Check for failed logons in the Event Viewer. You can enable security auditing for logon attempts, file and object access, use of user rights, account manage- ment, security policy changes, restart and shutdown, and process tracking. Backup policies and procedures are essential. In your evaluation, determine which users belong to the Backup Operators group. Carefully evaluate if you trust these users.
Backup operators have the ability to access all areas of the system to back up and restore files.
If Joe is the backup operator, he should have a regular logon account for his personal activities and a special logon account for backing up the system. Set restrictions on the backup account, then set restrictions that force Joe to log on from a specific system only during appropriate hours. Change, with frequency, the name and password of the account to guard against hijacking. Well, I hope that this articles gave You some basic info how to administrate Youre Windows NT server. Aimed at network administrators, consultants, and IT professionals, this book provides invaluable information to help you get up and running.