file copy using restore privilege

We have a Windows backup package which presents Virtual Machine backedup filesystems as iSCSI mounts. Helpdesk users need to perform restore operations, which is done by copying files from the mounted point in time filesystem back to the production system. There are various files which the helpdesk people don't have access to, and therefore can't restore. Our security people will not let the helpdesk have increased access.

I think a possible solution is for the helpdesk to use Windows backup/restore privilege to copy the files, but I am not aware of any way for them to browse, select the file and then move it to the target. Is there some sort of Windows Explorer type program which can be set to use the backup API? I can't find anything, having performed rather extensive internet searches.

You have to use Robocopy with a /MIR switch as it will preserve all the NTFS permissions.

https://blogs.technet.microsoft.com/filecab/2008/07/31/robocopy-mir-switch-mirroring-file-permissions/

Robocopy is easily scriptable with PowerShell and has some nice GUI now.

https://gallery.technet.microsoft.com/scriptcenter/PowerShell-Robocopy-GUI-08c9cacb

https://technet.microsoft.com/en-us/library/2006.11.utilityspotlight.aspx