Running backupvss as a non-admin and handling privileged snapshot operations

When Domino runs with non-administrative user account, the associated backupvss process also runs without administrative privileges. Consequently, operations that require elevated permissions—such as mounting or unmounting snapshots for autorecovery—fail due to insufficient access rights.

To resolve this issue, a dedicated Windows service was developed to handle only the snapshot mount and unmount operations. This service is designed to run with administrative privileges and must be started by a user with administrator rights. By delegating these specific tasks to a privileged service, the snapshot operations required for autorecovery can be executed reliably, even when Domino itself runs as a non-admin user.

Running the helper service

To run the helper service, execute the service binary with the mandatory -p argument, which specifies the path where the service log will be stored.

If no additional command is provided after the -p argument, the service automatically installs and registers itself.

Example:
vssadmin_service.exe -p "C:\Domino\Data"

Supported command arguments

The following table outlines the supported command-line arguments for the service executable.

Note:

The service executable must be run with administrative privileges. The -p argument is mandatory and should specify the path where the service log will be stored.

Table 1. List of commands and their descriptions
Command Description
-i / -install Installs the service.
-u / -uninstall Uninstalls the service.
-s / -start Starts the installed service.
x / -stop Stops the installed service.
-t / -status Displays the status of the installed service.
-r / -restart Restarts the installed service.
-h / -? Displays the help message.
Example:
vssadmin_service.exe -p "C:\Domino\Data" -i
vssadmin_service.exe -p "C:\Domino\Data" -install

Troubleshooting

If the vssadmin_service is not installed or not running, one of the following errors is displayed. To resolve this issue, install or start the service as appropriate before taking a VSS snapshot.

In normal mode



In verbose/debug mode