What rights does the Backup Exec service account need?

What rights does the Backup Exec service account need?

Article: 100015385
Last Published: 2018-05-18
Ratings: 5 4
Product(s): Backup Exec

Problem

What rights does the Backup Exec service account need?

Solution

All Backup Exec services on the media server run in the context of a user account configured for Backup Exec system services. This account can be created during the Backup Exec installation, or an existing user account can be used. To create a service account for Backup Exec during installation, supply a user name and password when prompted

If this computer is in a domain, enter a Domain Administrators account, or an equivalent account that is part of the Domain Admins group. In the Domain list, select or enter the Domain name.

If this computer is in a workgroup, enter an Administrators account, or an equivalent account that is part of the Administrators group on the computer. In the Domain list, select or enter the computer name.

Note:   Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.
 
Backup Exec account must have the following rights:

Act as part of the operating system (Windows 2000 only)
Backup files and directories
Create a token object
Logon as a batch job (Windows 2008 and higher) 
Logon as a service
Manage auditing and security log
Restore files and directories
Take ownership of files and other objects

Note: "Create a token object" right is not required in Backup Exec 2014 and higher.

Also make sure the account is not added under:

Deny logon as a service
Deny logon as a batch

This is important because the DENY takes precedence over allow. 

The account should have its Primary role as Domain Admin in Active Directory.
 

Please contact your local server administrator to configure above mentioned rights or refer below given Microsoft website :

technet.microsoft.com/en-us/library/cc784323(v=ws.10).aspx

technet.microsoft.com/en-us/library/cc739028(v=WS.10).aspx

Please review https://www.veritas.com/support/en_US/article.000007290 for other rights required for each Agent / Option being used in Backup Exec.

 

 

Was this content helpful?