Configuration requirements to backup or restore Exchange 2007 and to perform Exchange GRT (Granular Recovery Technology) backups or restores

Article:TECH51740

Created: 2010-01-13

Updated: 2011-12-15

Article URL http://www.symantec.com/docs/TECH51740

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

Configuration requirements to backup or restore Exchange 2007 and to perform Exchange GRT (Granular Recovery Technology) backups or restores

Cause

The account used to backup and restore Exchange 2007 server does not meet the required credentials.

Solution

Basic requirements in order to connect to and back up the Exchange 2007 Information Store Databases using Backup Exec

When Exchange is installed to a separate server than Backup Exec, the following is required:

The Backup Exec Remote Agent for Windows Servers is installed on the Exchange 2007 server(s).

The Microsoft Exchange 2007 Management Tools are installed on the Backup Exec media server. The Backup Exec Media Server must have the same version of the Management Tools that is currently installed on the Exchange Server. This can be achieved by performing a custom installation of the Exchange Service Packs below.

32 bit Media Servers - (Note: Microsoft Windows 2008 x32 was not supported in the original release. The Exchange 2007 Management Tools added support for 32 bit systems after Exchange 2007 SP1 release.)

64 bit Media Servers

Service Pack 3 -
(NOTE: Service Pack 3 Management Tools must be installed to support Backup Exec Media Servers running on Windows 2008 R2, as Exchange 2007 did not support Windows 2008 R2 prior to this release.)

Logon requirements in order to connect to and back up the Exchange 2007 Information Store Databases using Backup Exec

Ensure the Backup Exec "Logon Account" (System Logon Account by default at Network > Logon Account in the Backup Exec console) being used to backup Exchange is:

A member of Domain Administrators.
Is an explicit member of the Local Administrators group of the Exchange 2007 server (implied membership via Domain Admin group may not be sufficient, unless Exchange server is also a Domain Controller).
Exchange Organization Administrator role within Exchange.
BE logon account should be setup using domain credentials (e.g. Domain\Username)

The Backup Exec Support Tool can test the settings above for a logged in user by analyzing your environment for you.

Click here to download the tool: http://www.symantec.com/docs/TECH135126

For further details on creating a new account with the proper permissions, refer to the following instructions:

1. Go to Active Directory Users and Computers and go to the Users directory. Right-click on the Administrator account and select copy (Figure 1) and create an account for BACKUP EXEC.

Figure 1

2. Go to Network, Logon Accounts within the Backup Exec console. Click New... and enter the details of the account created in #1.

Figure 2

3. Open the Exchange Management Console.

4. In the Exchange Management Console, select Organization Configuration. (Figure 3)

Figure 3

5. Right click on Organization Configuration and select Add Exchange Administrator. (Figure 4)

Figure 4

6. On the Add Exchange Administrator page, click Browse and select the user that you want to delegate control to.

7. Select the Exchange Organization Administrator Role radial button.

8. Click OK. Click Add.

9. On the Completion page verify that the delegation was successful and click Finish.

10. Define the jobs in Backup Exec by using the Resource Credentials pane to use the newly created "Logon Account".

NOTE: The requirements listed above only pertain to the basic configuration required to connect to and backup the Exchange 2007 Information Store databases, storage groups, etc... for the purpose of restoring these items in their entirety.

Additional requirements to utilize the functionality of GRT (Granular Restore Technology) to backup or restore Exchange 2007

1. Microsoft Exchange Server MAPI Client and Collaboration Data Objects (MAPI/CDO) must be installed on the Exchange 2007 Server only.

Download the MAPI/CDO 1.2.1 Package from Microsoft Download Center

2. The Exchange Administrator Account Backup Exec uses to attach to the Exchange Server must have the following:

A uniquely named mailbox within the Exchange organization that is getting backed up
The first five characters of that mailbox name must be unique within the Exchange organization.
The mailbox for that account cannot be disabled or hidden from the Global Address List
This mailbox must also have sent and received mail to and from it.

For more information on the above requirements, review the following documents:

- How to confirm that an Exchange mailbox name is unique within the Exchange organization when configuring Backup Exec to backup mailboxes or if a GRT (Granular Restore Technology) based backup does not display individual mailboxes for restore http://www.symantec.com/docs/TECH24691

- How to remove the "Hidden" attribute from Exchange 2000 and Exchange 2003 mailboxes so that the mailboxes will be available to the Global Address List for backup purposes

http://www.symantec.com/docs/TECH17737

Exchange 2007 and Outlook 2007 cannot be installed on the same Windows 2003 Server.
For GRT Backups to tape, mailbox users must reside in the same domain as the Exchange Server. For more information, review the following:

- Exchange Granular Recovery Technology (GRT) backup to tape does not display the mailboxes in the restore selections for users that reside in a domain other than the Exchange server(s) domain. http://www.symantec.com/docs/TECH56680

- For GRT Backups to disk (B2D), the Backup to Disk Test Tool - B2Dtest.exe should be run on the target disk first to ensure the basic file level functionality requirements are met. For more information, review and download the following:

http://www.symantec.com/docs/TECH69107 - Backup Exec Backup to Disk Test Tool - B2Dtest.exe

NOTE: If any of the above requirements cannot be confirmed, configured, etc... and there are any job failures or other issues, it is recommended to run at least one full test backup of Exchange with the Granular Recovery Option deselected prior to running another GRT Backup or opening a case with Symantec Technical Support.