What rights does the Backup Exec service account need?

What rights does the Backup Exec service account need?

Article: 100015385
Last Published: 2020-08-28
Ratings: 4 3
Product(s): Backup Exec


What rights does the Backup Exec service account need?


All Backup Exec services on the media server run in the context of a user account configured for Backup Exec system services. This account can be created during the Backup Exec installation, or an existing user account can be used. To create a service account for Backup Exec during installation, supply a user name and password when prompted

The username being supplied should be a part of local administrators group.

Note:   Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.
Backup Exec account must have the following rights:

Act as part of the operating system (Windows 2000 only)
Backup files and directories
Create a token object
Logon as a batch job (Windows 2008 and higher) 
Logon as a service
Manage auditing and security log
Restore files and directories
Take ownership of files and other objects

Note: "Create a token object" right is not required in Backup Exec 2014 and higher.

Also make sure the account is not added under:

Deny logon as a service
Deny logon as a batch

This is important because the DENY takes precedence over allow. 

The account should be a part of the local administrators group.

Please contact your local server administrator to configure above mentioned rights or refer below given Microsoft website :



Please review https://www.veritas.com/support/en_US/article.000007290 for other rights required for each Agent / Option being used in Backup Exec.



Was this content helpful?