Best practices for Removable Storage

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Best practices

  • Use Run as to run Removable Storage as an Administrator.

    To maintain system security, log in as a member of the Users group and run Removable Storage as an administrator by right-clicking the Computer Management icon, clicking Run as, and choosing an account in the local Administrators group.

  • Keep tapes and disks secure.

    A malicious user could use Removable Storage tapes and disks to gain access to sensitive data. To maintain security, keep tapes and disks in a secure location when not in use, and secure your libraries by assigning them sufficient permissions to prevent unauthorized users from tampering with or ejecting the tapes and disks.

  • Verify your library hardware is supported first before using Removable Storage.

    Before adding a new library to a Removable Storage system, you should review the hardware compatibility information in the Windows Catalog. You can access the Windows Catalog from Support resources.

  • Use the Cleaner Management Wizard to clean tape drives.

    If your library's drives support cleaning, inject cleaning tapes using the Cleaner Management Wizard.

  • Insert media into an automated library before use.

    Before you create a new media pool, insert media into each automated library you want Removable Storage to control. If a library is empty, Removable Storage cannot detect the media type.

  • Keep your media count under 1,000 per system installation.

    For performance reasons, do not manage more than 1,000 tapes or disks in a single Removable Storage system.

  • Turn on operator requests only when necessary.

    Turning on operator requests enables programs on a remote computer to redirect and display operator requests on your computer. Turn off operator requests when it is not needed.

    You can turn on or turn off operator requests by selecting or clearing the Display operator request and progress dialogs and Use notification area icon for pending operator requests check boxes as described in Change how operator requests are displayed.

  • Give users the appropriate level of access.

    The following table shows the media pool permissions applicable to specific types of users depending on their location. The Control permission on the Root pool enables users to create media pools. In addition, to create sub-pools, users must have the Control permission on the parent pool. Only those users who must have the ability of creating media pools should have Control permissions added to the Root pool.

    Location User Type Use Control Modify View Permissions Modify Permissions

    Computer

    User

    X

    Power User

    X

    X

    Backup Operator

    X

    X

    System

    X

    X

    X

    X

    X

    Media Library

    User

    X

    Power User

    X

    X

    Backup Operator

    X

    X

    System

    X

    X

    X

    X

    X

    Root Pool

    User

    Power User

    X

    Backup Operator

    X

    System

    X

    System Pool

    User

    X

    Power User

    X

    X

    Backup Operator

    X

    X

    System

    X

    X

    X

    X

    X