WinSecWiki > Security Settings > Local Policies > User Rights > User Rights In-Depth > Restore files and directories

Restore files and directories

AKA: SeRestorePrivilege, Restore files and directories

Default assignment on workstations and member servers: Administrators, Backup Operators 

Default assignment on domain controllers: Administrators, Backup Operators and Server Operators

This extremely powerful user right allows you to replace any object on the system from a backed up version on backup media. Ultimately this right is like having Write, Modify Permissions and Traverse access to every object on the system. This right also allows you to set the owner of an object.

By default this right is not audited even if you enable Audit privilege use. See Full Privilege Auditing.

Back to top

 

Additional Resources