Requirements for the Backup Exec Service Account (BESA).

Article:TECH36718  |  Created: 2010-01-01  |  Updated: 2014-04-09  |  Article URL http://www.symantec.com/docs/TECH36718
Article Type
Technical Solution

Product(s)

Issue



Requirements for the Backup Exec Service Account (BESA).


Solution



All Backup Exec Services on a media server, with the exception of the Backup Exec Remote Agent, run in the context of a user account configured for the Backup Exec services.
 
The Backup Exec Service Account (BESA) requires the following User Rights in group policy and group memberships:

User rights requirements:
  • Act as a part of Operating System ( Only for Windows Server 2000 ).
  • Create a token object.
  • Log on as a service.
  • Logon as a batch job.
  • Manage auditing and security log.
  • Backup files and directories.
  • Restore files and directories.
Group Memberships or equivalent access:
  • Domain Admins or Administrators.
  • Backup Operators.

Due to security implementations in Microsoft Small Business Server, the service account must be " DomainName\Administrator " account.

Refreshes local and Active Directory-based Group Policy settings, including security settings by executing "gpupdate" command.

 

For a complete list of User Rights and their descriptions, please see : msdn.microsoft.com/en-us/library/ms878695


Supplemental Materials

Description

Requirements for the Backup Exec Service Account (BESA).



Legacy ID



274341


Article URL http://www.symantec.com/docs/TECH36718


Terms of use for this information are found in Legal Notices