Elevate Windows Backup on Windows Vista and Windows 7

Elevating the built-in Windows Backup utility on Windows Vista and Windows 7 operating systems can be accomplished by:

(Prior to Application Control 7.1 SP1)

Create a new File Specification Filter:
1. On the Policies tab, navigate to Policies > Arellia > Application Control Tasks > Application Control Filters > Dynamic Filters.
2. Right-click and select New > File Specification Filter.
3. File name: SDCLT.EXE
4. File path: %SYSTEMROOT%\System32
Create a new ACS policy:
1. Navigate to Policies > Arellia > Application Control Policies > Application Control Tasks.
2. Right-click and select New > Elevate Process Rights.
3. Click on the Applications field and select the File Specification Filter created in step 1.
4. Select the target computers to apply to.
5. Save your changes.

(In Application Control 7.1 SP1 or later)

From the Home tab in the Arellia Security Manager console, on the upper right, click Create Application Control Policy.
Select Elevate Privileges, click Next.
Select System Options, click Next.
Check the box named Backup the System.
Select the targets to apply this to.
Click Finish.

Handy Tip

Due to how Windows bypasses process launching in certain situations, you may need to create a shortcut on the managed computers to ensure proper process elevation (applies to all versions of ACS, regardless of the method chosen above). To do this:

Right-click in the folder (or desktop) on your reference managed computer and select New > Shortcut.
In the box, type "sdclt.exe /BLBBACKUPWIZARD" and click Next.
Give it a name such as Backup System then click Finish.
You can place this shortcut within the Start Menu, on the Desktop or any other place that your users will find it. Launching the backup utility in this fashion will allow only the backup feature to be properly elevated by this policy.