Hi all,

I'm trying to learn BE 2010 so as my main learning resource I am reading this obscenely large 2176 page BE Admin Guide. Only about 110 pages in so far (but have frequently skipped ahead to other areas when it refers to something and gives an in-document link for more info).  So currently I am skipped ahead to Pg 337 which discusses Windows User Rights you need to assign to the BE service and logon accounts.  It says:

Required user rights for backup jobs
To perform any backup operations, the following Windows user rights are required
for the service account and any Backup Exec logon accounts:
¡ Act as part of the operating system
¡ Create a token object.
¡ Back up files and directories.
¡ Restore files and directories.
¡ Managed auditing and security log.
¡ Logon as a batch job (only for Windows Vista and later).
For more information about user rights in Windows operating systems, see your
Microsoft documentation.

LOL "refer to Microsoft documentation", as though the answer is that simple.  :)  I am hoping somebody can help.  So far the best I can piece together is that I need to gpedit my Default Domain Policy, going under Policies > Computer Configuration > Windows Settings > Security Settings > Local Policies> User Rights Assignment an editing the relevant objects therein. 

My problem is that I am not entirely sure this is what I should do, nor do I know how to verify if anything is done correctly.  Will backup jobs just not work if I don't do this User Rights Assignement?  You'd think so but the test backup job I ran today ran fine yet none of these items are configured in the GPO....I know  afew of them are assignec by default to certain groups (Backup Operators, Administrators, etc.) but some of them have no default assignment (such as Act as part of the operating system). 
 

Many thanks for any help.  I expect this admin guide will cause me to post a lot of questions :)