What rights does the Backup Exec service account need?

Problem

What rights does the Backup Exec service account need?

Solution

All Backup Exec (tm) services on the media server run in the context of a user account configured for Backup Exec system services. This account can be created during the Backup Exec installation, or an existing user account can be used. To create a service account for Backup Exec during installation, supply a user name and password when prompted

If this computer is in a domain, enter a Domain Administrators account, or an equivalent account that is part of the Domain Admins group. In the Domain list, select or enter the Domain name.

If this computer is in a workgroup, enter an Administrators account, or an equivalent account that is part of the Administrators group on the computer. In the Domain list, select or enter the computer name.

Note:  Due to security implementations in Microsoft Small Business Server, the service account must be Administrator.
 
 
Backup Exec account must have the following rights:

Act as part of the operating system (Windows 2000 only)
Backup files and directories
Create a token object
Logon as a batch job (Windows 2008 and higher) 
Logon as a service
Manage auditing and security log
Restore files and directories
Take ownership of files and other objects

Note: "Create a token object" right is not required in Backup Exec 2014 and higher.

Also make sure the account is not added under:

Deny logon as a service
Deny logon as a batch

This is important because the DENY takes precedence over allow. 

The account should have its Primary role as Domain Admin in Active Directory.
 

Please contact your local server administrator to configure above mentioned rights or refer below given Microsoft website :

technet.microsoft.com/en-us/library/cc784323(v=ws.10).aspx

technet.microsoft.com/en-us/library/cc739028(v=WS.10).aspx

Please review www.symantec.com/docs/TECH130255 for other rights required for each Agent / Option being used in Backup Exec.

 

 

Terms of use for this information are found in Legal Notices.

Search

Survey

Did this article answer your question or resolve your issue?

No
Yes

Did this article save you the trouble of contacting technical support?

No
Yes

How can we make this article more helpful?

Email Address (Optional)