password protect backup tape using ntbackup

[PB]

Is it possible to password protect backup tape using ntbackup?

 

[Ryan Hanisco]

Take a look at...
http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true


--
Ryan Hanisco
MCSE, MCTS: SQL 2005, Project+
Chicago, IL

Remember: Marking helpful answers helps everyone find the info they need
quickly.


"PB" wrote:

> Is it possible to password protect backup tape using ntbackup?

 

[Mathieu CHATEAU]

Someone can steal the tape and restore it from it's home, as he will have
"administrator" privilege on it's own computer.

Windows NT Backup and Security
http://support.microsoft.com/kb/q104221/en-us

The tape is not encrypted. The name of the computer and owner is just
written in the head of the tape.

Anyone having these rights can restore:
The system administrator, who has access to all tapes.
The person who created the tape originally. In this case, you must be logged
on to the computer where the tape was originally created.
A person with the "Back up files and directories" right.

So it's just a protection for inside your company, to avoid user reading
ntbackup files found on a share.



--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message
news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...
> Take a look at...
> http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true
>
>
> --
> Ryan Hanisco
> MCSE, MCTS: SQL 2005, Project+
> Chicago, IL
>
> Remember: Marking helpful answers helps everyone find the info they need
> quickly.
>
>
> "PB" wrote:
>
>> Is it possible to password protect backup tape using ntbackup?

 

[PB]

Using ntbackup - Switch: /R:{yes} will make no difference. Is that correct?

"Mathieu CHATEAU" wrote:

> Someone can steal the tape and restore it from it's home, as he will have
> "administrator" privilege on it's own computer.
>
> Windows NT Backup and Security
> http://support.microsoft.com/kb/q104221/en-us
>
> The tape is not encrypted. The name of the computer and owner is just
> written in the head of the tape.
>
> Anyone having these rights can restore:
> The system administrator, who has access to all tapes.
> The person who created the tape originally. In this case, you must be logged
> on to the computer where the tape was originally created.
> A person with the "Back up files and directories" right.
>
> So it's just a protection for inside your company, to avoid user reading
> ntbackup files found on a share.
>
>
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message
> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...
> > Take a look at...
> > http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true
> >
> >
> > --
> > Ryan Hanisco
> > MCSE, MCTS: SQL 2005, Project+
> > Chicago, IL
> >
> > Remember: Marking helpful answers helps everyone find the info they need
> > quickly.
> >
> >
> > "PB" wrote:
> >
> >> Is it possible to password protect backup tape using ntbackup?
>
>

 

[Mathieu CHATEAU]

Not outside your domain, or even against other domain admin & co...

That may be useful between developpers backing up with ntbackup, or any
people that isn't admin.

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"PB" <PB@discussions.microsoft.com> wrote in message
news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...
> Using ntbackup - Switch: /R:{yes} will make no difference. Is that
> correct?
>
> "Mathieu CHATEAU" wrote:
>
>> Someone can steal the tape and restore it from it's home, as he will have
>> "administrator" privilege on it's own computer.
>>
>> Windows NT Backup and Security
>> http://support.microsoft.com/kb/q104221/en-us
>>
>> The tape is not encrypted. The name of the computer and owner is just
>> written in the head of the tape.
>>
>> Anyone having these rights can restore:
>> The system administrator, who has access to all tapes.
>> The person who created the tape originally. In this case, you must be
>> logged
>> on to the computer where the tape was originally created.
>> A person with the "Back up files and directories" right.
>>
>> So it's just a protection for inside your company, to avoid user reading
>> ntbackup files found on a share.
>>
>>
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message
>> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...
>> > Take a look at...
>> > http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true
>> >
>> >
>> > --
>> > Ryan Hanisco
>> > MCSE, MCTS: SQL 2005, Project+
>> > Chicago, IL
>> >
>> > Remember: Marking helpful answers helps everyone find the info they
>> > need
>> > quickly.
>> >
>> >
>> > "PB" wrote:
>> >
>> >> Is it possible to password protect backup tape using ntbackup?
>>
>>

 

[PB]

Is there an solution to protect the tape?

