Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Veritas NetBackup™ Administrator's Guide, Volume I
  3. Section II. Configuring hosts
  4. Configuring Host Properties
  5. Configuration options for NetBackup servers
  6. DISALLOW_SERVER_FILE_WRITES option for NetBackup servers and clients
Veritas NetBackup™ Administrator's Guide, Volume I

DISALLOW_SERVER_FILE_WRITES option for NetBackup servers and clients

The DISALLOW_SERVER_FILE_WRITES entry prevents the NetBackup server from creating files on the NetBackup server or client. This entry prevents NetBackup servers from remotely performing restores or remotely changing client configurations.

For further information on the commands that are described in the following tables, see the NetBackup Commands Reference Guide.

Table: DISALLOW_SERVER_FILE_WRITES information (in the NetBackup Administration Console or command line)

Where to use

How to use

Notes when used on local host

Notes when used remotely

Default behavior

NetBackup Administration Console

NetBackup Management > Host Properties > Double-click on master server, media server, or client > Universal Settings > Allow server file writes

Allow server file writes can be set on an all-in-one host that contains the master server, media server, and client.

If the media server and client are not on the master server, you must use the DISALLOW_ SERVER_FILE_WRITES entry on the media server or client.

Allow server file writes cannot be set from the NetBackup Administration Console. On the media server or client, use the DISALLOW_SERVER_ FILE_WRITES entry. See Table: bpsetconfig and nbsetconfig examples for remote host.

The server writes are allowed.

NetBackup Backup, Archive, and Restore Windows client interface

File > NetBackup Client Properties > Allow server-directed restores

Allow server-directed restores can be used only from a Windows computer.

Allow server-directed restores cannot be used remotely. On the media server or client, use the DISALLOW_ SERVER_FILE_WRITES entry. See Table: bpsetconfig and nbsetconfig examples for remote host.

The server-directed restores are allowed.

bpsetconfig or bpgetconfig (use only on master server or media server)

nbsetconfig or nbgetconfig (use on master server, media server, or client)

For command examples, see Table: bpsetconfig and nbsetconfig examples for local host and Table: bpsetconfig and nbsetconfig examples for remote host.

DISALLOW_SERVER_ FILE_WRITES can be enabled and disabled.

bpsetconfig and bpgetconfig can be run only from the master server or media server.

Note:

DISALLOW_SERVER_ FILE_WRITES = No using bpsetconfig or nbsetconfig cannot be set remotely (can only be set locally).

DISALLOW_SERVER_ FILE_WRITES = No

Table: bpsetconfig and nbsetconfig examples for local host

Command

Command examples for local host

bpsetconfig

From the local master server or media server

On Windows:

install_path\NetBackup\bin\admincmd>bpsetconfig

bpsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

bpsetconfig> <ctl-Z>

On UNIX:

/usr/openv/netbackup/bin/admincmd/bpsetconfig

bpsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

bpsetconfig> <ctl-D>

nbsetconfig

From the local master server, media server, or client

On Windows:

install_path\NetBackup\bin>nbsetconfig

nbsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

nbsetconfig> <ctl-Z>

On UNIX:

/usr/openv/netbackup/bin/nbsetconfig

nbsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

nbsetconfig> <ctl-D>

Table: bpsetconfig and nbsetconfig examples for remote host

Command

Command examples for remote host

bpsetconfig

From the remote master server or media server

On Windows:

install_path\NetBackup\bin\admincmd>bpsetconfig -h host

bpsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

bpsetconfig> <ctl-Z>

On UNIX:

/usr/openv/netbackup/bin/admincmd/bpsetconfig -h host

bpsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

bpsetconfig> <ctl-D>

nbsetconfig

From the remote master server, media server, or client

On Windows:

install_path\NetBackup\bin>nbsetconfig -h host

nbsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

nbsetconfig> <ctl-Z>

On UNIX:

/usr/openv/netbackup/bin/nbsetconfig -h host

nbsetconfig> DISALLOW_SERVER_FILE_WRITES = Yes

nbsetconfig> <ctl-D>

Feedback

Was this page helpful?
Previous

DISALLOW_CLIENT_RESTORE option for NetBackup servers

Next

EAT_VERBOSE option for NetBackup servers and clients

Feedback

Was this page helpful?