How to install or upgrade Veritas Enterprise Vault, Compliance Accelerator and Discovery Accelerator without logging in as the Vault Service Account

Description

Customers' security rules sometimes require all service accounts to be highly restricted to where the Vault Service Account (VSA) is not allowed to be used to upgrade Veritas Enterprise Vault (EV), Compliance Accelerator (CA) and Discovery Accelerator (DA).  This article provides possible workarounds that will allow you to complete the installation or upgrade while logged on as a non-VSA account. Note that the VSA's credentials are still required to run the wizards and the database upgrades - this is simply a way to avoid the need for the VSA to be logged into the Windows session.

Note this is NOT the recommended method of installing any EV/CA/DA applications. It is only being presented as a possible workaround in the event the VSA is restricted. The proper and recommended installation methods are described in the version-specific guides for the products. See Related Articles below.

For EV:

1. For EV, navigate to the setup executable on the installation media, at .\Veritas Enterprise Vault\Server\x64\setup (x64).exe. Hold Shift and right-click the executable, and choose Run as different user. Supply the credentials of the VSA. Work through the wizard in the context of the VSA.
2. Use the Services MMC snap-in to ensure the login account for all of the EV services still lists the VSA (correct as needed).
3. Right-click on the Enterprise Vault Management Shell icon, navigate to the More options and select Run as different user.
4. Enter the VSA's credentials to get a PowerShell (PS) session running as the VSA.
5. Run the Start-EVDatabaseUpgrade PS command to upgrade the EV databases.

For CA/DA:

1. On the Accelerator server, run the setup wizard in the context of the VSA. Shift-right-click on .\Veritas Enterprise Vault Compliance Accelerator\Server\setup.exe or .\Veritas Enterprise Vault Discovery Accelerator\Server\setup.exe and Run as different user.
2. On the Accelerator server, to upgrade the CA/DA databases, right click on the Windows PowerShell icon, then select the Run as a different user option.
3. Enter the VSA's credentials when prompted to allow running PS as the VSA.
4. Enter and run the following command in the PS window:
   start -Verb runas -FilePath 'C:\Program Files\Internet Explorer\iexplore.exe'
5. An Internet Explorer window will open with the VSA's credentials.  Enter the EVBAAdmin site's URL (usually http://localhost/evbaadmin) and proceed with the upgrades per the upgrade instructions.