Requirements for the Backup Exec Service Account (BESA).

Article:TECH36718  |  Created: 2010-01-01  |  Updated: 2014-04-09  |  Article URL
Article Type
Technical Solution



Requirements for the Backup Exec Service Account (BESA).


All Backup Exec Services on a media server, with the exception of the Backup Exec Remote Agent, run in the context of a user account configured for the Backup Exec services.
The Backup Exec Service Account (BESA) requires the following User Rights in group policy and group memberships:

User rights requirements:
  • Act as a part of Operating System ( Only for Windows Server 2000 ).
  • Create a token object.
  • Log on as a service.
  • Logon as a batch job.
  • Manage auditing and security log.
  • Backup files and directories.
  • Restore files and directories.
Group Memberships or equivalent access:
  • Domain Admins or Administrators.
  • Backup Operators.

Due to security implementations in Microsoft Small Business Server, the service account must be " DomainName\Administrator " account.

Refreshes local and Active Directory-based Group Policy settings, including security settings by executing "gpupdate" command.


For a complete list of User Rights and their descriptions, please see :

Supplemental Materials


Requirements for the Backup Exec Service Account (BESA).

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices