We are running the below command to copy the files from the share on a NAS device and destination being Azure file share . The command is being run from a windows 2012 machine
robocopy "\\server1\aapp12 " "\\xyzabs.file.core.windows.net\server45123456\AaPP12 " /SEC /COPYALL /DCOPY:DAT /E /R:1 /W:1 /XO /zb /mt=13 /LOG:AaPP12-ppsd.txt
What we find is that the files on which i have permissions i am apply to copy but on the files on which i don't i just get an access is denied in the procmon logs
If i look at the event properties it says that the desired access required is READ.
Desired Access: Generic Read
Disposition: Open
Options: Sequential Access, Synchronous IO Non-Alert, Non-Directory File, Open Reparse Point, Disallow Exclusive
Attributes: n/a
ShareMode: Read, Delete
AllocationSize: n/a
I am using /zB command in the robocopy so that the backup priviledge comes into play and i am even able to copy files on which i don't have permissions.
The questions that i have is :
1)is that /zb command won't work as the share is remote and the files that we are trying to copy are not local to server ?
2)Is that Robocopy command when run it knows under what credentials it is running and under what account and it makes a copy of that credentials and compair the ACL's on that files when he is trying to access that file ?
3)I also found that when i run the command whoami /priv this is disabled for me . Is that these should be enabled for /zb to make use of backup priviledges ?
SeBackupPrivilege Back up files and directories Disabled
SeRestorePrivilege Restore files and directories Disabled