"Mathieu CHATEAU" wrote:

> Not outside your domain, or even against other domain admin & co...
>
> That may be useful between developpers backing up with ntbackup, or any
> people that isn't admin.
>
> --
> Cordialement,
> Mathieu CHATEAU
> http://lordoftheping.blogspot.com
>
>
> "PB" <PB@discussions.microsoft.com> wrote in message
> news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...
> > Using ntbackup - Switch: /R:{yes} will make no difference. Is that
> > correct?
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Someone can steal the tape and restore it from it's home, as he will have
> >> "administrator" privilege on it's own computer.
> >>
> >> Windows NT Backup and Security
> >> http://support.microsoft.com/kb/q104221/en-us
> >>
> >> The tape is not encrypted. The name of the computer and owner is just
> >> written in the head of the tape.
> >>
> >> Anyone having these rights can restore:
> >> The system administrator, who has access to all tapes.
> >> The person who created the tape originally. In this case, you must be
> >> logged
> >> on to the computer where the tape was originally created.
> >> A person with the "Back up files and directories" right.
> >>
> >> So it's just a protection for inside your company, to avoid user reading
> >> ntbackup files found on a share.
> >>
> >>
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> http://lordoftheping.blogspot.com
> >>
> >>
> >> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in message
> >> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...
> >> > Take a look at...
> >> > http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true
> >> >
> >> >
> >> > --
> >> > Ryan Hanisco
> >> > MCSE, MCTS: SQL 2005, Project+
> >> > Chicago, IL
> >> >
> >> > Remember: Marking helpful answers helps everyone find the info they
> >> > need
> >> > quickly.
> >> >
> >> >
> >> > "PB" wrote:
> >> >
> >> >> Is it possible to password protect backup tape using ntbackup?
> >>
> >>
>
>

 

[Mathieu CHATEAU]

Not with ntbackup directly.
Commercial backup software allow to encrypt the backup stream with keys.

The free only solution i found, which is cheap and bad:
do the ntbackup on disk
zip the ntbackup file with password protection (or use PGP)
then backup the zip to tape with ntbackup.

You Would consider putting the tape in a real safe place (like in a bank)
instead of doing the cheap solution that will ask you a lot more time in
case of restore (not even speaking of disaster recovery)

shame on me to speak about this solution

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"PB" <PB@discussions.microsoft.com> wrote in message
news:B9BFE015-E1EB-4373-9F3B-1CB115F664C0@microsoft.com...
> Is there an solution to protect the tape?
>
> "Mathieu CHATEAU" wrote:
>
>> Not outside your domain, or even against other domain admin & co...
>>
>> That may be useful between developpers backing up with ntbackup, or any
>> people that isn't admin.
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> http://lordoftheping.blogspot.com
>>
>>
>> "PB" <PB@discussions.microsoft.com> wrote in message
>> news:28B31E0B-7603-4FE8-9FD9-B823F8B228ED@microsoft.com...
>> > Using ntbackup - Switch: /R:{yes} will make no difference. Is that
>> > correct?
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Someone can steal the tape and restore it from it's home, as he will
>> >> have
>> >> "administrator" privilege on it's own computer.
>> >>
>> >> Windows NT Backup and Security
>> >> http://support.microsoft.com/kb/q104221/en-us
>> >>
>> >> The tape is not encrypted. The name of the computer and owner is just
>> >> written in the head of the tape.
>> >>
>> >> Anyone having these rights can restore:
>> >> The system administrator, who has access to all tapes.
>> >> The person who created the tape originally. In this case, you must be
>> >> logged
>> >> on to the computer where the tape was originally created.
>> >> A person with the "Back up files and directories" right.
>> >>
>> >> So it's just a protection for inside your company, to avoid user
>> >> reading
>> >> ntbackup files found on a share.
>> >>
>> >>
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> http://lordoftheping.blogspot.com
>> >>
>> >>
>> >> "Ryan Hanisco" <RyanHanisco@discussions.microsoft.com> wrote in
>> >> message
>> >> news:E23DD707-76C5-4356-BAE3-18EFB5976631@microsoft.com...
>> >> > Take a look at...
>> >> > http://www.microsoft.com/resources/...proddocs/en-us/ntbackup_command.mspx?mfr=true
>> >> >
>> >> >
>> >> > --
>> >> > Ryan Hanisco
>> >> > MCSE, MCTS: SQL 2005, Project+
>> >> > Chicago, IL
>> >> >
>> >> > Remember: Marking helpful answers helps everyone find the info they
>> >> > need
>> >> > quickly.
>> >> >
>> >> >
>> >> > "PB" wrote:
>> >> >
>> >> >> Is it possible to password protect backup tape using ntbackup?
>> >>
>> >>
>>
>>