Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Issues with Backup User account

Created: 10 Jun 2009 • Updated: 10 Jun 2009 | 3 comments
Language Translations
TonySterling's picture
+4 4 Votes
Login to vote

In EV 8 the documentation has the following:

Enterprise Vault backup mode
Enterprise Vault lets you place vault stores and index locations in backup mode for the duration of a data backup. Enterprise Vault does not write any data into vault store partitions or index locations while they are in backup mode. However, services to users are maintained while vault stores and index locations are in backup mode. Users can continue to search, and retrieve items from their archives.

You can set backup mode on vault stores and index locations in the Enterprise Vault administration console. You can also use PowerShell cmdlets in the Enterprise Vault Management Shell to set, clear, and report on vault store and index location backup mode.

See Backup mode cmdlets.

To manage backup mode on vault stores and index locations, your user account must be assigned the storage administrator role.

So if you don't add your back up user account you will see an error like this:

Event ID 4216
Source: Enterprise Vault Category Storage Management
Type: Warning
Description:
Access denied. user is not in a role that allows '{STO} Can manage Vault Store Backup mode.
User:

So you then go and add your account to Storage Administrator role using these instructions:

1. Open the Enterprise Vault Administrator's Console.

2. Right click on the Directory level and click Authorization Manager.

3. Expand to the Role Assignments container and select Storage Administrator.

4. Select the Action menu option and click Assign Windows Users and Groups.

5. Enter the account that is now used to run backups and click OK. Based on the error message this should be 'Loncfd\loncfdbackup'

6. Select File from the menu option and click Exit.

7. Select Yes to save the Authorization Store to the Directory database.

8. Select OK.

9. Close and re-open the Enterprise Vault Administrator Console.

BUT you then see an event like this:

imagebrowser image

No worries, this is quickly solved.  :)

1. Once again open the Enterprise Vault Administrator's Console.

2. Right click on the Directory level and click Authorization Manager.

3. Expand to the Definitions container and select Role Definitions.

4. Right Click the Storage Administrator and choose Properties and click the Definitions tab.

5. Click Add and then click Task.  Browse down and choose EVT Manage Index Location Backup Mode

6. Click OK and then OK again. Select File from the menu option and click Exit.

7. Select Yes to save the Authorization Store to the Directory database.

8. Select OK.

9. Close and re-open the Enterprise Vault Administrator Console.

imagebrowser image

You should now be all set.

Comments 3 CommentsJump to latest comment

Ralfeus's picture

Should it be done for each Vault server? I have added NT AUTHORITY\SYSTEM as Storage Administrator at one server. Backup software (TSM) could set backup mode for stores at this server though warnings and errors appeared in Event log. But at another servers nothing could be done.

0
Login to vote
AndrewB's picture

great article Tony

Andy Becker | Authorized Symantec Consultant | Trace3 | Symantec National Partner | www.trace3.com

0
Login to vote
imrok's picture

Hi Ralfeues,

   Could you please share with me how you were abel to add NT AUTHORITY\SYSTEM in Authorization Manager as Storage Administrator. I should do the sam but for some reason, the local system account is not found by Authorization Manager. Any ideas?

 

Update:

I was able to add an account, called SYSTEM. I hope this is what I was looking for. Could you please confirm?

Thanks in advance!

Br,

imrok

0
Login to vote