Backup Software / Using Active Directory for Centralized Backup Software

Using Active Directory for Centralized Backup Software

Comments: 0

Workstation access for backup has to be centralized. Anybody will find making and managing all the reserve data copies from a single point to be truly convenient. But what if we logically expand this desire and try to set up a remote version of this solution?

Good news are this can be achieved with Active Directory. Any centralized backup software using this can be truly helpful (especially, in case of 10 or more workstations).

Active Directory contains a very useful feature which allows for Administrators to automatically deploy software to machines or users automatically when the machine is booted or a user logs on. As usual, to apply all of these, you have to check some things first.

Handy Backup Server Network

The software’s Server and Backup Network Workstations are fully compatible with Windows 10/8/7/Vista and 2019/2016/2012/2008 Server operating systems.

Configuring Windows 8 Network Access

We assume, you will be deploying software to a set of machines in which the user does not have local admin rights, so this workstation access for backup guide will focus on the process to deploy to the computers via the Computer Configuration GPO setting. Firstly, you have to ensure the MSI installer files works as you planned.

(Show)

Dealing with Windows 8 network access you should remember, that if an installer attempts to set HKEY_Current_User registry keys, that process will fail since there is no user logged onto the machine during the software deployment, so no HKEY_Current_User registry section is available.

If you require HKEY_Current_User registry keys to be set, split your MSI installer file into two parts, and define the software installation in the Computer Configuration GPO section, and the HKEY_Current_User registry updates in the User Configuration GPO section.

Defining the GPO and Package Object for the Backup Server

To set up your Windows 8 network access, create a share on a server, and allow Domain Computers at least READ access to the share. Copy the MSI installation file to the share and ensure it also allows for Domain Computers READ access.

(Show)

Now, to set up the things for your backup server, create the Group Policy Object in the Active Directory Users and Computers application:

Right click on the OU you wish to define the GPO and select Properties.
Click the Group Policy tab and click New.
Type a descriptive name for this new GPO. Be sure to prefix the name with your Section/Division to provide ambiguity.
Click the Properties button, then select the Security tab. Add the Domain Computers group (or edit the existing Authenticated Users group) and assign the READ and APPLY GROUP POLICY rights.
Click on the Edit button to edit this new Group Policy. Expand the Computer Configuration\Software Settings tree on the left side of the screen. Right-click Software Installation tree option and select the menu item New\Package.
An Open File dialog box should appear. Type in the UNC path to the server share where the MSI installer file is located. Select the appropriate MSI installer file and click Open.
Select the Assign radio button and click OK. Published will not automatically install the MSI installer file, but instead place an entry in the local Add/Remove Programs utility for manual installation later. Advanced will give you the ability to change certain properties such as the Package Name.
Right click on the Package Object and select Properties.
Click on the Security tab and add Domain Computers (or Authenticated Users) to the security permissions.
Click the Advanced tab and select Domain Computers (or Authenticated Users) and click Edit. Assign the List Contents, Read All Properties and Read Permissions checkboxes are selected.
Close the Group Policy window.
Close the GPO window.
Wait about 10-15 minutes for your changes to be replicated to the other Domain Controllers, then reboot.

Verifying Installation for Workstation Network Backup

After rebooting a workstation contained within the OU you defined the GPO Software Deployment policy for, an information box should appear on the screen after the Applying Security Settings messages.

The message will be stating that it is installing the MSI package along with the name you defined in the Package Object advanced properties, or defaulting to the deployment name within the MSI installation file.

After the workstation boots, log in and open the Event Viewer.
Navigate to the Applications Event Viewer.
A successful installation will have three informational entries indicating a successful MSI deployment. Check the Event Viewer message to see if there are any errors.

Free Download

Version 8.4.0, built on June 30, 2022
113 MB

This guide on setting the workstation access for backup can be applied not only to Handy Backup, but, basically, to any solution, that has Active Directory support. We hope this helps. Good luck!

See also: Workstation Backup Solution