Backup Operators group rights

Hello, Quick question regarding rights.

I would like to backup the OS (c drive) partition on a Domain Controller in a W2K3 domain. Im doing a couple of tests and came up with this result:

Backing up the OS using an account in the backup operators group fails.
Backing up the OS using an account in the backup administrators group passes.

There are some security concerns over using administrators to backup. I have a couple of questions on this.

What minimum domain rights are required for backup?
Can we give the backup operators group rights to backup (without nesting into administrators group)?

Thanks for your time and have a good day.
Fab

 

I think the admin account is needed. it might have something to do with steady state backup and the sysvol folder... backup operators dont have full rights to that, only admins.... just my hunch.

 

Administrators or Domain Admins would work....