So I have a batch script for robocopy. Running this from the command line does exactly what I want.
robocopy "D:\SQL Backup" \\server1\Backup$\daily /mir /s /copyall /log:\\lmcrfs4g\NavBackup$\robocopyLog.txt /np
Then I create a Scheduled Task in Windows Server 2008. If I set up the task to use my Domain Admin account, great. But I'm trying to get it to run as a separate domain account for Scheduled Tasks. If I use that account, folders get created, but files aren't copied. I get the following error:
2011/02/17 15:41:48 ERROR 1307 (0x0000051B) Copying NTFS Security to Destination Directory D:\SQL Backup\folder\ This security ID may not be assigned as the owner of this object.
I've verified my domain\Scheduled Tasks account has Full Control NTFS permissions on both the source and destination, and the Full Control Sharing on my hidden \server1\backup$ share. Just for giggles, I've tried adding the domain account to the local Administrators group on both servers. This works fine, but that seems like a lot of privileges just to copy files. Any ideas on what I'm missing?
EDIT TO ADD:
I've tried using the robocopy \copy:DATSO flag rather than \copyall (I can skip the auditing info), but I still get the same error.
I've also tried using runas \noprofile \user:my Scheduled Tasks user for the robocopy command. I get the same error again.
I'm not averse to simply adding the user to a Built-In group, though Administrators seems like it would be overkill. I'd be interested to know how others handle their Scheduled Tasks.
The account used to perform the copy must have the "Restore files and directories" user right to change the owner to anything other than itself or Administrators.
http://technet.microsoft.com/en-us/library/cc783530%28v=ws.10%29.aspx
I've run into this also. I tend to use /COPY:DATSO instead of /copyall, which copies everything but the "auditing info".
I had a similar problem - changed to /COPY:DATS and no more error Copy was from Server 2003 to a Hitachi HDI.
I was having trouble copying from Server2012 R2 to a Buffalo LinkStation connected to the domain. Many attempts failed but /COPY:DAT worked for me. If you are having permissions issues, then you don't want to include S O U in your COPY option flags.
my working example:
robocopy G:\FEB2FRESH\ \\Ls220\FEB2FRESH\ /s /zb /COPY:DAT /move &pause
citing http://social.technet.microsoft.com/wiki/contents/articles/1073.robocopy-and-a-few-examples.aspx
Copy option flags: D=Data; A=Attributes; T=Time Stamps; S=NTFS access control list (ACL); O=Owner information; U=Auditing information