Create User Admin1 for File Backup and Restore

To create a user named Admin1 in contoso.com and allow them to back up and restore files on SRV1 while following the principle of least privilege, you can follow these steps:

1. Log in to the domain controller server using an account that has administrative privileges.

2. Open the Active Directory Users and Computers management console.

3. Expand the contoso.com domain tree and navigate to the Users container.

4. Right-click on the Users container and select New > User from the context menu.

5. In the New Object - User dialog box, enter "Admin1" as the first name and last name of the user.

6. In the User logon name field, enter "Admin1@contoso.com".

7. Create a strong password for the user and select the options to require the user to change their password at the next logon and to make the password never expire.

8. Click Next and then Finish to create the user account.

9. Log in to the SRV1 server using an account that has administrative privileges.

10. Open the Local Users and Groups management console.

11. Right-click on the Users container and select New User from the context menu.

12. In the New User dialog box, enter "Admin1" as the user name and enter a strong password for the user.

13. Click Create to create the user account.

14. Right-click on the user account and select Properties from the context menu.

15. Click on the Member Of tab and then click on the Add button.

16. In the Select Groups dialog box, type "Backup Operators" in the object names field and click on the Check Names button.

17. Once the group is found, click OK to add the user to the Backup Operators group.

18. Click OK to close the Properties dialog box.

19. Now, the Admin1 user can back up and restore files on SRV1 without having unnecessary permissions, as the Backup Operators group provides the minimum privileges needed to perform these tasks.