5

Re: It is insufficiently right on a folder of backup copies

$path = ' C:\TEMP ';
$user = ' NT Service\MSSQLSERVER ';
#$user = ' NT Service\MSSQL$INSTANCE ';
$ErrorPreference = "SilentlyContinue"
try {
$acl = Get-Acl $path;
$Rule = New-Object System.Security.AccessControl.FileSystemAccessRule $user, ' FullControl ', ' ContainerInherit ', ' None ', ' allow ';
$acl. AddAccessRule ($Rule);
Set-Acl-Path $path-AclObject $acl;
write-host ' Ok ';
} catch {
write-host ' Error: check up $path and $user ';
}

6

Re: It is insufficiently right on a folder of backup copies

max44 wrote:

the rights to a folder with  should be at the security account under which server service MS-SQL (SQL servers on a SQL Agent or  under which it is launched SSMS), in your case starts it "NT Service\MSSQLSERVER".

I would add this user in safety of a folder, but in the list it is not present.

max44 wrote:

As a variant, create the separate domain security account for start MS-SQL of the server, allocate with its rights that under it service SQL (how to make such  without  it is right full information at this forum)

would work
Thanks. I will try.