What rights does the Backup Exec service account need?

Article:TECH23689

Created: 2010-01-02

Updated: 2013-02-28

Article URL http://www.symantec.com/docs/TECH23689

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

What rights does the Backup Exec service account need?

Solution

All Backup Exec (tm) services on the media server run in the context of a user account configured for Backup Exec system services. This account can be created during the Backup Exec installation, or an existing user account can be used. To create a service account for Backup Exec during installation, supply a user name and password when prompted

If this computer is in a domain, enter a Domain Administrators account, or an equivalent account that is part of the Domain Admins group. In the Domain list, select or enter the Domain name.

If this computer is in a workgroup, enter an Administrators account, or an equivalent account that is part of the Administrators group on the computer. In the Domain list, select or enter the computer name.

Note: Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.

Backup Exec account must have the following rights:

Act as part of the operating system
Backup files and directories
Create a token object
Logon as a batch job (All Windows 2008 version only)
Logon as a service
Manage auditing and security log
Restore files and directories
Take ownership of files and other objects

Also make sure the account is not added under:

Deny logon as a service
Deny logon as a batch

This is important because the DENY takes precedence over allow.

The account should have its Primary role as Domain Admin in Active Directory.

Please contact your local server administrator to configure above mentioned rights or refer below given Microsoft website :

technet.microsoft.com/en-us/library/cc784323(v=ws.10).aspx

technet.microsoft.com/en-us/library/cc739028(v=WS.10).aspx

Please review www.symantec.com/docs/TECH130255 for other rights required for each Agent / Option being used in Backup Exec.