Under Extra -> Options I had enabled
[x] Dateien ausfallsicher kopieren (Copy files reliably) (recommended)
[x] Gesperrte Dateien kopieren (Copy locked files) (needs Admin rights)
[x] DACL, SACL, Besitzer und Gruppe kopieren (Copy DACL, SACL, owner and group) (needs Admin rights)
I am copying as user and around 20.000 or more errors showed up, but I didn't see them for weeks.
I only wondered that backup took longer and so many files were not copied.
When looking more in detail it looks as if those files were copied, but when setting access rights failed, then the whole mirror of the file failed.
I disabled now the options that need Admin rights, works much better, only 90 errors with reasons (from user profile).
Question: why don't you make a fallback and do so, as if the two options were not active and simply keep the copied file even if the file attributes could not be properly restored on the just mirrored file?
This would be far better, because then I had a backup of the file.
I am starting unattended via "Aufgabenplanung" (Task planner).
The problem, my user has no admin rights and I restored the Administrator account.
When running under Administrator account, then the permissions might be ok, BUT, I do not see any FreeFileSync window, which is not the desired way of operation.
Therefore I reverted it back to run under user rights....
But .. for safety reasons, could you ignore any potential errors regarding this?
[x] Gesperrte Dateien kopieren (Copy locked files) (needs Admin rights)
[x] DACL, SACL, Besitzer und Gruppe kopieren (Copy DACL, SACL, owner and group) (needs Admin rights)
So that even if this fails, the copied file stays there?
I am not 100% sure, but assume that also the copy failed, because nothing gets mirrored and every new run runs into the same issue.
Maybe a lot of files didn't get mirrored
- Posts: 11
- Joined: 24 Mar 2016
-
- Posts: 3017
- Joined: 22 Aug 2012
(Scheduled) tasks running under different user credentials than the active/logged-in user do not show up in that active/logged-in user's task-bar or desktop.
> ... and I restored the Administrator account.
Do not restore your Administrator account. Instead, create a new, dedicated account with admin rights that you only use to run your syncs. Obviously, this dedicated account must have read and write access to the file locations involved in your syncs.
But those syncs will still be invisible to the active/logged-in user (other than via the Task manager).
> ... and I restored the Administrator account.
Do not restore your Administrator account. Instead, create a new, dedicated account with admin rights that you only use to run your syncs. Obviously, this dedicated account must have read and write access to the file locations involved in your syncs.
But those syncs will still be invisible to the active/logged-in user (other than via the Task manager).
- Posts: 11
- Joined: 24 Mar 2016
Sorry, but I see no reason why I shouldn't restore the Administrator account.
My users doesn't get Administrator credentials which is part of my security policy.
Could you kindly explain why another user with Admin credentials should work better at all in this particular context? At the end you say yourself it doesn't solve the issue to see the FreeFileSync GUI.
My users doesn't get Administrator credentials which is part of my security policy.
Could you kindly explain why another user with Admin credentials should work better at all in this particular context? At the end you say yourself it doesn't solve the issue to see the FreeFileSync GUI.
-
- Posts: 3017
- Joined: 22 Aug 2012
> I see no reason why I shouldn't restore the Administrator account.
If you need an account with administrator privileges, create a separate account with the necessary privileges. Restoring/re-enabling your Administrator account makes your system much more vulnerable then when using a separate account with admin privileges.
See e.g. https://www.google.com/search?q=why+disable+the+administrator+account.
> At the end you say yourself it doesn't solve the issue to see the FreeFileSync GUI.
True. Assuming you still prefer to Copy Locked Files and want to Copy DACL, SACL, owner and group, I wanted to warn/protect you against making your system more vulnerable by restoring/re-enabling your Administrator account.
Without hacking your system, you can not run Scheduled Tasks with admin rights as a non-admin user.
Running a task from the Task Scheduler, but wanting to see it in a GUI is an odd/unusual combination.
After all, the purpose of the Task Scheduler is to run tasks unattended.
The only option for a non-admin user to run an FFS sync with admin rights in an FFS GUI of that user, seems to be to not start the task from the Task Scheduler, but instead start FFS manually and use "Run as administrator" or create a shortcut with a command-line
You then (still) need to enter the credentials of an administrator account; credentials you may not want to make public to non-admin users ...
If you need an account with administrator privileges, create a separate account with the necessary privileges. Restoring/re-enabling your Administrator account makes your system much more vulnerable then when using a separate account with admin privileges.
See e.g. https://www.google.com/search?q=why+disable+the+administrator+account.
> At the end you say yourself it doesn't solve the issue to see the FreeFileSync GUI.
True. Assuming you still prefer to Copy Locked Files and want to Copy DACL, SACL, owner and group, I wanted to warn/protect you against making your system more vulnerable by restoring/re-enabling your Administrator account.
Without hacking your system, you can not run Scheduled Tasks with admin rights as a non-admin user.
Running a task from the Task Scheduler, but wanting to see it in a GUI is an odd/unusual combination.
After all, the purpose of the Task Scheduler is to run tasks unattended.
The only option for a non-admin user to run an FFS sync with admin rights in an FFS GUI of that user, seems to be to not start the task from the Task Scheduler, but instead start FFS manually and use "Run as administrator" or create a shortcut with a command-line
runas /user:[UserWithAdminRights] "[TheFFSexe] [SavedSyncConfigToRun]"