backup

privilege::backup requests the backup privilege (SeBackupPrivilege).

Required to perform backup operations. This privilege causes the system to grant all read access control to any file, regardless of the access control list (ACL) specified for the file. Any access request other than read is still evaluated with the ACL. This privilege is required by the RegSaveKey and RegSaveKeyEx** **functions. The following access rights are granted if this privilege is held:\

  • READ_CONTROL

  • ACCESS_SYSTEM_SECURITY

  • FILE_GENERIC_READ

  • FILE_TRAVERSE

User Right: Back up files and directories. If the file is located on a removable drive and the "Audit Removable Storage" is enabled, the SE_SECURITY_NAME is required to have ACCESS_SYSTEM_SECURITY.

(docs.microsoft.com)

mimikatz # privilege::backup
Privilege '17' OK
PreviousprivilegeNextdebug

Last updated