Video Screencast Help

NetBackup 7.1 VSS Snapshot Exchange 2010 Role Requirements

Created: 03 Dec 2013 • Updated: 20 Feb 2014 | 1 comment
This issue has been solved. See solution.

Our Exchange 2010 VSS snapshot backups are occasionally fail and leave the Exchange VSS writers in a failed or 'waiting for completion' state.  Failures coincide with Event Log entries regarding RBAC rights failures:

Application\MSExchange RBAC (17)

Time: 12/2/2013 9:39:57 PM. Event description: (Process w3wp.exe, PID 1648) "RBAC authorization returns Access Denied for user Reason: No role assignments associated with the specified user were found on Domain Controller"

Should the client run as the backup service account instead of SYSTEM?  The documentation doesn't state anything about requiring it AFAIK.


NetBackup 7.1

Exchange 2010 SP3 RU2

Windows 2008 R2 SP1

Operating Systems:

Comments 1 CommentJump to latest comment

SymTerry's picture


By default, this service runs as Local System. You may need to change it to another account that has the right permission to Exchange. Setup the account in AD and set the service to run as that account. 

If you receive an "Access is denied" error when you perform a restore, you may need to run the following commands:

New-ManagementRole -Name EWSImpersonationRole -Parent ApplicationImpersonation
New-ManagementRoleAssignment -Role EWSImpersonationRole -User Administrator   
where Administrator is the alias of the Active Directory account you want to use.
If needed, refer to HOWTO47408 for the steps on configuring the NetBackup service account (Exchange 2010).