Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Preventing NT AUTHORITY\SYSTEM to take backups Expand / Collapse
Author
Message
Posted Monday, May 03, 2010 2:08 AM
Grasshopper

GrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopperGrasshopper

Group: General Forum Members
Last Login: Tuesday, June 26, 2012 6:08 AM
Points: 23, Visits: 670
Hi All,

I gone the through msdb.dbo.backupmediafamily,msdb.dbo.backupset tables ,
I found that some one from NT AUTHORITY\SYSTEM taking backups.

But i cant delete or remove this User ,
How can i prevent "NT AUTHORITY\SYSTEM" to take backups ?
Post #914522
Posted Monday, May 03, 2010 5:54 AM
Ten Centuries

Ten CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen CenturiesTen Centuries

Group: General Forum Members
Last Login: 2 days ago @ 4:56 AM
Points: 1,002, Visits: 884
Are you running SQL Server using a domain account or a local account?

More than likely you have it running as a local account.

NT Authority\System just does not take backups, you have a job scheduled somewhere to backup, and since SQL is likely running under the local account, that is what you are seeing.


/* ----------------------------- */
Tochter aus Elysium, Wir betreten feuertrunken, Himmlische, dein Heiligtum!

Post #914600
Posted Monday, May 03, 2010 9:13 AM


Keeper of the Duck

Keeper of the Duck

Group: Moderators
Last Login: Thursday, April 03, 2014 10:06 PM
Points: 6,621, Visits: 1,851
Are you using a Symantec/Veritas product to backup the server? If so, it likely recognizes that there is a SQL Server on the system and is using the SQL Server methods to back up the databases (so that they are good backups). The Agent the product installs on said server typically runs as NT Authority\System (Local System if you look in Services). That would be my guess as to where the backups are coming from. And likely then you don't want to disable it without talking to your backup administrator.

K. Brian Kelley, CISA, MCSE, Security+, MVP - SQL Server
Regular Columnist (Security), SQLServerCentral.com
Author of Introduction to SQL Server: Basic Skills for Any SQL Server User
| Professional Development blog | Technical Blog | LinkedIn | Twitter
Post #914756
Posted Saturday, May 08, 2010 2:48 PM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Yesterday @ 11:51 AM
Points: 5,958, Visits: 12,839
K. Brian Kelley (5/3/2010)
Are you using a Symantec/Veritas product to backup the server? If so, it likely recognizes that there is a SQL Server on the system and is using the SQL Server methods to back up the databases (so that they are good backups). The Agent the product installs on said server typically runs as NT Authority\System (Local System if you look in Services). That would be my guess as to where the backups are coming from. And likely then you don't want to disable it without talking to your backup administrator.


I too have seen this. In my case the backups were failing, the Symantec Management Console has a section for database backups. Ours attempted to backup to default path which didnt exist. We disabled it!!


-----------------------------------------------------------------------------------------------------------

"Ya can't make an omelette without breaking just a few eggs"
Post #918556
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse