Skip to main content
  • EN
hello, Small trick following a bad handling. The objective is to restore on a Windows file server the ACLs of the files without restoring the files.
For this we will start by opening the console restore guest files.

 

Once done, click on any file, then explore to find the path to the FLR mount.

To get the list of ACLs you can run a single command. This command will save all subfolders and files as a plain text. The text file (acl.txt) will be saved on your current user folder.
icacls c:data /save acl.txt /t /c

Where “C:data” is the FLR path, “T” is added to get all subfolders and files on that drive, and “C” allows to ignore all the access errors.

If the number of folders and files are too large, then the command will take a long time to complete its execution. At the end of execution, you will get the list of total files which is processed successfully, and the number of files which don’t get success in processing.

If you want to restore the lists, execute the following command

Icacls c: /restore acl.txt

Thanks for sharing this tip @Philippe S - something else to add to my repo of stuff.  😋

Hi Phillipe

 

Thank you. Might be helpful in V10 and V11.

In V12 you don‘t require that procedure anymore. We have build in a restore permission only button. :)

https://helpcenter.veeam.com/docs/backup/vsphere/guest_restore_save_vm.html?ver=120#restoring-permissions

 

Best,

Fabian

Hi Phillipe

 

Thank you. Might be helpful in V10 and V11.

In V12 you don‘t require that procedure anymore. We have build in a restore permission only button. :)

https://helpcenter.veeam.com/docs/backup/vsphere/guest_restore_save_vm.html?ver=120#restoring-permissions

 

Best,

Fabian

Ah yes forgot this hidden little feature now.  v12 for the win!

Hi Phillipe

 

Thank you. Might be helpful in V10 and V11.

In V12 you don‘t require that procedure anymore. We have build in a restore permission only button. :)

https://helpcenter.veeam.com/docs/backup/vsphere/guest_restore_save_vm.html?ver=120#restoring-permissions

 

Best,

Fabian

Thanks Fabian I did not know this! 

So, my next and perhaps obvious question is:

Does previous versions of VBR in fact store this information?

Case scenario:
Some kiddie scripted away a file servers entire ACL structure. None is documented.
Backup is performed with Veeam V9
Would I be able to upgrade to v12 and THEN perform the File Permission Only restore?

(Most genes in my body says: No!)

@Kilo77 As Veeam does create image based backup, the ACLs are stored within the backup files. In V12 the backup browser just has received the capability to restore permissions directly. So I would say, yes after you upgrade you'll be able to restore the permissions.

Speaking if upgrading. If you're still on v9 then you should plan to upgrade as soon as possible. Your Veeam installation is affected by some critical vulnerabilities which have been fixed in V11 and V12.

@Kilo77As Veeam does create image based backup, the ACLs are stored within the backup files. In V12 the backup browser just has received the capability to restore permissions directly. So I would say, yes after you upgrade you'll be able to restore the permissions.

Speaking if upgrading. If you're still on v9 then you should plan to upgrade as soon as possible. Your Veeam installation is affected by some critical vulnerabilities which have been fixed in V11 and V12.

 

Hi Max,

Thank you for responding. Actually the client do run V11, but fully agree they should upgrade regardless. :)

Comment


Terms & Conditions