Where I work, we have a system of backup where Microsoft DPM 2007 is used to backup to drives, and Norton Backup is used nightly to back up to magnetic tape. DPM runs in auto mode and keeps 7 days or so of records, two replications a day. Domain admins have access to DPM, but we have a separate individual with no machine rights swap tapes daily. They have access to the physical machine (which is by itself, in a different part of the facility than our data center). In addition, the tapes are not in the same room as the backup server, but in a locked cabinet in a secure office. The admins could get access to the tapes if we wanted to, true, but its one more layer of security. We also create one to two WORM tapes a year, of a full data center backup, so even in a mega-catastrophy, we wouldn't be totally wiped out. The whole system runs like a well oiled machine because all the players know their roles.