You administer Windows 10 Enterprise desktop computers that are members of an Active Directory
domain. You want to create an archived copy of user profiles that are stored on the desktops. You
create a standard domain user account to run a backup task. You need to grant the backup task
user account access to the user profiles. What should you do?
A.
Add the backup task account to the Remote Management Users group on a domain controller.
B.
Add the backup task account to the Backup Operators group on every computer.
C.
Add the backup task account to the Backup Operators group on a domain controller.
D.
Set the backup task account as NTFS owner on all the profiles.
Explanation:
The Local Backup Operators group can back up and restore files on a computer, regardless of any
permission that protect those files.
Incorrect Answers:
A: The Remote Management Users group is normally used to allow users to manage servers via
the Server Manager console.
C: Members of the Domain Backup Operators group will be able to back up all files and folders on
all computers in the domain, not just the Windows 10 Enterprise desktop computers.
D: Setting the backup task account as NTFS owner on all the profiles will allow the backup task
account to control how permissions are set on the NTFS volumes for those user profiles and to
whom permissions are granted. You only need to grant the backup task user account access to the
user profiles, not control over its permissions.
https://technet.microsoft.com/en-us/library/cc771990.aspx
https://technet.microsoft.com/en-us/library/dn579255.aspx
https://technet.microsoft.com/en-us/library/cc779180(v=ws.10).aspx